This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/z9zBZWxKEctyUTKIm_8RlJkrC_k.roa File: z9zBZWxKEctyUTKIm_8RlJkrC_k.roa (raw, json) Hash identifier: IJThR3o0JV974+Yl2uq1VkI1yGHcJoO2uQGyrnQksfI= Subject key identifier: CF:DC:C1:65:6C:4A:11:CB:72:51:32:88:9B:FF:11:94:99:2B:0B:F9 Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd Certificate serial: 019B26FF9038ED0C0102E6E4E4DAC0FF4E32 Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/z9zBZWxKEctyUTKIm_8RlJkrC_k.roa Signing time: Tue 16 Dec 2025 11:50:41 +0000 ROA not before: Tue 16 Dec 2025 11:50:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48390 IP address blocks: 185.20.3.0/24 maxlen: 24 2a0c:d0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:ff:90:38:ed:0c:01:02:e6:e4:e4:da:c0:ff:4e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd Validity Not Before: Dec 16 11:50:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cfdcc1656c4a11cb725132889bff1194992b0bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:38:52:99:2c:54:e9:9e:bc:fa:e5:7c:eb: b6:2b:e8:fa:73:8c:c4:78:63:29:b1:4d:53:9e:45: 54:80:ae:17:a6:b7:15:a4:26:19:7d:f0:9c:fa:1b: b9:7b:2f:d3:bc:4b:15:70:2d:93:d9:15:88:fe:2c: 22:51:ea:ef:e2:8e:87:c5:bf:0e:10:8e:b4:7e:34: 5a:a3:a6:2e:f2:25:d3:c4:89:5d:e6:a5:57:01:33: c8:75:fa:44:97:75:d2:05:15:25:b5:46:bc:09:88: 2f:ff:15:14:d8:c5:8d:51:fd:aa:6b:c6:3c:35:d5: 8b:2f:d3:6d:0a:8c:a4:19:8c:44:ad:51:fe:20:85: 2e:da:33:7c:4c:21:48:32:2b:2f:eb:b3:ea:b6:f7: d3:82:d4:47:48:08:e6:4d:6a:94:33:30:6d:27:9a: 4f:3e:80:8c:cb:69:31:3c:16:43:42:2d:c8:57:f2: ac:dd:01:7c:c3:6e:0e:9b:a2:c6:a4:1f:0e:67:c9: 6b:44:e7:57:5d:44:b2:f6:03:76:2a:16:4b:f0:ad: 8b:0d:18:c3:6f:b7:e2:7c:7c:65:91:48:cc:99:e0: b5:44:18:18:02:38:c9:75:40:e8:43:a1:c2:9d:32: f1:30:1b:24:10:23:fc:20:6d:1f:a0:3e:68:33:9c: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DC:C1:65:6C:4A:11:CB:72:51:32:88:9B:FF:11:94:99:2B:0B:F9 X509v3 Authority Key Identifier: keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/z9zBZWxKEctyUTKIm_8RlJkrC_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.3.0/24 IPv6: 2a0c:d0c0::/29 Signature Algorithm: sha256WithRSAEncryption 82:a5:a7:0c:1d:3b:02:27:2e:34:d5:8f:5e:d1:20:eb:c8:2b: 63:e5:c5:a6:95:95:85:dd:89:8f:b8:80:66:51:d8:f2:e1:48: 23:d3:93:cf:fc:3f:d6:e7:6c:32:22:27:ff:16:de:4d:83:0c: 70:d8:5c:46:6a:c8:db:34:b5:e0:51:98:64:04:0e:6c:3f:be: c4:27:5b:14:0a:b2:1f:69:0f:ea:1d:59:7f:89:c9:33:34:24: 0f:bf:1f:22:8e:d1:11:3d:28:08:42:82:57:23:63:4f:8c:5e: fe:78:a8:66:3e:18:0f:d1:1b:0b:77:0a:89:e6:d2:c7:a1:fc: 37:39:32:60:22:7e:47:92:e8:bc:ee:f7:a4:e9:0c:31:49:96: aa:10:83:93:2b:2d:e5:c5:9e:cd:9c:fd:c1:bc:cd:41:56:ba: 94:b2:da:a4:04:18:3f:15:1f:72:77:fc:2f:7c:b3:c7:8e:7a: f4:f9:3a:60:8d:75:0d:a4:29:22:19:31:2c:aa:93:6f:b4:78: 17:e5:71:2a:db:eb:d2:4c:df:46:39:1e:fa:6a:51:06:3d:d2: 7f:c6:8c:bf:37:61:40:03:ce:84:f8:fd:a4:13:ba:91:82:0a: ee:de:83:8c:10:57:7f:7f:21:a2:49:e9:2b:50:85:d3:87:5c: 51:05:05:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsm/5A47QwBAubk5NrA/04yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjIxZGNkYzdhZDBiZTMzMWQ3YzlhNDQ3ZjJhMTY0ZTQy ZWE0ZmQwHhcNMjUxMjE2MTE1MDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmRjYzE2NTZjNGExMWNiNzI1MTMyODg5YmZmMTE5NDk5MmIwYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys44UpksVOmevPrlfOu2K+j6c4zE eGMpsU1TnkVUgK4XprcVpCYZffCc+hu5ey/TvEsVcC2T2RWI/iwiUerv4o6Hxb8O EI60fjRao6Yu8iXTxIld5qVXATPIdfpEl3XSBRUltUa8CYgv/xUU2MWNUf2qa8Y8 NdWLL9NtCoykGYxErVH+IIUu2jN8TCFIMisv67PqtvfTgtRHSAjmTWqUMzBtJ5pP PoCMy2kxPBZDQi3IV/Ks3QF8w24Om6LGpB8OZ8lrROdXXUSy9gN2KhZL8K2LDRjD b7fifHxlkUjMmeC1RBgYAjjJdUDoQ6HCnTLxMBskECP8IG0foD5oM5wNfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM/cwWVsShHLclEyiJv/EZSZKwv5MB8GA1UdIwQY MBaAFNxiHc3HrQvjMdfJpEfyoWTkLqT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAt OTYyMWIyMDg4YzJkLzEvejl6QlpXeEtFY3R5VVRLSW1fOFJsSmtyQ19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAtOTYyMWIyMDg4YzJk LzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRQDMA0E AgACMAcDBQMqDNDAMA0GCSqGSIb3DQEBCwUAA4IBAQCCpacMHTsCJy401Y9e0SDr yCtj5cWmlZWF3YmPuIBmUdjy4Ugj05PP/D/W52wyIif/Ft5Ngwxw2FxGasjbNLXg UZhkBA5sP77EJ1sUCrIfaQ/qHVl/ickzNCQPvx8ijtERPSgIQoJXI2NPjF7+eKhm PhgP0RsLdwqJ5tLHofw3OTJgIn5Hkui87vek6QwxSZaqEIOTKy3lxZ7NnP3BvM1B VrqUstqkBBg/FR9yd/wvfLPHjnr0+TpgjXUNpCkiGTEsqpNvtHgX5XEq2+vSTN9G OR76alEGPdJ/xoy/N2FAA86E+P2kE7qRggru3oOMEFd/fyGiSekrUIXTh1xRBQWx -----END CERTIFICATE-----Generated at Fri Dec 19 10:34:49 2025 by rpki-client