This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/z9SG77lfTVyCRLoqp7jIC_9mXq8.roa File: z9SG77lfTVyCRLoqp7jIC_9mXq8.roa (raw, json) Hash identifier: IXpMEmP0C8uUOjQ/aQFRstq5yGkWLGGJFEJv+E+mBs8= Subject key identifier: CF:D4:86:EF:B9:5F:4D:5C:82:44:BA:2A:A7:B8:C8:0B:FF:66:5E:AF Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Certificate serial: 019AD9BC9DC6A73C91D995397B9CC6216C89 Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/z9SG77lfTVyCRLoqp7jIC_9mXq8.roa Signing time: Mon 01 Dec 2025 11:46:48 +0000 ROA not before: Mon 01 Dec 2025 11:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210513 IP address blocks: 62.3.56.0/24 maxlen: 24 80.173.228.0/23 maxlen: 23 185.65.255.0/24 maxlen: 24 2a12:100::/29 maxlen: 29 2a12:100:12::/48 maxlen: 48 2a12:100:13::/48 maxlen: 48 2a12:100:14::/48 maxlen: 48 2a12:100:16::/48 maxlen: 48 2a12:100:17::/48 maxlen: 48 2a12:100:18::/48 maxlen: 48 2a12:100:19::/48 maxlen: 48 2a12:100:1a::/48 maxlen: 48 2a12:100:1b::/48 maxlen: 48 2a12:100:1c::/48 maxlen: 48 2a12:100:1d::/48 maxlen: 48 2a12:100:22::/48 maxlen: 48 2a12:100:23::/48 maxlen: 48 2a12:100:24::/48 maxlen: 48 2a12:100:26::/48 maxlen: 48 2a12:100:27::/48 maxlen: 48 2a12:100:28::/48 maxlen: 48 2a12:100:29::/48 maxlen: 48 2a12:100:2a::/48 maxlen: 48 2a12:100:2b::/48 maxlen: 48 2a12:100:2c::/48 maxlen: 48 2a12:100:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:bc:9d:c6:a7:3c:91:d9:95:39:7b:9c:c6:21:6c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Validity Not Before: Dec 1 11:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cfd486efb95f4d5c8244ba2aa7b8c80bff665eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:8c:00:dc:c6:62:e9:a7:a1:d1:00:27:87: b2:df:8b:0e:02:ed:a3:c9:e3:8c:ec:6c:f3:af:2e: 18:6d:5f:37:16:07:a8:c0:98:e5:44:9f:4c:6d:06: 65:17:ab:ef:79:13:f5:bc:55:0f:f6:78:72:bc:b6: 3d:e1:e2:89:6b:db:43:1d:de:16:5f:26:44:83:8d: 84:af:45:bc:2e:d9:7a:70:0a:ab:f1:69:69:df:c0: d7:77:12:29:38:cc:40:e7:87:fe:36:8f:f7:36:2d: 4c:30:04:e0:ec:13:11:da:11:26:11:df:ea:33:db: e2:2c:f8:62:b9:c8:84:95:90:2e:c0:c5:27:31:d9: 2a:e2:74:7d:67:07:47:19:5f:ba:e9:22:ff:d0:e2: ad:41:72:dc:6e:36:cc:94:f8:8e:20:cb:0e:c5:59: cf:28:b1:6e:70:fa:6d:ab:97:e2:42:76:da:d0:a1: 08:55:67:28:1a:d6:08:c0:85:21:53:42:4d:ce:ff: 62:da:87:e1:87:d4:66:30:8a:e0:4f:36:b7:18:3f: 54:32:b2:bc:c4:aa:57:f9:7b:3c:68:84:32:90:d3: d1:f6:81:25:2e:47:a0:4e:59:70:b7:ff:fc:f2:64: 69:34:67:2a:7a:e5:d3:ce:6e:a7:40:9f:af:e4:05: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D4:86:EF:B9:5F:4D:5C:82:44:BA:2A:A7:B8:C8:0B:FF:66:5E:AF