This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/zV6ZdwRwY22YxnJ7o5KrLFiOSks.roa File: zV6ZdwRwY22YxnJ7o5KrLFiOSks.roa (raw, json) Hash identifier: CU+aUbdKG8+gc+SLXpNeHe0gAI7HsoYH7L1e2ZbkQtc= Subject key identifier: CD:5E:99:77:04:70:63:6D:98:C6:72:7B:A3:92:AB:2C:58:8E:4A:4B Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533 Certificate serial: 019ADE6EB35790AB415C726D92643AD6FBD2 Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/zV6ZdwRwY22YxnJ7o5KrLFiOSks.roa Signing time: Tue 02 Dec 2025 09:39:48 +0000 ROA not before: Tue 02 Dec 2025 09:39:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204240 IP address blocks: 195.85.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:6e:b3:57:90:ab:41:5c:72:6d:92:64:3a:d6:fb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533 Validity Not Before: Dec 2 09:39:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd5e99770470636d98c6727ba392ab2c588e4a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:ca:0e:3f:dc:94:b1:71:ce:01:9a:05:7f: 06:63:9a:64:c9:91:d8:6b:6a:32:88:d1:18:6e:ff: 94:72:65:0c:71:75:2e:d0:69:1c:a8:5b:78:b9:8f: 3f:15:98:fd:5c:e9:6a:10:cb:59:d5:a0:a4:af:c8: b3:a0:b2:dc:11:8d:e1:94:40:a5:32:95:74:39:21: fb:71:02:84:7b:d3:4c:98:b1:aa:f0:37:7c:f1:4a: f1:68:c6:a6:67:21:96:41:eb:cc:f6:22:6b:34:40: 3b:ac:cd:f9:3f:4a:77:8b:17:0d:23:0c:22:82:a0: 2f:da:19:22:2e:37:33:64:9c:ba:b4:c1:65:e7:ce: 35:da:cb:bd:3d:55:30:61:32:58:29:af:52:7b:d6: 0b:43:7f:2e:d3:41:72:c4:cb:19:29:05:5b:0c:e8: 53:86:80:96:ca:79:7a:16:b9:7d:b4:50:e3:d7:62: e8:80:b9:d4:b3:98:47:60:2b:e9:42:b9:c2:cd:da: 67:27:57:19:ce:35:b8:5f:e5:ec:64:92:4e:c2:d2: ed:a7:e4:bb:fb:57:ac:8a:31:26:ba:ea:eb:6c:19: 39:9a:54:1a:ca:af:df:bd:f9:83:c2:7e:9f:ca:d0: 01:da:0e:8d:bc:32:d5:ad:b7:25:01:85:93:61:f2: 34:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5E:99:77:04:70:63:6D:98:C6:72:7B:A3:92:AB:2C:58:8E:4A:4B X509v3 Authority Key Identifier: keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/zV6ZdwRwY22YxnJ7o5KrLFiOSks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.205.0/24 Signature Algorithm: sha256WithRSAEncryption 48:af:31:c6:35:7d:5c:28:63:3b:3e:30:9d:ec:06:56:21:54: 82:c5:16:4d:bd:b7:82:e7:f0:96:18:4c:52:3b:4a:f7:2c:b9: 2c:a8:75:df:40:07:b2:15:56:54:b6:98:32:3c:b7:95:19:4e: 8b:e1:44:68:bd:02:27:33:33:38:0b:e5:cd:d7:1a:ef:4c:93: 78:f5:5c:88:c4:b9:0a:91:20:02:a8:dc:bf:03:d4:93:7e:97: 89:30:e3:d2:b5:4c:10:41:f3:f6:2a:a4:01:db:94:2a:3c:97: 17:b8:43:f6:34:63:2c:39:67:08:ce:10:19:32:4e:d9:04:39: 5c:ee:f4:81:15:5d:12:22:40:7e:c9:35:b5:c3:c1:ee:62:48: 51:ae:02:8d:92:e2:97:76:7b:da:4a:79:da:0d:26:d8:ed:2a: 51:3b:79:0d:06:8f:59:ba:9d:eb:bb:b3:9f:1b:31:06:cc:d2: ad:45:14:ab:d4:db:45:32:e0:39:52:8b:44:d1:36:13:15:a9: 98:e8:66:67:21:14:bd:cb:41:7d:e7:3a:b7:e6:36:d7:fe:29: 26:6f:ed:3f:59:5b:14:56:bf:d5:3a:06:9f:fe:af:33:f7:b5: 48:ad:cf:27:7b:3b:a1:ea:48:f4:0c:e9:bf:da:42:20:39:9c: e6:cc:c1:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrebrNXkKtBXHJtkmQ61vvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz M2I1MzMwHhcNMjUxMjAyMDkzOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDVlOTk3NzA0NzA2MzZkOThjNjcyN2JhMzkyYWIyYzU4OGU0YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FHKDj/clLFxzgGaBX8GY5pkyZHY a2oyiNEYbv+UcmUMcXUu0GkcqFt4uY8/FZj9XOlqEMtZ1aCkr8izoLLcEY3hlECl MpV0OSH7cQKEe9NMmLGq8Dd88UrxaMamZyGWQevM9iJrNEA7rM35P0p3ixcNIwwi gqAv2hkiLjczZJy6tMFl58412su9PVUwYTJYKa9Se9YLQ38u00FyxMsZKQVbDOhT hoCWynl6Frl9tFDj12LogLnUs5hHYCvpQrnCzdpnJ1cZzjW4X+XsZJJOwtLtp+S7 +1esijEmuurrbBk5mlQayq/fvfmDwn6fytAB2g6NvDLVrbclAYWTYfI0LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM1emXcEcGNtmMZye6OSqyxYjkpLMB8GA1UdIwQY MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt NDE0OTA4NzJmYzRlLzEvelY2WmR3UndZMjJZeG5KN281S3JMRmlPU2tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XNMA0G CSqGSIb3DQEBCwUAA4IBAQBIrzHGNX1cKGM7PjCd7AZWIVSCxRZNvbeC5/CWGExS O0r3LLksqHXfQAeyFVZUtpgyPLeVGU6L4URovQInMzM4C+XN1xrvTJN49VyIxLkK kSACqNy/A9STfpeJMOPStUwQQfP2KqQB25QqPJcXuEP2NGMsOWcIzhAZMk7ZBDlc 7vSBFV0SIkB+yTW1w8HuYkhRrgKNkuKXdnvaSnnaDSbY7SpRO3kNBo9Zup3ru7Of GzEGzNKtRRSr1NtFMuA5UotE0TYTFamY6GZnIRS9y0F95zq35jbX/ikmb+0/WVsU Vr/VOgaf/q8z97VIrc8nezuh6kj0DOm/2kIgOZzmzMHG -----END CERTIFICATE-----Generated at Sun Dec 7 03:34:18 2025 by rpki-client