This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ZRvLOTL892324mrN4_sir5kAZog.roa File: ZRvLOTL892324mrN4_sir5kAZog.roa (raw, json) Hash identifier: s2ON++DU2aCxjStb8WfJDJKu8FOhML5HnNtc8APO/aA= Subject key identifier: 65:1B:CB:39:32:FC:F7:6D:F6:E2:6A:CD:E3:FB:22:AF:99:00:66:88 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019AE925F0BC6E694ED994B93BE0E837A242 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ZRvLOTL892324mrN4_sir5kAZog.roa Signing time: Thu 04 Dec 2025 11:36:08 +0000 ROA not before: Thu 04 Dec 2025 11:36:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9123 IP address blocks: 89.23.96.0/24 maxlen: 24 89.23.97.0/24 maxlen: 24 89.23.98.0/24 maxlen: 24 89.23.99.0/24 maxlen: 24 89.23.100.0/24 maxlen: 24 89.23.101.0/24 maxlen: 24 89.23.102.0/24 maxlen: 24 89.23.112.0/24 maxlen: 24 89.23.115.0/24 maxlen: 24 89.23.116.0/24 maxlen: 24 89.23.117.0/24 maxlen: 24 89.23.118.0/24 maxlen: 24 185.39.206.0/24 maxlen: 24 212.67.17.0/24 maxlen: 24 2a09:6283::/32 maxlen: 32 2a10:4102::/32 maxlen: 32 2a10:4107::/32 maxlen: 32 2a11:4b45::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:25:f0:bc:6e:69:4e:d9:94:b9:3b:e0:e8:37:a2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Dec 4 11:36:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=651bcb3932fcf76df6e26acde3fb22af99006688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5a:77:f2:be:6a:e2:37:bd:91:26:ad:c7:b8: 26:aa:ee:36:35:08:90:8d:6d:53:fa:91:34:a0:a1: 7b:94:64:24:4c:03:36:cf:77:62:c1:8f:07:72:59: e6:62:9d:38:da:45:69:e7:05:6b:97:3a:7a:57:29: d2:80:cb:5b:33:50:f4:71:12:ab:4c:73:95:33:15: a9:f7:83:5a:f9:5a:3a:f2:c1:a9:10:ad:64:08:63: 0c:8b:aa:e5:51:a5:d9:96:b5:12:e2:c7:e5:86:58: 12:da:9f:b5:49:91:96:0f:16:47:72:cf:35:95:28: 07:08:85:68:77:76:c0:0c:03:db:73:5b:0c:23:66: 18:e0:db:1e:f9:ff:3e:47:89:1e:d5:4f:9c:fa:28: 20:26:30:9c:55:a0:ec:97:ae:d4:76:6a:bf:26:9c: 6b:da:98:71:47:72:75:11:66:4f:a5:6a:30:4d:9e: 5c:e2:5f:e4:5e:44:1a:bd:a7:08:17:4c:05:83:ec: bf:18:f2:af:cd:a5:7e:37:06:a5:04:75:ea:34:39: 82:1b:97:ff:c3:47:16:6f:66:ea:47:81:9d:43:00: 79:01:5d:1d:53:ab:65:96:b1:fe:8b:4a:92:76:bf: a6:2d:eb:f3:3e:7c:57:fa:70:5e:d9:0a:38:b8:7c: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1B:CB:39:32:FC:F7:6D:F6:E2:6A:CD:E3:FB:22:AF:99:00:66:88 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ZRvLOTL892324mrN4_sir5kAZog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.96.0-89.23.102.255 