This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/zEgMXD8hilpX0ocRMnDjPOAbEd0.roa File: zEgMXD8hilpX0ocRMnDjPOAbEd0.roa (raw, json) Hash identifier: 6z1zOX6waPnbSnLgmKqf9u5nROVfgR5O9TDleO8nh+U= Subject key identifier: CC:48:0C:5C:3F:21:8A:5A:57:D2:87:11:32:70:E3:3C:E0:1B:11:DD Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019A6028A83131D5C3FB1F39933270E68BF5 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/zEgMXD8hilpX0ocRMnDjPOAbEd0.roa Signing time: Fri 07 Nov 2025 21:11:08 +0000 ROA not before: Fri 07 Nov 2025 21:11:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216096 IP address blocks: 109.175.210.0/24 maxlen: 24 109.205.193.0/24 maxlen: 24 158.94.220.0/23 maxlen: 24 158.94.220.0/24 maxlen: 24 158.94.221.0/24 maxlen: 24 2a01:fb00::/32 maxlen: 34 2a01:fb00::/33 maxlen: 34 2a01:fb00::/34 maxlen: 34 2a01:fb01::/32 maxlen: 32 2a01:fb02::/32 maxlen: 34 2a01:fb02::/34 maxlen: 34 2a01:fb02:4000::/34 maxlen: 34 2a01:fb02:8000::/34 maxlen: 34 2a01:fb02:c000::/34 maxlen: 34 2a01:fb03::/32 maxlen: 32 2a01:fb04::/32 maxlen: 32 2a01:fb05::/36 maxlen: 36 2a01:fb05:1000::/36 maxlen: 36 2a01:fb05:2000::/36 maxlen: 36 2a01:fb05:3000::/36 maxlen: 36 2a01:fb05:4000::/36 maxlen: 36 2a01:fb05:5000::/36 maxlen: 36 2a01:fb05:6000::/36 maxlen: 36 2a01:fb05:7000::/36 maxlen: 36 2a01:fb05:8000::/36 maxlen: 36 2a01:fb05:9000::/36 maxlen: 36 2a01:fb05:a000::/36 maxlen: 36 2a01:fb05:b000::/36 maxlen: 36 2a01:fb05:c000::/36 maxlen: 36 2a01:fb06::/32 maxlen: 32 2a01:fb07::/32 maxlen: 34 2a01:fb07::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:60:28:a8:31:31:d5:c3:fb:1f:39:93:32:70:e6:8b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Nov 7 21:11:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc480c5c3f218a5a57d287113270e33ce01b11dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:ab:ca:4a:ef:c5:9b:57:35:98:92:28:1f: 7d:51:0c:fc:bc:df:d1:06:67:18:89:aa:60:a1:44: 5b:8b:e1:5f:e7:93:b8:33:3d:fd:e8:ce:d2:50:02: 1a:40:cb:9a:4b:be:64:81:3c:76:3c:01:ec:2f:0d: ef:d0:cc:68:b9:ab:02:44:eb:7b:84:af:33:91:ec: 00:05:f2:6b:1e:c0:7a:72:ae:5d:87:72:f3:a6:eb: 72:f0:23:5e:e4:90:87:0a:db:a5:a5:b7:23:46:16: 79:94:9b:a5:65:49:ed:df:59:e8:2b:5f:a1:00:b2: 09:cc:07:15:6a:3f:f1:3b:05:56:99:97:fb:b3:ba: 38:dd:dd:86:6b:4d:5d:de:03:15:95:7f:a9:5d:cf: 57:c5:7d:61:ee:e4:22:df:1e:70:ba:ab:c8:37:58: 55:03:52:f0:12:7a:80:d6:20:92:60:63:24:6b:b6: 53:b1:8e:17:61:b8:d7:86:e0:07:cb:a2:54:3c:3c: 97:5f:22:01:6a:33:8f:5f:1a:d6:49:39:58:6d:2e: 8e:76:94:44:ce:15:70:7e:a7:87:dd:a8:d6:4f:f8: 49:cd:2a:49:87:64:bc:62:0a:7a:90:2b:19:68:e9: