This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/_zdlWhEi_N0gWHtAVPgkNsc9mR4.roa File: _zdlWhEi_N0gWHtAVPgkNsc9mR4.roa (raw, json) Hash identifier: 3JxJU5VxNcGspDTOSPWFbdh4BiX6viLLu85SaLzaPnc= Subject key identifier: FF:37:65:5A:11:22:FC:DD:20:58:7B:40:54:F8:24:36:C7:3D:99:1E Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019AC2597CA3FC91CF77C146B427C0A14AA1 Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/_zdlWhEi_N0gWHtAVPgkNsc9mR4.roa Signing time: Wed 26 Nov 2025 22:47:15 +0000 ROA not before: Wed 26 Nov 2025 22:47:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15461 IP address blocks: 176.120.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c2:59:7c:a3:fc:91:cf:77:c1:46:b4:27:c0:a1:4a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Nov 26 22:47:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff37655a1122fcdd20587b4054f82436c73d991e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:4c:5c:b1:21:fd:0b:f3:a9:f2:31:70:ea: 1c:e2:e5:ad:c4:7d:7c:91:71:78:58:5c:cf:7a:fe: b4:f2:77:eb:15:de:18:7b:5d:7e:0d:44:1d:0e:0c: 96:82:de:1c:89:d3:29:3c:da:67:85:87:38:45:25: 9e:ec:15:c8:52:d8:fd:65:0f:e5:6d:d6:e6:41:1d: 55:71:7f:b1:6d:2c:d4:68:4b:1f:95:36:3c:1a:5e: 08:00:92:e2:90:2e:4f:dc:fb:af:05:1a:e0:4a:e4: 5a:6f:5a:18:1e:2a:db:4a:6d:b2:52:52:a6:99:86: fc:93:b0:f4:c5:c7:f8:9d:fa:f8:63:36:4a:85:a5: b7:a2:39:40:ba:97:de:c2:91:27:89:91:18:59:57: 57:a0:5a:5d:59:93:c6:16:ec:4f:9b:92:cc:e1:3c: 6b:0a:45:3d:60:13:0b:a8:04:11:fa:6f:74:ba:bc: 67:06:ef:a6:49:b1:1e:c1:da:d9:91:93:0e:aa:0b: a2:87:18:b2:48:34:b9:78:67:49:c1:24:a8:cb:db: 02:a0:17:a7:e7:cf:57:ad:b5:76:a1:d6:0a:00:56: e9:80:7b:2a:94:e2:f9:22:76:df:46:77:4a:14:d4: 6f:fb:53:e8:6e:3d:17:23:c3:03:94:4b:c8:86:55: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:37:65:5A:11:22:FC:DD:20:58:7B:40:54:F8:24:36:C7:3D:99:1E X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/_zdlWhEi_N0gWHtAVPgkNsc9mR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.102.0/23 Signature Algorithm: sha256WithRSAEncryption c9:ce:c2:05:29:95:c6:54:ae:dc:56:e3:92:b6:e4:e4:a6:c6: 71:b4:77:bf:5a:fb:25:b0:fc:d5:20:6a:c5:ae:63:a9:1e:0a: 92:53:d4:26:d9:f3:f1:e0:02:59:2d:d5:2d:0c:ae:d2:18:87: ea:9a:52:7c:77:7d:07:f7:89:54:13:b2:f0:b3:ff:47:e3:cf: 71:85:54:7d:09:3f:a1:02:eb:18:f8:40:85:00:de:f1:c5:ab: 0e:f3:dc:e4:39:79:b9:9e:88:0c:dd:96:97:56:5b:be:c9:fa: a7:21:9c:2e:b8:3f:70:82:5f:1e:df:fd:b6:f4:3a:ff:cd:fc: 3f:82:86:89:1a:71:dd:73:06:df:e2:e9:7a:c7:8a:ca:76:5a: 4f:14:eb:80:b2:b9:3e:9f:19:bb:57:0d:ac:b6:17:db:17:c7: c7:0c:d0:d7:e5:ca:fe:a4:70:aa:8c:1b:1e:4b:5c:0f:05:9e: aa:3a:12:3b:23:ac:5b:4b:09:c7:ce:36:44:17:96:b8:8d:23: ca:87:0b:65:0d:ab:a4:c2:cb:22:26:75:37:a1:9c:4e:26:a4: e2:72:13:62:2d:0e:d4:c5:4b:47:bb:21:35:64:8b:ad:d1:b3: 1f:82:41:b3:b1:b8:c2:fa:8f:96:13:c0:4f:45:56:fd:56:64: 2f:6e:5e:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrCWXyj/JHPd8FGtCfAoUqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjUxMTI2MjI0NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjM3NjU1YTExMjJmY2RkMjA1ODdiNDA1NGY4MjQzNmM3M2Q5OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGxMXLEh/QvzqfIxcOoc4uWtxH18 kXF4WFzPev608nfrFd4Ye11+DUQdDgyWgt4cidMpPNpnhYc4RSWe7BXIUtj9ZQ/l bdbmQR1VcX+xbSzUaEsflTY8Gl4IAJLikC5P3PuvBRrgSuRab1oYHirbSm2yUlKm mYb8k7D0xcf4nfr4YzZKhaW3ojlAupfewpEniZEYWVdXoFpdWZPGFuxPm5LM4Txr CkU9YBMLqAQR+m90urxnBu+mSbEewdrZkZMOqguihxiySDS5eGdJwSSoy9sCoBen 589XrbV2odYKAFbpgHsqlOL5InbfRndKFNRv+1Pobj0XI8MDlEvIhlU+iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP83ZVoRIvzdIFh7QFT4JDbHPZkeMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvX3pkbFdoRWlfTjBnV0h0QVZQZ2tOc2M5bVI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHhmMA0G CSqGSIb3DQEBCwUAA4IBAQDJzsIFKZXGVK7cVuOStuTkpsZxtHe/WvslsPzVIGrF rmOpHgqSU9Qm2fPx4AJZLdUtDK7SGIfqmlJ8d30H94lUE7Lws/9H489xhVR9CT+h AusY+ECFAN7xxasO89zkOXm5nogM3ZaXVlu+yfqnIZwuuD9wgl8e3/229Dr/zfw/ goaJGnHdcwbf4ul6x4rKdlpPFOuAsrk+nxm7Vw2sthfbF8fHDNDX5cr+pHCqjBse S1wPBZ6qOhI7I6xbSwnHzjZEF5a4jSPKhwtlDaukwssiJnU3oZxOJqTichNiLQ7U xUtHuyE1ZIut0bMfgkGzsbjC+o+WE8BPRVb9VmQvbl47 -----END CERTIFICATE-----Generated at Tue Dec 16 05:20:27 2025 by rpki-client