This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZGZfjTSb0h_0Y47VDyU-7sdJDas.roa File: ZGZfjTSb0h_0Y47VDyU-7sdJDas.roa (raw, json) Hash identifier: S2IFDpMPp+HLy0pgxNfK4IWaPV3a4Dn0dS7YVIorkEs= Subject key identifier: 64:66:5F:8D:34:9B:D2:1F:F4:63:8E:D5:0F:25:3E:EE:C7:49:0D:AB Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019A7C02517626EC3117B779FE62162E7DDD Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZGZfjTSb0h_0Y47VDyU-7sdJDas.roa Signing time: Thu 13 Nov 2025 06:58:37 +0000 ROA not before: Thu 13 Nov 2025 06:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202656 IP address blocks: 45.91.161.0/24 maxlen: 24 45.135.176.0/24 maxlen: 24 45.135.178.0/24 maxlen: 24 45.135.179.0/24 maxlen: 24 45.140.61.0/24 maxlen: 24 45.143.141.0/24 maxlen: 24 45.143.143.0/24 maxlen: 24 45.147.246.0/24 maxlen: 24 45.156.149.0/24 maxlen: 24 45.156.150.0/24 maxlen: 24 176.101.59.0/24 maxlen: 24 176.101.60.0/24 maxlen: 24 193.8.164.0/24 maxlen: 24 193.8.167.0/24 maxlen: 24 193.8.175.0/24 maxlen: 24 193.238.135.0/24 maxlen: 24 194.156.1.0/24 maxlen: 24 213.109.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:02:51:76:26:ec:31:17:b7:79:fe:62:16:2e:7d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Nov 13 06:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64665f8d349bd21ff4638ed50f253eeec7490dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:d0:29:9a:a6:5d:10:c4:8e:72:b3:dd:ca: 48:5c:d2:f6:87:b9:27:e2:79:43:a1:7e:62:74:25: e0:bf:1b:d8:55:23:2b:a6:d0:31:37:73:0f:9c:a2: b2:5e:09:0a:81:5d:3c:25:19:47:ba:d6:32:cf:9b: fb:6c:27:17:a3:0f:ec:1a:9b:65:20:fe:dc:96:89: 92:62:84:f2:59:cf:d5:78:f9:ee:ef:0e:58:b8:ee: 5a:56:c2:d7:5d:01:6c:96:51:01:71:40:d3:b9:bc: 02:6f:89:bb:a1:e2:65:48:bd:26:06:3a:c0:6c:77: a0:9d:38:4f:5d:0b:43:3c:5d:b7:47:28:14:f8:a7: 55:a1:20:ed:4b:ab:16:20:71:16:d6:24:b7:62:a8: a5:46:82:b8:b9:18:f3:c5:f5:f6:8c:aa:b3:ff:19: 20:0a:47:93:41:46:c7:b9:21:e6:55:34:78:a8:7e: 93:05:f4:1d:4f:18:fe:6f:b6:75:53:74:a5:f9:3e: 45:5d:36:4d:3f:23:49:1b:41:e5:f6:4c:6c:62:8e: fb:86:50:2b:e8:c3:8d:ff:24:fd:e4:c6:04:9f:01: 9c:fc:08:39:f9:12:47:28:5c:aa:03:d1:ca:b5:1a: 29:72:65:db:f0:90:db:08:f7:d6:f8:b6:31:44:85: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:66:5F:8D:34:9B:D2:1F:F4:63:8E:D5:0F:25:3E:EE:C7:49:0D:AB X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZGZfjTSb0h_0Y47VDyU-7sdJDas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.161.0/24 45.135.176.0/24 45.135.178.0/23 45.140.61.0/24 45.143.141.0/24 