This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/zijCKbm0k4e2H6mTon0fNc6-Ros.roa File: zijCKbm0k4e2H6mTon0fNc6-Ros.roa (raw, json) Hash identifier: B2EHhBdECJs+teibHga6HQDVkr8SKIJgosCZ5kAJfps= Subject key identifier: CE:28:C2:29:B9:B4:93:87:B6:1F:A9:93:A2:7D:1F:35:CE:BE:46:8B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B07EA89DBEF53985524BFBAF8D216ECCE Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/zijCKbm0k4e2H6mTon0fNc6-Ros.roa Signing time: Wed 10 Dec 2025 10:59:29 +0000 ROA not before: Wed 10 Dec 2025 10:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198154 IP address blocks: 87.236.38.0/24 maxlen: 24 194.26.195.0/24 maxlen: 24 2a05:9080::/48 maxlen: 48 2a05:9080:4::/48 maxlen: 48 2a05:9080:7::/48 maxlen: 48 2a05:9080:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ea:89:db:ef:53:98:55:24:bf:ba:f8:d2:16:ec:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 10 10:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ce28c229b9b49387b61fa993a27d1f35cebe468b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6d:f7:59:4b:5b:55:81:c5:c4:16:e3:5e:7d: 9e:19:ee:69:4a:84:b2:79:e2:4e:48:44:1c:10:ca: 91:08:2f:ba:07:93:7f:4d:a7:65:0c:e3:62:77:dd: d3:87:02:ca:2e:9a:b9:9a:be:9d:1f:6a:2f:5e:41: 81:d5:12:d4:0c:03:52:34:2f:72:df:0b:25:61:33: 36:57:07:62:8c:15:56:aa:6c:b4:72:37:f8:63:b6: 49:cc:fc:54:8d:1c:4b:8a:f3:6e:d1:a9:ea:fc:2d: 04:3a:11:fd:5a:1b:a9:8e:c0:57:24:6d:bf:36:ea: 37:07:7d:82:ad:f4:96:93:82:1b:16:9b:aa:b1:cf: 35:0a:4c:00:2d:18:10:86:c3:f6:2e:a5:28:b2:93: d0:a6:3c:46:52:6b:e8:c2:62:96:d3:18:fa:b1:33: 28:ab:bc:92:57:4b:df:c7:5d:bc:9a:ee:0c:28:71: 95:38:93:90:2e:33:d8:26:17:ed:63:94:25:34:0e: ac:dd:ed:4d:cd:a7:79:ad:c9:91:1d:15:10:29:65: 17:7d:80:6c:9d:dd:aa:de:86:40:c6:12:b7:39:76: 37:26:55:0a:0b:88:1f:42:3d:3b:9f:9f:60:74:5e: 2f:7a:27:29:8f:e6:11:99:16:bb:35:f5:3f:bd:44: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:28:C2:29:B9:B4:93:87:B6:1F:A9:93:A2:7D:1F:35:CE:BE:46:8B X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/zijCKbm0k4e2H6mTon0fNc6-Ros.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.38.0/24 194.26.195.0/24 IPv6: 2a05:9080::/48 2a05:9080:4::/48 2a05:9080:7::/48 2a05:9080:10::/48 Signature Algorithm: sha256WithRSAEncryption 90:a6:0b:f6:17:47:c6:f0:23:07:fa:b9:0e:7c:7a:84:77:d5: 30:9d:ae:e0:f0:d9:67:ba:26:89:05:ce:51:c9:73:fa:ed:34: e4:f9:21:fc:d2:cc:cd:17:92:d3:93:ac:41:21:a3:7c:e3:30: ec:14:d5:3b:92:c8:4c:14:8a:cf:61:96:67:6b:12:6b:22:a3: b9:77:ef:44:1d:1b:70:65:5f:82:2c:46:28:17:1a:57:d4:82: 91:3b:03:a2:f6:8c:b8:0a:81:c5:fb:cb:0b:ef:5a:e6:d8:a5: 6a:10:16:7c:e0:b4:09:ec:d8:71:ce:f9:4a:5b:f2:ed:b1:64: cf:98:19:04:74:77:f8:5d:52:ea:d3:02:40:75:7e:a2:4d:ec: a6:1d:49:9d:65:1d:c2:43:1b:4f:d3:bb:61:7d:bc:20:09:98: cc:e8:74:6c:22:96:32:fe:a1:53:7c:cc:44:19:7c:0c:94:a5: bf:fa:37:26:57:ec:9e:02:63:b9:9f:4f:38:a5:22:39:8d:52: e9:dc:60:6e:ff:20:b8:f6:47:04:72:9f:7a:83:0b:39:b3:8e: c4:6b:93:f2:8d:ae:49:12:5d:96:1c:59:bf:ca:30:b8:41:df: 74:5c:ca:f8:e6:4c:cf:c5:06:a8:6c:74:b6:2b:6b:70:fd:2a: 29:69:f2:d0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZsH6onb71OYVSS/uvjSFuzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjEwMTA1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTI4YzIyOWI5YjQ5Mzg3YjYxZmE5OTNhMjdkMWYzNWNlYmU0NjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3233WUtbVYHFxBbjXn2eGe5pSoSy eeJOSEQcEMqRCC+6B5N/TadlDONid93ThwLKLpq5mr6dH2ovXkGB1RLUDANSNC9y 3wslYTM2VwdijBVWqmy0cjf4Y7ZJzPxUjRxLivNu0anq/C0EOhH9WhupjsBXJG2/ Nuo3B32CrfSWk4IbFpuqsc81CkwALRgQhsP2LqUospPQpjxGUmvowmKW0xj6sTMo q7ySV0vfx128mu4MKHGVOJOQLjPYJhftY5QlNA6s3e1Nzad5rcmRHRUQKWUXfYBs nd2q3oZAxhK3OXY3JlUKC4gfQj07n59gdF4veicpj+YRmRa7NfU/vUSsjwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFM4owim5tJOHth+pk6J9HzXOvkaLMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvemlqQ0tibTBrNGUySDZtVG9uMGZOYzYtUm9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDASBAIAATAMAwQAV+wmAwQA whrDMCoEAgACMCQDBwAqBZCAAAADBwAqBZCAAAQDBwAqBZCAAAcDBwAqBZCAABAw DQYJKoZIhvcNAQELBQADggEBAJCmC/YXR8bwIwf6uQ58eoR31TCdruDw2We6JokF zlHJc/rtNOT5IfzSzM0XktOTrEEho3zjMOwU1TuSyEwUis9hlmdrEmsio7l370Qd G3BlX4IsRigXGlfUgpE7A6L2jLgKgcX7ywvvWubYpWoQFnzgtAns2HHO+Upb8u2x ZM+YGQR0d/hdUurTAkB1fqJN7KYdSZ1lHcJDG0/Tu2F9vCAJmMzodGwiljL+oVN8 zEQZfAyUpb/6NyZX7J4CY7mfTzilIjmNUuncYG7/ILj2RwRyn3qDCzmzjsRrk/KN rkkSXZYcWb/KMLhB33RcyvjmTM/FBqhsdLYra3D9Kilp8tA= -----END CERTIFICATE-----Generated at Mon Dec 15 06:04:21 2025 by rpki-client