This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/Zvz3oDW3cSyOvmrblBnpsILjfO8.roa File: Zvz3oDW3cSyOvmrblBnpsILjfO8.roa (raw, json) Hash identifier: h4T4wUccOgORC438fwXvR3MkqbaHMSWQOxEx8sOZySQ= Subject key identifier: 66:FC:F7:A0:35:B7:71:2C:8E:BE:6A:DB:94:19:E9:B0:82:E3:7C:EF Certificate issuer: /CN=595512069e65c590802ece5bf7bd87e66b8f35d3 Certificate serial: 019AB56BDB91E06725EEA410DFC1EEE0991B Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/Zvz3oDW3cSyOvmrblBnpsILjfO8.roa Signing time: Mon 24 Nov 2025 10:32:15 +0000 ROA not before: Mon 24 Nov 2025 10:32:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213094 IP address blocks: 84.18.224.0/22 maxlen: 22 84.18.240.0/22 maxlen: 22 94.103.240.0/22 maxlen: 22 193.3.34.0/24 maxlen: 24 2a0b:cc80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:6b:db:91:e0:67:25:ee:a4:10:df:c1:ee:e0:99:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3 Validity Not Before: Nov 24 10:32:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=66fcf7a035b7712c8ebe6adb9419e9b082e37cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:97:7b:95:48:4b:4c:96:c0:bd:d5:9e:38: df:88:f7:fe:35:c4:39:14:a3:7e:62:17:26:58:34: 71:09:e2:e0:e9:af:69:19:ec:bb:53:28:ff:56:ad: 93:49:8d:da:1e:a3:0e:6e:ce:c3:1b:30:a1:dd:fa: 95:d9:9d:4c:d3:cb:70:bd:c9:34:b7:f1:d2:18:ea: eb:5e:70:76:b1:f1:52:1c:ab:b8:5c:20:d8:f4:f8: 4d:34:4e:ef:5c:88:7b:52:e5:d2:62:04:a4:78:05: 09:23:6d:9e:d9:17:51:d5:c5:3d:65:c7:5d:63:7e: 5e:da:39:a7:8b:00:d0:c9:a9:83:17:e8:92:2d:7a: e2:05:11:24:08:7d:5d:21:81:5b:84:ff:bc:88:6b: 1c:e2:2d:48:69:d4:49:a7:f0:cf:dc:67:a2:b0:3c: 93:05:48:63:67:52:1b:52:aa:55:96:77:c7:bb:bc: 3c:7b:5e:5b:bb:fc:b8:7a:0e:f4:8b:4f:9b:df:bd: cb:f3:df:3c:66:8a:61:d3:33:f6:1d:dd:9f:98:2c: 20:5f:0d:00:67:6d:57:19:32:82:28:6c:02:b5:c5: 53:64:e7:60:f1:37:fe:a1:52:81:e7:23:54:37:e9: 61:81:db:c4:38:ac:24:ea:88:90:5f:84:7d:d3:5a: 18:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FC:F7:A0:35:B7:71:2C:8E:BE:6A:DB:94:19:E9:B0:82:E3:7C:EF X509v3 Authority Key Identifier: keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/Zvz3oDW3cSyOvmrblBnpsILjfO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.18.224.0/22 84.18.240.0/22 94.103.240.0/22 193.3.34.0/24 IPv6: 2a0b:cc80::/29 Signature Algorithm: sha256WithRSAEncryption 0f:02:02:1e:73:c9:fc:1f:f2:9e:53:af:61:02:de:c8:e9:c0: