This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/wzrBDa0AzHvMhlCKlCEAeNzTg1U.roa File: wzrBDa0AzHvMhlCKlCEAeNzTg1U.roa (raw, json) Hash identifier: ibXC3aTl9szVtSiZ1VZTQMiaCOEz+/1+6+Jjm/P2hTA= Subject key identifier: C3:3A:C1:0D:AD:00:CC:7B:CC:86:50:8A:94:21:00:78:DC:D3:83:55 Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115 Certificate serial: 019ABB544C997E49A1990A7F320BE7246F69 Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/wzrBDa0AzHvMhlCKlCEAeNzTg1U.roa Signing time: Tue 25 Nov 2025 14:04:15 +0000 ROA not before: Tue 25 Nov 2025 14:04:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39686 IP address blocks: 185.202.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:54:4c:99:7e:49:a1:99:0a:7f:32:0b:e7:24:6f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115 Validity Not Before: Nov 25 14:04:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c33ac10dad00cc7bcc86508a94210078dcd38355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:3d:e3:34:83:be:98:0b:32:ed:c0:86:f3: 6d:d9:13:56:f6:8a:a4:fa:a0:10:42:bb:80:52:81: 03:ca:fe:49:d4:61:61:33:6f:e1:fd:6a:d1:25:65: d2:62:20:3a:8e:9a:52:62:72:46:2a:e7:b3:ba:d6: d6:ed:f2:b2:0e:99:2c:40:01:ff:c9:f2:e8:cf:21: 4e:6e:ae:f3:b0:b8:1f:cc:e9:48:6e:91:b2:3f:d0: f8:3b:fc:54:89:e4:6c:1c:74:52:89:e1:9e:50:fe: 92:1b:fa:76:59:64:bc:40:4b:8f:30:6a:80:18:ac: ac:ed:b6:6c:ef:bf:e1:d9:da:c2:d4:2b:ee:d5:3a: 9a:27:4e:23:66:b1:f6:b1:e1:82:6e:a9:ed:53:9c: e9:e9:e2:83:e0:6f:72:4b:26:e8:d8:fc:44:f1:46: 22:15:65:45:16:b2:c1:2b:65:94:a3:86:34:d6:39: 69:49:6d:b0:dd:14:9f:7c:2e:46:31:67:6f:fe:fc: 90:fb:70:5a:c7:91:7b:9c:9f:90:87:46:f2:9e:9a: a6:b6:7b:6e:00:96:a7:47:9c:c4:be:6c:67:10:a5: af:08:84:de:27:54:14:41:9b:1f:69:1c:0c:8e:a8: 01:c5:31:11:7e:eb:f1:9b:7d:5e:8b:2a:9c:95:22: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3A:C1:0D:AD:00:CC:7B:CC:86:50:8A:94:21:00:78:DC:D3:83:55 X509v3 Authority Key Identifier: keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/wzrBDa0AzHvMhlCKlCEAeNzTg1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.224.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ba:2a:50:6c:0a:47:cd:fc:82:c0:a5:8d:90:66:24:29:f6: 25:8f:31:7e:10:1f:71:5e:5b:c5:1a:9e:2f:cf:6d:b9:2d:10: a0:c2:e1:7e:a0:b7:ff:b8:c4:5b:6d:29:38:d7:e5:7c:9b:d9: 53:d6:21:51:26:26:d9:b6:f7:cf:4b:b7:ac:65:6d:aa:9b:36: 61:49:3b:59:2c:e4:0b:fd:df:ef:78:59:38:af:93:21:4a:67: e5:c1:25:4f:1d:ae:2d:15:8d:89:97:32:f8:bd:64:27:ce:ef: 92:54:21:84:1f:2e:7f:e9:cc:95:e7:a6:46:bc:73:89:0c:db: f9:05:5f:d5:c3:8d:14:d0:08:ba:6a:69:02:cc:6c:ab:91:05: f6:3a:68:0f:f4:34:ac:88:83:67:9e:ed:d6:e3:17:e6:2a:6b: 46:8a:df:69:c0:d2:00:4d:d3:b6:38:5e:1b:1a:2a:6e:f8:11: 61:16:a1:97:06:bb:45:77:01:b0:86:ae:33:9a:0e:93:88:ef: 60:f6:25:e2:94:d9:76:8d:a2:1b:0f:79:ed:f3:eb:01:43:7f: 52:f7:b5:b0:61:0d:9d:01:53:f6:e4:56:86:9c:af:cc:8d:3e: f9:6f:61:d6:75:31:cf:46:b8:da:8d:9e:1b:60:29:63:e6:09: 21:52:51:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq7VEyZfkmhmQp/MgvnJG9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZGQwZDcxNWU5N2ZiOTFmNzhkMDdmZTEwNjk2ZGE2MDE2 MDUxMTUwHhcNMjUxMTI1MTQwNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzNhYzEwZGFkMDBjYzdiY2M4NjUwOGE5NDIxMDA3OGRjZDM4MzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunM94zSDvpgLMu3AhvNt2RNW9oqk +qAQQruAUoEDyv5J1GFhM2/h/WrRJWXSYiA6jppSYnJGKuezutbW7fKyDpksQAH/ yfLozyFObq7zsLgfzOlIbpGyP9D4O/xUieRsHHRSieGeUP6SG/p2WWS8QEuPMGqA GKys7bZs77/h2drC1Cvu1TqaJ04jZrH2seGCbqntU5zp6eKD4G9ySybo2PxE8UYi FWVFFrLBK2WUo4Y01jlpSW2w3RSffC5GMWdv/vyQ+3Bax5F7nJ+Qh0bynpqmtntu AJanR5zEvmxnEKWvCITeJ1QUQZsfaRwMjqgBxTERfuvxm31eiyqclSIjXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMM6wQ2tAMx7zIZQipQhAHjc04NVMB8GA1UdIwQY MBaAFM7dDXFel/uR940H/hBpbaYBYFEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMt YWFmMzIxNzFlYWExLzEvd3pyQkRhMEF6SHZNaGxDS2xDRUFlTnpUZzFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMtYWFmMzIxNzFlYWEx LzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucrgMA0G CSqGSIb3DQEBCwUAA4IBAQAeuipQbApHzfyCwKWNkGYkKfYljzF+EB9xXlvFGp4v z225LRCgwuF+oLf/uMRbbSk41+V8m9lT1iFRJibZtvfPS7esZW2qmzZhSTtZLOQL /d/veFk4r5MhSmflwSVPHa4tFY2JlzL4vWQnzu+SVCGEHy5/6cyV56ZGvHOJDNv5 BV/Vw40U0Ai6amkCzGyrkQX2OmgP9DSsiINnnu3W4xfmKmtGit9pwNIATdO2OF4b Gipu+BFhFqGXBrtFdwGwhq4zmg6TiO9g9iXilNl2jaIbD3nt8+sBQ39S97WwYQ2d AVP25FaGnK/MjT75b2HWdTHPRrjajZ4bYClj5gkhUlEe -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:12 2025 by rpki-client