This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/zTiXpcUsv3gFyjvxSmUfRg3eYMY.roa File: zTiXpcUsv3gFyjvxSmUfRg3eYMY.roa (raw, json) Hash identifier: LFrdRDkxowdBOalYcCAaHR2T2Xir64ySpsYLGTuVlxY= Subject key identifier: CD:38:97:A5:C5:2C:BF:78:05:CA:3B:F1:4A:65:1F:46:0D:DE:60:C6 Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d Certificate serial: 019B475854781B94E5A171E5D6F14A421DC3 Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/zTiXpcUsv3gFyjvxSmUfRg3eYMY.roa Signing time: Mon 22 Dec 2025 18:35:29 +0000 ROA not before: Mon 22 Dec 2025 18:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399138 IP address blocks: 85.136.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:58:54:78:1b:94:e5:a1:71:e5:d6:f1:4a:42:1d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d Validity Not Before: Dec 22 18:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd3897a5c52cbf7805ca3bf14a651f460dde60c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:86:84:d1:44:3c:e6:31:b4:81:37:d8:ec: 4c:e5:d1:7e:2c:cf:ad:8a:78:19:cb:2a:e7:3e:ea: f8:85:97:71:bf:12:58:0c:68:85:92:f9:bd:03:80: 73:a8:7c:5a:05:22:2d:4a:16:e4:f3:ca:e6:c0:04: 73:08:d3:46:15:0d:1e:16:fc:22:1d:10:c4:69:cc: 78:71:18:60:f4:1a:b1:1e:51:08:85:f7:3a:47:64: eb:39:79:92:69:0e:de:09:87:83:38:32:8f:cd:53: 5e:c8:d6:18:20:38:1d:b8:1e:52:d2:90:64:d0:f6: 67:fa:bd:fa:92:8b:eb:c9:bc:22:69:c3:8e:93:d4: ac:09:7b:04:26:f3:96:80:03:59:42:b5:8b:39:64: dc:30:b9:41:c9:37:61:d9:47:7d:fa:1b:84:b9:0d: 85:a4:57:e2:01:a8:40:7f:26:7f:5f:39:80:93:47: b0:aa:aa:91:a1:27:cd:5e:96:72:9a:b8:90:00:ed: f3:2b:a2:c0:36:1c:ce:a5:fb:4b:03:5c:19:95:00: e1:56:cc:c7:e7:2f:9e:5b:8f:8c:71:75:29:18:4a: 2e:43:5b:85:86:a9:fb:f4:51:ff:b5:2b:3f:26:36: 31:be:a6:d7:21:11:20:41:07:79:45:5e:35:b6:0d: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:97:A5:C5:2C:BF:78:05:CA:3B:F1:4A:65:1F:46:0D:DE:60:C6 X509v3 Authority Key Identifier: keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/zTiXpcUsv3gFyjvxSmUfRg3eYMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.136.196.0/22 Signature Algorithm: sha256WithRSAEncryption 44:ca:49:b4:b9:5c:35:5a:a2:f9:20:46:cd:ed:3d:99:2b:16: e7:cc:10:03:ef:81:7f:8a:bc:77:5b:6f:e5:57:a7:49:6a:89: b4:86:db:5b:e3:ba:8d:0c:54:d4:df:f6:29:42:5e:a8:30:fc: 43:15:1c:22:c7:21:ee:eb:a8:8e:1c:94:ec:bd:ee:8f:80:18: dd:55:76:ac:df:e7:35:6e:12:b3:30:4e:aa:00:2f:be:43:8f: 00:3a:3d:6a:d5:8d:a9:c7:15:4a:6b:60:ec:57:d2:a4:70:b3: e0:7b:47:ba:fd:f0:f9:e3:3c:25:1d:04:68:90:52:df:18:9c: 71:24:d1:eb:0a:a1:4a:95:f1:13:e5:ac:b2:a5:55:6d:60:fe: a0:5c:db:8a:ba:81:ec:ea:08:d7:a1:20:a6:98:03:92:ba:78: 7d:9f:a8:1d:aa:12:58:21:c6:19:5a:7a:d2:db:6f:b9:29:d2: 72:90:c8:34:75:8a:3a:75:3b:bf:49:1a:7a:17:d7:36:4c:1f: 88:8a:7d:20:e0:dc:e2:ad:94:b1:44:d6:67:f0:b2:ef:c0:ca: d9:94:fd:5b:78:3b:ed:73:85:27:cd:0f:78:67:9a:87:f4:ba: 0d:ba:d4:e3:06:68:b1:83:b0:43:ac:ea:97:26:c9:26:03:c7: d8:eb:f6:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtHWFR4G5TloXHl1vFKQh3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk OGYxNWQwHhcNMjUxMjIyMTgzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDM4OTdhNWM1MmNiZjc4MDVjYTNiZjE0YTY1MWY0NjBkZGU2MGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxKGhNFEPOYxtIE32OxM5dF+LM+t ingZyyrnPur4hZdxvxJYDGiFkvm9A4BzqHxaBSItShbk88rmwARzCNNGFQ0eFvwi HRDEacx4cRhg9BqxHlEIhfc6R2TrOXmSaQ7eCYeDODKPzVNeyNYYIDgduB5S0pBk 0PZn+r36kovrybwiacOOk9SsCXsEJvOWgANZQrWLOWTcMLlByTdh2Ud9+huEuQ2F pFfiAahAfyZ/XzmAk0ewqqqRoSfNXpZymriQAO3zK6LANhzOpftLA1wZlQDhVszH 5y+eW4+McXUpGEouQ1uFhqn79FH/tSs/JjYxvqbXIREgQQd5RV41tg3uZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM04l6XFLL94Bco78UplH0YN3mDGMB8GA1UdIwQY MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt YjRkZDIyNzU4OTUxLzEvelRpWHBjVXN2M2dGeWp2eFNtVWZSZzNlWU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVYjEMA0G CSqGSIb3DQEBCwUAA4IBAQBEykm0uVw1WqL5IEbN7T2ZKxbnzBAD74F/irx3W2/l V6dJaom0httb47qNDFTU3/YpQl6oMPxDFRwixyHu66iOHJTsve6PgBjdVXas3+c1 bhKzME6qAC++Q48AOj1q1Y2pxxVKa2DsV9KkcLPge0e6/fD54zwlHQRokFLfGJxx JNHrCqFKlfET5ayypVVtYP6gXNuKuoHs6gjXoSCmmAOSunh9n6gdqhJYIcYZWnrS 22+5KdJykMg0dYo6dTu/SRp6F9c2TB+Iin0g4NzirZSxRNZn8LLvwMrZlP1beDvt c4UnzQ94Z5qH9LoNutTjBmixg7BDrOqXJskmA8fY6/Yo -----END CERTIFICATE-----Generated at Wed Dec 24 01:55:14 2025 by rpki-client