X509v3 Authority Key Identifier: keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/z9SG77lfTVyCRLoqp7jIC_9mXq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.56.0/24 80.173.228.0/23 185.65.255.0/24 IPv6: 2a12:100::/29 Signature Algorithm: sha256WithRSAEncryption 5b:27:3f:04:8a:89:2d:93:6d:23:5e:bd:dc:52:f2:68:f7:90: 0f:2d:68:70:4c:97:d7:e3:ba:1f:a5:c7:50:95:dd:ea:e0:75: 31:ee:94:11:88:ef:37:e2:c4:e6:a2:8f:c6:e7:f9:a3:99:07: ee:60:07:6b:1f:e1:fe:c6:5b:60:22:bb:70:5b:46:89:be:04: bd:95:e8:61:6d:4a:11:5d:01:c4:94:16:ef:9f:32:21:60:d2: e1:9c:ed:a6:18:74:a8:29:bd:f7:7d:ce:52:7a:ae:b1:87:93: 82:d0:b1:54:00:81:3e:cd:75:62:e4:8f:73:c3:b7:d6:11:7c: c0:81:17:b5:03:c8:00:eb:a9:c0:f4:31:91:e2:02:d0:c1:c0: 81:09:9d:e0:73:f5:8e:e1:a4:a0:b3:18:14:39:e2:79:41:6d: c7:95:b8:e8:de:c7:f7:0b:ce:5a:e8:8f:12:f8:cb:b8:9a:a5: 7c:a5:ca:79:f3:b4:b2:a5:cf:c9:3b:ce:74:77:39:77:8d:df: 09:3a:9d:b4:96:cd:0e:28:a6:f2:f0:26:8f:90:06:b6:0e:56: 38:1b:40:f8:e5:8e:57:92:40:0f:e8:56:6f:11:c1:fb:0e:34: bb:db:f3:99:d2:2f:ec:8f:31:61:4d:3b:d8:a7:9d:72:f9:37: 35:57:55:42 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZrZvJ3GpzyR2ZU5e5zGIWyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx MDc1OGMwHhcNMjUxMjAxMTE0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmQ0ODZlZmI5NWY0ZDVjODI0NGJhMmFhN2I4YzgwYmZmNjY1ZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG+MANzGYumnodEAJ4ey34sOAu2j yeOM7Gzzry4YbV83FgeowJjlRJ9MbQZlF6vveRP1vFUP9nhyvLY94eKJa9tDHd4W XyZEg42Er0W8Ltl6cAqr8Wlp38DXdxIpOMxA54f+No/3Ni1MMATg7BMR2hEmEd/q M9viLPhiuciElZAuwMUnMdkq4nR9ZwdHGV+66SL/0OKtQXLcbjbMlPiOIMsOxVnP KLFucPptq5fiQnba0KEIVWcoGtYIwIUhU0JNzv9i2ofhh9RmMIrgTza3GD9UMrK8 xKpX+Xs8aIQykNPR9oElLkegTllwt//88mRpNGcqeuXTzm6nQJ+v5AWVFwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFM/Uhu+5X01cgkS6Kqe4yAv/Zl6vMB8GA1UdIwQY MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt Nzk0NDk3NjU5OWQ4LzEvejlTRzc3bGZUVnlDUkxvcXA3aklDXzltWHE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4 LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAPgM4AwQB UK3kAwQAuUH/MA0EAgACMAcDBQMqEgEAMA0GCSqGSIb3DQEBCwUAA4IBAQBbJz8E ioktk20jXr3cUvJo95APLWhwTJfX47ofpcdQld3q4HUx7pQRiO834sTmoo/G5/mj mQfuYAdrH+H+xltgIrtwW0aJvgS9lehhbUoRXQHElBbvnzIhYNLhnO2mGHSoKb33 fc5Seq6xh5OC0LFUAIE+zXVi5I9zw7fWEXzAgRe1A8gA66nA9DGR4gLQwcCBCZ3g c/WO4aSgsxgUOeJ5QW3Hlbjo3sf3C85a6I8S+Mu4mqV8pcp587Sypc/JO850dzl3 jd8JOp20ls0OKKby8CaPkAa2DlY4G0D45Y5XkkAP6FZvEcH7DjS72/OZ0i/sjzFh TTvYp51y+Tc1V1VC -----END CERTIFICATE-----Generated at Sat Dec 6 22:48:30 2025 by rpki-client