This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zow12LUTBy_3qyG06ZOCKdHJqn8.roa File: Zow12LUTBy_3qyG06ZOCKdHJqn8.roa (raw, json) Hash identifier: biSvigo8gsY7XmhMCEBX0w+8haOqW5LzXbvXXBHgi7o= Subject key identifier: 66:8C:35:D8:B5:13:07:2F:F7:AB:21:B4:E9:93:82:29:D1:C9:AA:7F Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AD4AA66B40660AEE1CD908CA224317CFB Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zow12LUTBy_3qyG06ZOCKdHJqn8.roa Signing time: Sun 30 Nov 2025 12:08:48 +0000 ROA not before: Sun 30 Nov 2025 12:08:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 45.128.76.0/24 maxlen: 24 45.130.125.0/24 maxlen: 24 45.158.187.0/24 maxlen: 24 185.126.66.0/24 maxlen: 24 193.8.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 22:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d4:aa:66:b4:06:60:ae:e1:cd:90:8c:a2:24:31:7c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 30 12:08:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=668c35d8b513072ff7ab21b4e9938229d1c9aa7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:31:63:28:db:e7:0e:99:4f:8f:81:c1:4c:f1: 20:06:1d:61:3c:12:a1:ec:d1:00:38:21:c0:33:d0: ff:56:95:ef:ec:59:75:32:0f:a7:6f:bc:03:72:71: 95:6c:e8:d4:5a:9b:e4:3e:f3:56:a1:1e:32:15:4e: f3:07:06:a3:2a:c0:38:d1:b1:6e:ce:3b:bb:8c:15: ea:7c:d4:18:22:09:08:d4:c9:b5:ba:50:20:a4:f8: 4e:e1:f2:c1:6f:d8:7c:f0:01:96:38:a3:75:f3:3d: 62:41:c5:df:c4:3f:d1:9c:a3:3f:49:96:1a:1c:41: 6c:d9:1a:0b:73:c4:6d:2f:cd:1f:fd:10:ce:71:9f: e8:ca:85:67:88:38:d0:78:72:79:a2:b9:a8:85:9f: ad:ff:ed:d9:82:07:44:1f:e5:84:be:d1:a5:2d:64: 84:fc:bc:21:12:9d:7d:6d:f7:ac:8e:44:f7:76:23: a0:58:f3:6c:d0:17:cf:63:21:56:ca:39:1d:07:67: 19:29:57:c9:4a:f8:06:9d:c6:0d:d7:7c:c0:ee:f4: a0:34:bc:d3:dc:0b:b7:1d:c5:21:14:5d:8a:29:2d: b0:b2:7b:96:14:79:c1:2a:4c:a7:4a:d2:ef:a6:af: 57:b1:13:ab:c7:3d:03:fb:ca:5f:3e:40:c6:11:ed: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8C:35:D8:B5:13:07:2F:F7:AB:21:B4:E9:93:82:29:D1:C9:AA:7F X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zow12LUTBy_3qyG06ZOCKdHJqn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.76.0/24 45.130.125.0/24 45.158.187.0/24 185.126.66.0/24 193.8.231.0/24 Signature Algorithm: sha256WithRSAEncryption 79:fd:05:63:05:d7:4c:d1:26:ff:66:4b:96:e9:13:e6:49:25: 66:0d:bb:e3:83:99:14:5c:32:5b:1e:f2:69:27:5f:de:8a:5c: 1a:84:0f:17:03:a4:f8:82:dd:88:21:ac:46:a1:f1:1a:c9:3a: 11:23:5d:08:b6:39:74:b3:df:cb:2c:1f:1a:73:71:61:9a:b5: cf:04:45:fc:0e:a1:53:a0:54:41:be:93:7a:4c:55:19:23:18: 37:60:bc:74:a7:cc:e9:d7:f9:d5:51:86:1d:34:4d:a0:30:b3: 5b:0c:92:96:da:e2:ed:8d:59:7a:58:09:49:7c:89:11:85:43: ce:52:e5:0e:bc:fd:15:0f:5e:b0:f8:22:51:0e:85:9e:28:e9: 4b:cf:70:a0:a6:77:35:da:4e:dd:b0:11:83:c6:14:20:38:df: dc:ac:80:7d:2a:94:f8:60:ac:c0:03:81:9c:2e:da:b9:f7:ae: 62:99:7f:9f:80:1e:e3:ca:c2:52:84:85:08:95:60:23:4f:a9: 84:9a:4b:48:0f:cc:f8:88:19:da:97:d2:01:64:2d:21:17:ad: 39:0b:56:bc:cf:a0:fe:b2:86:01:c4:50:d2:04:1a:84:76:05: 3b:08:be:06:2e:4f:44:88:9b:9d:28:a1:8e:12:3a:a2:2c:b7: 66:76:0e:10 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrUqma0BmCu4c2QjKIkMXz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTMwMTIwODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjhjMzVkOGI1MTMwNzJmZjdhYjIxYjRlOTkzODIyOWQxYzlhYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DFjKNvnDplPj4HBTPEgBh1hPBKh 7NEAOCHAM9D/VpXv7Fl1Mg+nb7wDcnGVbOjUWpvkPvNWoR4yFU7zBwajKsA40bFu zju7jBXqfNQYIgkI1Mm1ulAgpPhO4fLBb9h88AGWOKN18z1iQcXfxD/RnKM/SZYa HEFs2RoLc8RtL80f/RDOcZ/oyoVniDjQeHJ5ormohZ+t/+3ZggdEH+WEvtGlLWSE /LwhEp19bfesjkT3diOgWPNs0BfPYyFWyjkdB2cZKVfJSvgGncYN13zA7vSgNLzT 3Au3HcUhFF2KKS2wsnuWFHnBKkynStLvpq9XsROrxz0D+8pfPkDGEe0W8QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGaMNdi1Ewcv96shtOmTginRyap/MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvWm93MTJMVVRCeV8zcXlHMDZaT0NLZEhKcW44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYBMAwQA LYJ9AwQALZ67AwQAuX5CAwQAwQjnMA0GCSqGSIb3DQEBCwUAA4IBAQB5/QVjBddM 0Sb/ZkuW6RPmSSVmDbvjg5kUXDJbHvJpJ1/eilwahA8XA6T4gt2IIaxGofEayToR I10Itjl0s9/LLB8ac3FhmrXPBEX8DqFToFRBvpN6TFUZIxg3YLx0p8zp1/nVUYYd NE2gMLNbDJKW2uLtjVl6WAlJfIkRhUPOUuUOvP0VD16w+CJRDoWeKOlLz3Cgpnc1 2k7dsBGDxhQgON/crIB9KpT4YKzAA4GcLtq5965imX+fgB7jysJShIUIlWAjT6mE mktID8z4iBnal9IBZC0hF605C1a8z6D+soYBxFDSBBqEdgU7CL4GLk9EiJudKKGO EjqiLLdmdg4Q -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:09 2025 by rpki-client