This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zv-_okZPIrDRipStElkCigtRgeg.roa File: zv-_okZPIrDRipStElkCigtRgeg.roa (raw, json) Hash identifier: JNVKf2SIr57IbhzLJ0/LAZjBIvFL3SPmP2Nqg0OImec= Subject key identifier: CE:FF:BF:A2:46:4F:22:B0:D1:8A:94:AD:12:59:02:8A:0B:51:81:E8 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019AFD1827E12C327F5BA1D474E82A5DB6E9 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zv-_okZPIrDRipStElkCigtRgeg.roa Signing time: Mon 08 Dec 2025 08:33:29 +0000 ROA not before: Mon 08 Dec 2025 08:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 128.0.118.0/24 maxlen: 32 185.115.206.0/24 maxlen: 32 185.133.195.0/24 maxlen: 32 185.137.181.0/24 maxlen: 32 185.146.195.0/24 maxlen: 32 185.205.68.0/24 maxlen: 32 185.207.212.0/24 maxlen: 32 194.113.164.0/24 maxlen: 32 194.113.169.0/24 maxlen: 32 194.113.170.0/24 maxlen: 32 194.113.172.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:18:27:e1:2c:32:7f:5b:a1:d4:74:e8:2a:5d:b6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Dec 8 08:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ceffbfa2464f22b0d18a94ad1259028a0b5181e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:b6:51:97:0d:d6:d1:6f:fa:f3:59:ab:64: e7:80:a3:ae:df:97:31:2d:03:b1:d2:9f:76:da:d8: d9:c7:e1:9f:99:b1:22:1b:46:30:9d:30:d4:27:87: 7b:1e:52:67:6f:2e:3b:74:ad:c1:43:d9:9d:f4:9b: 94:ef:16:1f:00:5a:31:20:a8:53:ed:33:01:43:f5: b9:bc:96:e2:49:c9:1e:6d:ff:2f:cc:0a:67:e9:c2: 43:fa:e3:8e:33:09:00:ba:74:9c:8e:db:a9:66:69: 7a:ad:7b:69:59:d0:3b:71:30:e6:9b:ab:cd:65:80: 2a:b3:c5:70:9b:40:52:f1:ff:a6:84:33:b6:57:81: b1:5a:d2:68:2d:df:cf:a3:e4:c3:38:b0:03:0a:71: 2b:12:36:08:f5:b1:85:a5:e1:26:c9:b1:b8:08:7c: 35:67:95:43:12:53:37:dc:22:e4:e3:f0:28:c7:b4: 98:8e:61:d5:37:5e:a0:72:8b:ec:e1:f9:63:6f:9c: 0b:1d:c9:fb:7b:0d:12:cc:43:25:ea:35:51:b0:98: ff:1d:be:99:0e:c5:a2:26:7a:53:60:67:c9:61:a6: 5e:06:d2:cb:bd:cd:a4:45:0e:31:c0:d6:d6:53:5a: 9d:8d:0f:11:8c:b6:8e:bb:67:82:56:97:83:c8:ad: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FF:BF:A2:46:4F:22:B0:D1:8A:94:AD:12:59:02:8A:0B:51:81:E8 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zv-_okZPIrDRipStElkCigtRgeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.118.0/24 185.115.206.0/24 185.133.195.0/24 185.137.181.0/24 185.146.195.0/24 185.205.68.0/24 185.207.212.0/24 194.113.164.0/24 194.113.169.0-194.113.170.255 194.113.172.0/24 Signature Algorithm: sha256WithRSAEncryption aa:19:f4:ad:68:f5:c2:80:a1:4e:7d:0c:b3:d7:15:8b:ab:c8: fe:12:aa:f9:3a:4f:35:05:ed:3f:4d:d6:e1:90:ca:9c:12:77: dc:ce:39:bf:1b:ff:8e:e6:0e:03:9e:79:72:ad:e7:d2:37:91: 9d:e4:27:70:21:9b:c8:fc:8e:c6:1a:70:1b:8b:03:b7:3e:1d: d6:31:ae:9d:fd:1e:ef:73:94:38:cf:5a:49:24:cf:de:61:db: 2c:88:15:8b:d8:99:23:49:cc:9c:46:33:19:08:b0:85:49:f4: 35:e9:93:c7:fd:c4:a6:4a:fc:e3:32:75:2e:6d:76:ac:6d:a4: eb:6a:d1:26:ea:4f:a3:95:ac:51:f1:97:e7:8d:f4:fd:b9:4b: 9e:48:7c:70:ff:4a:40:02:bf:48:e8:b1:b1:c1:6c:d6:5b:86: 91:de:1e:e8:87:c3:e2:f6:e9:18:fe:4d:d4:03:41:9b:e6:5e: 63:fa:eb:b7:96:e9:e5:42:9d:17:4a:09:f0:92:93:83:50:c3: 01:30:d8:4a:cc:c1:97:f0:3c:e6:d9:45:d1:18:32:ed:b9:2a: 63:1f:dc:53:24:da:09:21:8a:62:dd:38:be:f0:71:8a:a7:d8: 52:35:d1:e8:12:bd:41:47:f8:f2:23:79:69:22:4f:a9:b3:2f: 5d:6f:1a:08 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZr9GCfhLDJ/W6HUdOgqXbbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjUxMjA4MDgzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWZmYmZhMjQ2NGYyMmIwZDE4YTk0YWQxMjU5MDI4YTBiNTE4MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9+2UZcN1tFv+vNZq2TngKOu35cx LQOx0p922tjZx+GfmbEiG0YwnTDUJ4d7HlJnby47dK3BQ9md9JuU7xYfAFoxIKhT 7TMBQ/W5vJbiSckebf8vzApn6cJD+uOOMwkAunScjtupZml6rXtpWdA7cTDmm6vN ZYAqs8Vwm0BS8f+mhDO2V4GxWtJoLd/Po+TDOLADCnErEjYI9bGFpeEmybG4CHw1 Z5VDElM33CLk4/Aox7SYjmHVN16gcovs4fljb5wLHcn7ew0SzEMl6jVRsJj/Hb6Z DsWiJnpTYGfJYaZeBtLLvc2kRQ4xwNbWU1qdjQ8RjLaOu2eCVpeDyK3JJQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFM7/v6JGTyKw0YqUrRJZAooLUYHoMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvenYtX29rWlBJckRSaXBTdEVsa0NpZ3RSZ2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAgAB2AwQA uXPOAwQAuYXDAwQAuYm1AwQAuZLDAwQAuc1EAwQAuc/UAwQAwnGkMAwDBADCcakD BADCcaoDBADCcawwDQYJKoZIhvcNAQELBQADggEBAKoZ9K1o9cKAoU59DLPXFYur yP4Sqvk6TzUF7T9N1uGQypwSd9zOOb8b/47mDgOeeXKt59I3kZ3kJ3Ahm8j8jsYa cBuLA7c+HdYxrp39Hu9zlDjPWkkkz95h2yyIFYvYmSNJzJxGMxkIsIVJ9DXpk8f9 xKZK/OMydS5tdqxtpOtq0SbqT6OVrFHxl+eN9P25S55IfHD/SkACv0josbHBbNZb hpHeHuiHw+L26Rj+TdQDQZvmXmP667eW6eVCnRdKCfCSk4NQwwEw2ErMwZfwPObZ RdEYMu25KmMf3FMk2gkhimLdOL7wcYqn2FI10egSvUFH+PIjeWkiT6mzL11vGgg= -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:06 2025 by rpki-client