45.143.143.0/24 45.147.246.0/24 45.156.149.0-45.156.150.255 176.101.59.0-176.101.60.255 193.8.164.0/24 193.8.167.0/24 193.8.175.0/24 193.238.135.0/24 194.156.1.0/24 213.109.109.0/24 Signature Algorithm: sha256WithRSAEncryption 41:60:0e:87:67:70:1e:e2:a0:8c:82:38:97:63:db:7b:1c:21: 74:f8:2f:fa:03:f1:0d:80:fd:52:25:11:51:99:da:ad:fb:f7: a8:1c:a4:7e:c8:a2:df:75:41:8e:df:40:8f:09:9d:fa:48:a2: 92:15:6d:19:5c:4c:3a:f9:24:02:cd:af:e6:14:96:fe:50:11: 9f:d9:23:12:fa:a6:65:56:bb:d6:94:62:cf:03:45:c7:4d:ac: 6c:1b:2e:ff:13:6b:f0:d0:d1:a3:9c:bf:e6:63:b8:fd:d3:13: ef:97:43:c7:8d:f3:ce:25:99:9d:88:c7:28:64:65:9c:07:13: 4f:bd:d8:d0:35:b4:91:11:34:f9:d3:f1:6b:b0:63:4e:df:be: bd:fe:61:7f:73:ff:c9:87:13:94:3f:9d:13:8a:f7:1d:c8:37: 56:4a:2b:9a:4e:57:b7:67:56:a0:87:c4:f8:18:15:c0:20:1c: ba:68:03:76:84:89:a5:a8:f6:66:e6:e3:7e:a8:da:ed:46:83: 16:87:3a:31:b7:67:dd:c8:12:04:a4:08:e8:76:75:e9:bb:fe: 3c:a9:f4:83:60:1f:24:0a:e6:c9:d1:22:39:8f:b3:0b:1a:c1: 37:03:e2:aa:a8:8f:6b:65:ad:90:50:3d:57:5f:aa:b1:5f:02: 4c:6a:d8:e1 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZp8AlF2JuwxF7d5/mIWLn3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjUxMTEzMDY1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDY2NWY4ZDM0OWJkMjFmZjQ2MzhlZDUwZjI1M2VlZWM3NDkwZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHvQKZqmXRDEjnKz3cpIXNL2h7kn 4nlDoX5idCXgvxvYVSMrptAxN3MPnKKyXgkKgV08JRlHutYyz5v7bCcXow/sGptl IP7clomSYoTyWc/VePnu7w5YuO5aVsLXXQFsllEBcUDTubwCb4m7oeJlSL0mBjrA bHegnThPXQtDPF23RygU+KdVoSDtS6sWIHEW1iS3YqilRoK4uRjzxfX2jKqz/xkg CkeTQUbHuSHmVTR4qH6TBfQdTxj+b7Z1U3Sl+T5FXTZNPyNJG0Hl9kxsYo77hlAr 6MON/yT95MYEnwGc/Ag5+RJHKFyqA9HKtRopcmXb8JDbCPfW+LYxRIUHjwIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFGRmX400m9If9GOO1Q8lPu7HSQ2rMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvWkdaZmpUU2IwaF8wWTQ3VkR5VS03c2RKRGFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAC1boQME AC2HsAMEAS2HsgMEAC2MPQMEAC2PjQMEAC2PjwMEAC2T9jAMAwQALZyVAwQALZyW MAwDBACwZTsDBACwZTwDBADBCKQDBADBCKcDBADBCK8DBADB7ocDBADCnAEDBADV bW0wDQYJKoZIhvcNAQELBQADggEBAEFgDodncB7ioIyCOJdj23scIXT4L/oD8Q2A /VIlEVGZ2q3796gcpH7Iot91QY7fQI8JnfpIopIVbRlcTDr5JALNr+YUlv5QEZ/Z IxL6pmVWu9aUYs8DRcdNrGwbLv8Ta/DQ0aOcv+ZjuP3TE++XQ8eN884lmZ2Ixyhk ZZwHE0+92NA1tJERNPnT8WuwY07fvr3+YX9z/8mHE5Q/nROK9x3IN1ZKK5pOV7dn VqCHxPgYFcAgHLpoA3aEiaWo9mbm436o2u1GgxaHOjG3Z93IEgSkCOh2dem7/jyp 9INgHyQK5snRIjmPswsawTcD4qqoj2tlrZBQPVdfqrFfAkxq2OE= -----END CERTIFICATE-----Generated at Fri Dec 5 15:38:59 2025 by rpki-client