This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zK-byoszE4NY6E1kzAerRlMAkRw.roa File: zK-byoszE4NY6E1kzAerRlMAkRw.roa (raw, json) Hash identifier: rU/ovIRGgstJt6kwx00cqegZjBk/AcsVlza0mM2AauE= Subject key identifier: CC:AF:9B:CA:8B:33:13:83:58:E8:4D:64:CC:07:AB:46:53:00:91:1C Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019A913DCD23ACBFC0FCB3CD6596554FDAC7 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zK-byoszE4NY6E1kzAerRlMAkRw.roa Signing time: Mon 17 Nov 2025 09:55:37 +0000 ROA not before: Mon 17 Nov 2025 09:55:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 95.170.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:3d:cd:23:ac:bf:c0:fc:b3:cd:65:96:55:4f:da:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Nov 17 09:55:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ccaf9bca8b33138358e84d64cc07ab465300911c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:33:48:4f:0c:2c:80:98:81:53:99:f8:f5: 49:46:69:89:5f:b0:10:50:93:f6:bf:85:c7:8f:ff: 0b:5a:ed:70:50:4b:2d:bc:e3:d4:ad:b7:eb:26:f6: 05:08:89:bb:d7:7a:cb:63:28:b9:22:a0:28:ab:0a: 6d:36:a1:fb:41:29:6c:5b:95:8e:19:eb:0d:2b:c2: a0:db:98:b4:36:04:1e:0a:02:ca:45:d6:a1:60:3a: 18:99:67:af:75:7d:ae:ce:9c:8e:c6:37:ce:44:ea: 6a:0c:95:bd:58:5b:0c:8b:e4:46:92:c4:54:c2:da: 7c:34:28:4a:d5:e7:85:7d:c9:70:95:76:0c:b9:bc: 7a:96:f6:f4:f4:22:10:ab:d4:9b:f2:08:7f:59:6e: 53:40:9b:e0:db:7e:e5:fe:43:88:47:69:d2:bb:50: 7d:f1:09:b6:30:f4:17:87:c3:2a:dd:8a:2c:f2:87: cc:08:89:40:2b:70:01:04:44:9f:d3:26:24:89:b4: ee:cc:e0:8d:e6:f6:dd:58:f6:37:ba:a9:ec:9e:b9: d8:ee:8c:38:ab:97:14:42:5f:5b:6c:ab:bf:59:83: bb:9d:09:cf:46:ae:7a:82:79:b6:20:4c:fc:11:ed: 0b:e5:68:ac:d0:8b:70:c5:9e:8f:15:13:aa:06:15: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AF:9B:CA:8B:33:13:83:58:E8:4D:64:CC:07:AB:46:53:00:91:1C X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/zK-byoszE4NY6E1kzAerRlMAkRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.18.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:5e:16:24:28:65:b2:02:b0:5f:dc:80:5a:32:4d:d5:be:2b: 8c:21:c3:58:93:b8:f5:c2:34:92:d5:79:2a:f0:15:cd:6f:cb: bc:70:9a:da:da:28:96:a9:10:9b:7e:60:ca:6a:a8:88:f1:ac: bf:91:a8:71:fc:8e:2e:7b:ad:51:be:97:13:fa:5d:73:76:14: 96:57:05:d2:d6:9f:42:02:20:cc:b3:c4:86:d5:33:f0:ac:c6: 72:d7:98:12:27:77:51:af:5e:9b:e3:5e:3c:fb:e0:7e:e2:65: 5b:14:18:2c:68:60:44:5a:cf:22:b2:65:33:e1:b6:a6:f9:c2: bf:e3:81:7d:9e:03:b3:c9:1a:f8:7b:48:97:2c:fd:88:a7:91: 44:94:1e:02:36:34:6c:12:d8:89:a4:e0:a4:cf:dd:f9:50:96: 11:c9:5a:ea:a0:ff:4e:50:ea:89:1c:9f:2e:21:7a:71:ab:c2: ee:06:9c:40:ab:06:ad:ae:7a:7c:16:47:13:45:ff:28:9b:f7: 44:62:89:e0:c4:cc:3a:42:c8:d2:31:4d:f3:d4:1c:62:d0:69: 1f:bf:d1:68:b7:0c:fe:cf:84:ba:c7:84:b2:a9:0a:6e:71:4b: f0:9f:51:23:0f:ee:0d:4d:20:8d:93:35:b2:b4:06:1a:71:6d: fc:64:b7:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqRPc0jrL/A/LPNZZZVT9rHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMTE3MDk1NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2FmOWJjYThiMzMxMzgzNThlODRkNjRjYzA3YWI0NjUzMDA5MTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CgzSE8MLICYgVOZ+PVJRmmJX7AQ UJP2v4XHj/8LWu1wUEstvOPUrbfrJvYFCIm713rLYyi5IqAoqwptNqH7QSlsW5WO GesNK8Kg25i0NgQeCgLKRdahYDoYmWevdX2uzpyOxjfOROpqDJW9WFsMi+RGksRU wtp8NChK1eeFfclwlXYMubx6lvb09CIQq9Sb8gh/WW5TQJvg237l/kOIR2nSu1B9 8Qm2MPQXh8Mq3Yos8ofMCIlAK3ABBESf0yYkibTuzOCN5vbdWPY3uqnsnrnY7ow4 q5cUQl9bbKu/WYO7nQnPRq56gnm2IEz8Ee0L5Wis0ItwxZ6PFROqBhU5VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMyvm8qLMxODWOhNZMwHq0ZTAJEcMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvekstYnlvc3pFNE5ZNkUxa3pBZXJSbE1Ba1J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oSMA0G CSqGSIb3DQEBCwUAA4IBAQAdXhYkKGWyArBf3IBaMk3VviuMIcNYk7j1wjSS1Xkq 8BXNb8u8cJra2iiWqRCbfmDKaqiI8ay/kahx/I4ue61RvpcT+l1zdhSWVwXS1p9C AiDMs8SG1TPwrMZy15gSJ3dRr16b4148++B+4mVbFBgsaGBEWs8ismUz4bam+cK/ 44F9ngOzyRr4e0iXLP2Ip5FElB4CNjRsEtiJpOCkz935UJYRyVrqoP9OUOqJHJ8u IXpxq8LuBpxAqwatrnp8FkcTRf8om/dEYongxMw6QsjSMU3z1Bxi0Gkfv9Fotwz+ z4S6x4SyqQpucUvwn1EjD+4NTSCNkzWytAYacW38ZLe0 -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:07 2025 by rpki-client