c2:44:c7:d2:8f:44:87:7d:e9:c0:52:61:d1:fa:68: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:0C:5C:3F:21:8A:5A:57:D2:87:11:32:70:E3:3C:E0:1B:11:DD X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/zEgMXD8hilpX0ocRMnDjPOAbEd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.175.210.0/24 109.205.193.0/24 158.94.220.0/23 IPv6: 2a01:fb00::-2a01:fb05:cfff:ffff:ffff:ffff:ffff:ffff 2a01:fb06::/31 Signature Algorithm: sha256WithRSAEncryption 3b:a7:05:cc:11:44:b2:d1:f0:97:d9:69:96:4c:8c:04:41:af: 70:c3:11:96:af:16:34:0b:91:c1:64:fe:2f:79:d5:30:70:50: a4:43:41:17:4e:dd:ee:1e:c9:4e:7a:88:22:de:46:83:21:c1: 15:21:ae:04:25:b5:8e:79:bd:60:86:14:36:d6:b9:ca:64:78: e1:d8:7e:19:0b:3a:cc:52:ad:0b:66:1d:2a:8f:da:46:ef:63: e0:24:2a:22:4b:35:1a:8d:af:2e:8a:14:bc:44:bc:4b:47:16: 15:89:d0:dc:f4:79:a6:a0:f1:8e:67:35:7b:01:da:23:29:cd: 17:23:a1:89:ef:9e:41:db:9b:90:fd:8a:a4:4e:e1:ea:83:29: df:c2:f0:87:99:7c:60:25:40:21:1f:a5:a4:7c:a5:92:65:84: 4a:57:ea:c1:b5:e4:be:8c:f2:13:6c:0e:97:35:d4:11:c1:3f: 96:a2:46:b9:e3:b1:d4:a9:2e:55:0a:58:a1:0d:c3:16:01:b8: f5:c5:af:dd:9c:e4:78:ba:9f:27:2f:17:ab:f1:f6:d6:59:d3: 57:03:88:4d:bc:ff:c4:70:42:f2:40:58:f6:75:28:92:7c:0f: ba:d6:b1:75:55:82:19:01:26:c6:c8:90:6c:80:50:c4:c4:e0: 68:15:74:68 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZpgKKgxMdXD+x85kzJw5ov1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjUxMTA3MjExMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzQ4MGM1YzNmMjE4YTVhNTdkMjg3MTEzMjcwZTMzY2UwMWIxMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkParykrvxZtXNZiSKB99UQz8vN/R BmcYiapgoURbi+Ff55O4Mz396M7SUAIaQMuaS75kgTx2PAHsLw3v0MxouasCROt7 hK8zkewABfJrHsB6cq5dh3Lzputy8CNe5JCHCtulpbcjRhZ5lJulZUnt31noK1+h ALIJzAcVaj/xOwVWmZf7s7o43d2Ga01d3gMVlX+pXc9XxX1h7uQi3x5wuqvIN1hV A1LwEnqA1iCSYGMka7ZTsY4XYbjXhuAHy6JUPDyXXyIBajOPXxrWSTlYbS6OdpRE zhVwfqeH3ajWT/hJzSpJh2S8Ygp6kCsZaOnCRMfSj0SHfenAUmHR+mgmJQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFMxIDFw/IYpaV9KHETJw4zzgGxHdMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvekVnTVhEOGhpbHBYMG9jUk1uRGpQT0FiRWQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAYBAIAATASAwQAba/SAwQA bc3BAwQBnl7cMB0EAgACMBcwDgMEACoB+wMGBCoB+wXAAwUBKgH7BjANBgkqhkiG 9w0BAQsFAAOCAQEAO6cFzBFEstHwl9lplkyMBEGvcMMRlq8WNAuRwWT+L3nVMHBQ pENBF07d7h7JTnqIIt5GgyHBFSGuBCW1jnm9YIYUNta5ymR44dh+GQs6zFKtC2Yd Ko/aRu9j4CQqIks1Go2vLooUvES8S0cWFYnQ3PR5pqDxjmc1ewHaIynNFyOhie+e QdubkP2KpE7h6oMp38Lwh5l8YCVAIR+lpHylkmWESlfqwbXkvozyE2wOlzXUEcE/ lqJGueOx1KkuVQpYoQ3DFgG49cWv3ZzkeLqfJy8Xq/H21lnTVwOITbz/xHBC8kBY 9nUoknwPutaxdVWCGQEmxsiQbIBQxMTgaBV0aA== -----END CERTIFICATE-----Generated at Fri Nov 28 07:17:01 2025 by rpki-client