This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/zF0FOxu0Hh7wSLuHPdPJLYpjGsw.roa File: zF0FOxu0Hh7wSLuHPdPJLYpjGsw.roa (raw, json) Hash identifier: NXCihtn3RZQnpwCFP6jPcZN83HiIf+eHwsx+XPMrrQQ= Subject key identifier: CC:5D:05:3B:1B:B4:1E:1E:F0:48:BB:87:3D:D3:C9:2D:8A:63:1A:CC Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B08DEFB423E57086BA4CD71D261BE5607 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/zF0FOxu0Hh7wSLuHPdPJLYpjGsw.roa Signing time: Wed 10 Dec 2025 15:26:29 +0000 ROA not before: Wed 10 Dec 2025 15:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8708 IP address blocks: 80.91.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:de:fb:42:3e:57:08:6b:a4:cd:71:d2:61:be:56:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Dec 10 15:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc5d053b1bb41e1ef048bb873dd3c92d8a631acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:04:5b:0d:97:69:6f:a1:4b:00:e9:43:d9: bc:20:78:1a:2d:0c:54:a0:ce:06:9d:ef:56:c7:4d: 79:70:4b:0d:ad:26:f6:3d:d7:b2:54:f9:0d:d8:93: 59:35:49:d1:34:e1:eb:c8:f1:45:3c:d9:22:8d:c9: cf:85:e6:a9:ca:63:cf:6d:f8:35:85:fe:03:f7:de: e6:30:76:91:76:d8:e8:d7:79:65:f6:14:43:6a:14: bb:e9:8f:55:08:0e:a9:9a:28:08:c2:4c:76:f1:77: 62:bd:0a:73:0d:36:78:a6:9f:66:c2:d6:e5:c1:4a: 98:04:af:ac:15:9f:15:c4:ca:4f:c0:8c:86:89:19: aa:a7:30:6e:d9:b8:29:1a:fd:d7:61:47:e8:27:09: 66:64:27:b6:27:a0:4d:bd:ed:e3:4c:2a:48:bc:1f: 30:af:14:3c:5e:67:89:48:57:38:7f:47:c3:10:2a: c0:bf:4b:93:80:12:0b:04:e0:05:12:5a:0e:6a:e0: 88:e1:0b:50:be:b4:d6:c6:33:5f:56:3c:69:d5:0b: b6:be:0c:f1:10:b2:d9:cc:ac:fc:fc:9f:f9:92:6e: f2:cd:31:ba:78:45:f5:f8:f7:3b:06:29:30:ce:b2: 07:bf:eb:9c:0d:d1:a2:45:64:8b:06:05:78:0d:a3: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:05:3B:1B:B4:1E:1E:F0:48:BB:87:3D:D3:C9:2D:8A:63:1A:CC X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/zF0FOxu0Hh7wSLuHPdPJLYpjGsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.88.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:73:17:18:57:84:9a:d8:e9:1b:e6:8b:60:1f:12:d6:ab:a4: 92:69:1a:ba:38:16:a0:35:a7:5d:47:c9:a5:3a:c4:a4:2d:3b: 49:a0:68:11:ca:6f:88:70:7f:39:8e:e0:de:40:c2:24:51:61: aa:4e:2d:cc:46:0b:b3:67:c2:ea:3d:ba:95:29:cb:14:7f:e4: a7:f9:4a:94:43:17:0b:cf:94:25:52:8b:da:b1:34:9d:a2:76: 75:60:54:66:cd:8e:f9:bf:cf:5d:af:94:a6:19:b3:c8:3f:b6: 6d:bd:2c:1d:e4:ce:d9:8f:94:88:1c:58:2e:82:0b:28:50:6f: 50:a2:e8:a2:1a:f2:fc:ae:89:42:77:f8:13:96:07:f6:ad:02: 61:f5:c2:ff:5c:d6:d0:bd:02:0e:73:9f:40:8a:7d:f6:e7:fd: 3e:2c:51:eb:3f:17:81:c1:a0:11:6d:f5:c6:d1:55:d1:20:1f: bb:54:83:f9:98:63:50:26:80:b5:8a:f5:59:f5:6c:69:94:1b: e3:6d:be:1f:49:08:e4:dc:09:6f:8b:98:4e:5c:d6:44:67:66: 0e:d5:c8:f5:51:72:c5:67:76:43:8f:a3:d4:6b:71:75:ec:cc: be:34:7d:1c:13:f4:36:4f:40:28:db:5b:1c:23:3d:1c:fb:02: 25:eb:52:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsI3vtCPlcIa6TNcdJhvlYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUxMjEwMTUyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzVkMDUzYjFiYjQxZTFlZjA0OGJiODczZGQzYzkyZDhhNjMxYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPIEWw2XaW+hSwDpQ9m8IHgaLQxU oM4Gne9Wx015cEsNrSb2PdeyVPkN2JNZNUnRNOHryPFFPNkijcnPheapymPPbfg1 hf4D997mMHaRdtjo13ll9hRDahS76Y9VCA6pmigIwkx28XdivQpzDTZ4pp9mwtbl wUqYBK+sFZ8VxMpPwIyGiRmqpzBu2bgpGv3XYUfoJwlmZCe2J6BNve3jTCpIvB8w rxQ8XmeJSFc4f0fDECrAv0uTgBILBOAFEloOauCI4QtQvrTWxjNfVjxp1Qu2vgzx ELLZzKz8/J/5km7yzTG6eEX1+Pc7BikwzrIHv+ucDdGiRWSLBgV4DaPrVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxdBTsbtB4e8Ei7hz3TyS2KYxrMMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvekYwRk94dTBIaDd3U0x1SFBkUEpMWXBqR3N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFtYMA0G CSqGSIb3DQEBCwUAA4IBAQBfcxcYV4Sa2Okb5otgHxLWq6SSaRq6OBagNaddR8ml OsSkLTtJoGgRym+IcH85juDeQMIkUWGqTi3MRguzZ8LqPbqVKcsUf+Sn+UqUQxcL z5QlUovasTSdonZ1YFRmzY75v89dr5SmGbPIP7ZtvSwd5M7Zj5SIHFguggsoUG9Q ouiiGvL8rolCd/gTlgf2rQJh9cL/XNbQvQIOc59Ain325/0+LFHrPxeBwaARbfXG 0VXRIB+7VIP5mGNQJoC1ivVZ9WxplBvjbb4fSQjk3Alvi5hOXNZEZ2YO1cj1UXLF Z3ZDj6PUa3F17My+NH0cE/Q2T0Ao21scIz0c+wIl61LP -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:11 2025 by rpki-client