This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZkMUv3ieOOLZKI099AkNxcW4WiA.roa File: ZkMUv3ieOOLZKI099AkNxcW4WiA.roa (raw, json) Hash identifier: LnIiu0FmzIvMW9HQFMfXMifnCy6HV8PNdq9o1BoVHjc= Subject key identifier: 66:43:14:BF:78:9E:38:E2:D9:28:8D:3D:F4:09:0D:C5:C5:B8:5A:20 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B04FDA29FBC3BA6EA7840333B8A7B2642 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZkMUv3ieOOLZKI099AkNxcW4WiA.roa Signing time: Tue 09 Dec 2025 21:21:29 +0000 ROA not before: Tue 09 Dec 2025 21:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 45.155.242.0/24 maxlen: 24 194.143.206.0/23 maxlen: 24 194.143.207.0/24 maxlen: 24 194.143.221.0/24 maxlen: 24 194.143.223.0/24 maxlen: 24 195.114.196.0/24 maxlen: 24 195.114.197.0/24 maxlen: 24 195.114.198.0/24 maxlen: 24 213.220.7.0/24 maxlen: 24 213.220.11.0/24 maxlen: 24 213.220.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:fd:a2:9f:bc:3b:a6:ea:78:40:33:3b:8a:7b:26:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Dec 9 21:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=664314bf789e38e2d9288d3df4090dc5c5b85a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:ca:f2:35:75:22:b4:1e:b0:71:2e:1d:5b: 48:07:66:30:5d:8e:c2:f1:57:54:46:ac:a1:1a:3b: 86:25:c3:73:04:e8:20:43:ca:61:a4:fa:a7:38:aa: 39:59:30:10:b0:fc:dd:d1:03:59:9e:90:ef:a4:58: b2:c5:f6:9d:ef:c4:bf:98:28:0b:63:41:9a:0e:82: 6e:59:53:1b:ec:40:c3:87:24:d7:14:17:79:89:a3: f4:bf:39:7f:aa:26:2b:b9:c7:ed:73:bf:f5:0b:47: 3d:3b:e6:15:b7:9d:74:ae:27:a9:eb:4f:2d:d5:c7: 44:00:ea:fe:4d:a8:08:94:27:62:5b:3b:15:f7:c8: e4:b7:0c:02:b7:42:7a:f1:ce:64:52:4c:98:84:29: 85:eb:9c:26:10:5b:e7:fa:6b:6f:fc:dc:2c:76:10: 51:21:a5:3f:e1:7b:40:b1:3b:57:28:67:03:90:9d: 01:a1:2d:8b:b7:88:13:34:4d:22:d7:44:63:21:07: ad:2a:8e:28:17:a3:f4:be:a1:a1:73:17:b8:a6:4f: fc:86:45:3b:55:3e:f8:1d:53:fd:c6:31:b4:01:c9: ee:cc:e6:b1:80:dd:77:82:1d:0a:d4:e0:ab:80:37: e8:af:37:3d:bb:a3:a7:83:5d:17:a0:76:ae:d3:d8: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:43:14:BF:78:9E:38:E2:D9:28:8D:3D:F4:09:0D:C5:C5:B8:5A:20 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ZkMUv3ieOOLZKI099AkNxcW4WiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.242.0/24 194.143.206.0/23 194.143.221.0/24 194.143.223.0/24 195.114.196.0-195.114.198.255 213.220.7.0/24 213.220.11.0/24 213.220.13.0/24 Signature Algorithm: sha256WithRSAEncryption 72:2a:14:01:46:fe:54:15:72:65:86:13:56:e9:da:96:2e:96: e7:e6:96:ac:cc:71:b7:f8:ca:2e:f7:bb:ba:65:68:0a:2e:53: bb:05:14:40:e3:f8:89:d5:ed:a3:ac:81:0d:65:6b:fc:c2:9f: 62:e1:ec:29:37:5c:5f:c8:ac:b4:af:a3:1d:bd:cc:13:e2:58: 61:3b:ec:12:5a:e4:98:e2:e9:36:26:d4:d0:57:bf:e3:37:36: c7:c6:8e:ae:4a:36:45:5e:29:5c:2b:eb:bd:6a:ec:cb:b0:fe: 26:1f:9b:4f:72:79:41:bb:f4:9c:25:9c:b6:3f:53:51:91:e9: 82:d7:88:d8:28:df:f3:69:13:e7:60:5e:e4:ef:bc:a6:ba:7c: 9d:5c:b6:ef:ba:13:60:bb:5c:11:31:8c:3f:50:dd:5e:56:74: b5:a5:bc:c0:36:2d:52:bb:24:3e:11:46:29:d0:d2:8b:be:62: d6:26:c2:15:69:a3:8e:e4:be:55:33:17:fe:5b:79:1d:84:b5: ce:40:cc:02:07:2e:68:3f:c8:d9:a4:55:75:22:c4:9e:65:44: 18:d1:1c:1e:73:22:46:3b:c8:b2:d4:27:c7:cb:5b:35:11:35: d5:c1:2d:bb:1e:71:14:ff:11:43:ab:ea:1c:99:9d:a3:6a:51: 08:8e:e3:a0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZsE/aKfvDum6nhAMzuKeyZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMjA5MjEyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjQzMTRiZjc4OWUzOGUyZDkyODhkM2RmNDA5MGRjNWM1Yjg1YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnHK8jV1IrQesHEuHVtIB2YwXY7C 8VdURqyhGjuGJcNzBOggQ8phpPqnOKo5WTAQsPzd0QNZnpDvpFiyxfad78S/mCgL Y0GaDoJuWVMb7EDDhyTXFBd5iaP0vzl/qiYrucftc7/1C0c9O+YVt510riep608t 1cdEAOr+TagIlCdiWzsV98jktwwCt0J68c5kUkyYhCmF65wmEFvn+mtv/NwsdhBR IaU/4XtAsTtXKGcDkJ0BoS2Lt4gTNE0i10RjIQetKo4oF6P0vqGhcxe4pk/8hkU7 VT74HVP9xjG0AcnuzOaxgN13gh0K1OCrgDforzc9u6Ong10XoHau09hlDwIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFGZDFL94njji2SiNPfQJDcXFuFogMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvWmtNVXYzaWVPT0xaS0kwOTlBa054Y1c0V2lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQALZvyAwQB wo/OAwQAwo/dAwQAwo/fMAwDBALDcsQDBADDcsYDBADV3AcDBADV3AsDBADV3A0w DQYJKoZIhvcNAQELBQADggEBAHIqFAFG/lQVcmWGE1bp2pYulufmlqzMcbf4yi73 u7plaAouU7sFFEDj+InV7aOsgQ1la/zCn2Lh7Ck3XF/IrLSvox29zBPiWGE77BJa 5Jji6TYm1NBXv+M3NsfGjq5KNkVeKVwr671q7Muw/iYfm09yeUG79JwlnLY/U1GR 6YLXiNgo3/NpE+dgXuTvvKa6fJ1ctu+6E2C7XBExjD9Q3V5WdLWlvMA2LVK7JD4R RinQ0ou+YtYmwhVpo47kvlUzF/5beR2Etc5AzAIHLmg/yNmkVXUixJ5lRBjRHB5z IkY7yLLUJ8fLWzURNdXBLbsecRT/EUOr6hyZnaNqUQiO46A= -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:01 2025 by rpki-client