b3:54:3e:b3:aa:1b:b5:64:53:f1:a0:9d:23:c3:aa:b2:e5:9c: 2e:4b:5e:dc:20:48:57:24:bd:54:68:be:85:34:73:fe:e7:f4: be:fd:c7:2e:81:74:1c:56:61:86:f1:b3:75:0f:bc:55:05:b3: 6a:0b:2c:b0:fd:e2:00:fe:b5:65:8b:97:74:be:b4:af:97:66: 0f:5a:26:9e:22:67:2b:c6:76:a9:17:e5:cf:89:79:47:e7:96: 76:29:1a:a4:b5:d8:ee:21:17:94:12:81:9c:28:cd:1e:f2:1a: 4a:56:f3:5f:6e:94:15:c5:9b:1d:d1:4b:42:79:4b:85:34:95: d7:5f:18:f9:9d:b7:41:4b:87:ff:41:3c:70:f1:bb:b9:7a:56: d1:a4:81:a6:4a:09:9c:c7:28:0f:c3:33:29:2f:05:7b:82:dd: aa:e9:70:10:8c:39:a6:5d:9f:75:7f:a9:33:81:24:2f:97:6a: d5:08:11:76:2d:b7:da:05:e4:26:69:59:e0:50:df:40:3a:dc: 66:86:4e:d2:87:e2:a7:09:36:93:8e:b5:90:17:d6:9d:3c:fe: 5f:09:f6:56:63:53:16:ec:b1:87:87:85:fb:4a:74:9a:ec:a3: 97:5c:44:94 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZq1a9uR4Gcl7qQQ38Hu4JkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTUxMjA2OWU2NWM1OTA4MDJlY2U1YmY3YmQ4N2U2NmI4 ZjM1ZDMwHhcNMjUxMTI0MTAzMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmZjZjdhMDM1Yjc3MTJjOGViZTZhZGI5NDE5ZTliMDgyZTM3Y2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PaXe5VIS0yWwL3VnjjfiPf+NcQ5 FKN+YhcmWDRxCeLg6a9pGey7Uyj/Vq2TSY3aHqMObs7DGzCh3fqV2Z1M08twvck0 t/HSGOrrXnB2sfFSHKu4XCDY9PhNNE7vXIh7UuXSYgSkeAUJI22e2RdR1cU9Zcdd Y35e2jmniwDQyamDF+iSLXriBREkCH1dIYFbhP+8iGsc4i1IadRJp/DP3GeisDyT BUhjZ1IbUqpVlnfHu7w8e15bu/y4eg70i0+b373L8988Zoph0zP2Hd2fmCwgXw0A Z21XGTKCKGwCtcVTZOdg8Tf+oVKB5yNUN+lhgdvEOKwk6oiQX4R901oY8QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFGb896A1t3Esjr5q25QZ6bCC43zvMB8GA1UdIwQY MBaAFFlVEgaeZcWQgC7OW/e9h+ZrjzXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYt NDNhNDNkYTkyODlhLzEvWnZ6M29EVzNjU3lPdm1yYmxCbnBzSUxqZk84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xYmVkMTctNWUzMy00M2ExLWJiOGYtNDNhNDNkYTkyODlh LzEvV1ZVU0JwNWx4WkNBTHM1Yjk3Mkg1bXVQTmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCVBLgAwQC VBLwAwQCXmfwAwQAwQMiMA0EAgACMAcDBQMqC8yAMA0GCSqGSIb3DQEBCwUAA4IB AQAPAgIec8n8H/KeU69hAt7I6cCzVD6zqhu1ZFPxoJ0jw6qy5ZwuS17cIEhXJL1U aL6FNHP+5/S+/ccugXQcVmGG8bN1D7xVBbNqCyyw/eIA/rVli5d0vrSvl2YPWiae ImcrxnapF+XPiXlH55Z2KRqktdjuIReUEoGcKM0e8hpKVvNfbpQVxZsd0UtCeUuF NJXXXxj5nbdBS4f/QTxw8bu5elbRpIGmSgmcxygPwzMpLwV7gt2q6XAQjDmmXZ91 f6kzgSQvl2rVCBF2LbfaBeQmaVngUN9AOtxmhk7Sh+KnCTaTjrWQF9adPP5fCfZW Y1MW7LGHh4X7SnSa7KOXXESU -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:36 2025 by rpki-client