89.23.112.0/24 89.23.115.0-89.23.118.255 185.39.206.0/24 212.67.17.0/24 IPv6: 2a09:6283::/32 2a10:4102::/32 2a10:4107::/32 2a11:4b45::/32 Signature Algorithm: sha256WithRSAEncryption 85:6e:4d:45:a4:49:15:6d:68:00:1e:12:72:d3:63:08:cf:85: e0:6c:4d:0c:a3:cb:9a:95:70:69:23:23:24:ba:11:a1:25:2e: b1:d4:cb:5c:cb:4f:70:46:4e:76:72:0c:fe:70:34:43:7e:f6: e2:41:8f:8d:fd:ea:a4:f9:85:93:c6:04:fe:24:65:7b:0c:cb: c5:a7:e2:28:af:87:b3:cd:88:88:0f:fa:d4:e9:3d:fe:99:a2: 7e:bb:be:41:6d:39:2a:aa:31:e9:5b:1c:40:6a:f0:0d:be:8f: f7:28:53:81:20:7b:94:79:df:88:21:57:80:6e:c4:21:b0:cd: fb:a5:24:28:47:7a:d9:ae:f1:f9:27:34:ba:ff:27:3c:2a:59: a1:c2:3d:31:0b:67:1f:0a:1d:e1:a4:3a:13:37:e0:7f:dc:f1: ec:1d:e8:8b:d0:e5:56:d1:a6:dd:de:a5:2a:2d:42:31:74:33: 49:56:be:1c:62:65:ae:57:18:e8:0e:d3:9f:c6:39:11:2d:f8: 9e:73:ce:ac:47:c5:6d:9e:39:ca:28:59:1b:a4:c8:26:3f:ca: 7f:f5:91:03:df:c9:fd:97:0f:6e:0a:fe:c6:70:7d:ef:61:40: 18:e9:93:c6:03:d4:d1:43:be:92:ac:27:38:e1:b5:fb:f6:ff: d6:b3:a7:71 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZrpJfC8bmlO2ZS5O+DoN6JCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMjA0MTEzNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTFiY2IzOTMyZmNmNzZkZjZlMjZhY2RlM2ZiMjJhZjk5MDA2Njg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVp38r5q4je9kSatx7gmqu42NQiQ jW1T+pE0oKF7lGQkTAM2z3diwY8HclnmYp042kVp5wVrlzp6VynSgMtbM1D0cRKr THOVMxWp94Na+Vo68sGpEK1kCGMMi6rlUaXZlrUS4sflhlgS2p+1SZGWDxZHcs81 lSgHCIVod3bADAPbc1sMI2YY4Nse+f8+R4ke1U+c+iggJjCcVaDsl67Udmq/Jpxr 2phxR3J1EWZPpWowTZ5c4l/kXkQavacIF0wFg+y/GPKvzaV+NwalBHXqNDmCG5f/ w0cWb2bqR4GdQwB5AV0dU6tllrH+i0qSdr+mLevzPnxX+nBe2Qo4uHy9mQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFGUbyzky/Pdt9uJqzeP7Iq+ZAGaIMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvWlJ2TE9UTDg5MjMyNG1yTjRfc2lyNWtBWm9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjA0BAIAATAuMAwDBAVZF2AD BABZF2YDBABZF3AwDAMEAFkXcwMEAFkXdgMEALknzgMEANRDETAiBAIAAjAcAwUA KgligwMFACoQQQIDBQAqEEEHAwUAKhFLRTANBgkqhkiG9w0BAQsFAAOCAQEAhW5N RaRJFW1oAB4SctNjCM+F4GxNDKPLmpVwaSMjJLoRoSUusdTLXMtPcEZOdnIM/nA0 Q3724kGPjf3qpPmFk8YE/iRlewzLxafiKK+Hs82IiA/61Ok9/pmifru+QW05Kqox 6VscQGrwDb6P9yhTgSB7lHnfiCFXgG7EIbDN+6UkKEd62a7x+Sc0uv8nPCpZocI9 MQtnHwod4aQ6Ezfgf9zx7B3oi9DlVtGm3d6lKi1CMXQzSVa+HGJlrlcY6A7Tn8Y5 ES34nnPOrEfFbZ45yihZG6TIJj/Kf/WRA9/J/ZcPbgr+xnB972FAGOmTxgPU0UO+ kqwnOOG1+/b/1rOncQ== -----END CERTIFICATE-----Generated at Fri Dec 5 08:38:08 2025 by rpki-client