This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_ZxvTIRiTqjond-_Vr0l7u0BQoc.roa File: _ZxvTIRiTqjond-_Vr0l7u0BQoc.roa (raw, json) Hash identifier: IEZgSRW70ongwoO72tP9fmLh16VUwL9tkuvJ1gcPTwE= Subject key identifier: FD:9C:6F:4C:84:62:4E:A8:E8:9D:DF:BF:56:BD:25:EE:ED:01:42:87 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019AEE1D0275B136C7ABEA99FA66490866F7 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_ZxvTIRiTqjond-_Vr0l7u0BQoc.roa Signing time: Fri 05 Dec 2025 10:44:29 +0000 ROA not before: Fri 05 Dec 2025 10:44:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 194.231.132.0/22 maxlen: 22 194.231.136.0/22 maxlen: 22 194.231.136.0/24 maxlen: 24 194.231.150.0/24 maxlen: 24 194.231.152.0/22 maxlen: 22 194.231.195.0/24 maxlen: 24 194.231.196.0/22 maxlen: 22 194.231.200.0/22 maxlen: 22 194.231.204.0/22 maxlen: 22 194.231.204.0/23 maxlen: 24 194.231.206.0/23 maxlen: 24 194.231.208.0/23 maxlen: 24 194.231.210.0/23 maxlen: 24 194.231.212.0/22 maxlen: 22 194.231.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:1d:02:75:b1:36:c7:ab:ea:99:fa:66:49:08:66:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 5 10:44:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd9c6f4c84624ea8e89ddfbf56bd25eeed014287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:76:dc:15:6a:05:85:97:72:7b:a4:09:f8: 5b:93:ae:c3:2e:ce:2c:af:81:b5:df:b3:13:56:98: be:cb:48:e3:2e:ee:22:0a:08:fc:f2:a9:6d:f2:d3: 88:b3:ba:32:ce:8e:87:62:e4:9f:06:1f:d8:48:11: 41:e4:64:41:22:f9:e6:83:6c:b3:1e:9c:5b:92:96: 18:db:37:f6:19:f0:d5:f3:93:da:1b:81:60:88:c6: d4:59:16:78:be:bd:14:d3:e3:3b:3b:5e:85:89:0d: 12:5c:36:25:42:9f:49:cb:57:d7:f7:02:f7:3b:e5: bd:bf:6f:25:7c:9b:82:ba:91:38:e0:90:72:fc:a0: 7a:4a:af:a6:9f:60:62:9b:c0:e5:b8:8c:49:6e:bf: b7:61:f7:cc:36:62:41:4a:9c:f7:e5:e2:86:8a:8b: 5d:12:a6:3a:36:db:89:c6:5f:60:93:21:c7:e9:a1: 7a:23:b9:45:1b:68:4c:5a:23:93:28:74:ef:89:86: 01:16:5e:e7:3f:84:17:36:a3:fc:99:01:ef:58:2b: fd:d3:90:13:54:2a:6b:c5:4e:03:d9:b8:55:80:8a: b3:92:9e:82:af:ba:13:81:ec:d8:38:44:5d:de:28: 54:4d:a5:45:86:1c:4f:74:8b:50:cb:a7:ee:9d:08: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9C:6F:4C:84:62:4E:A8:E8:9D:DF:BF:56:BD:25:EE:ED:01:42:87 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/_ZxvTIRiTqjond-_Vr0l7u0BQoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.132.0-194.231.139.255 194.231.150.0/24 194.231.152.0/22 194.231.195.0-194.231.215.255 194.231.220.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:8f:bb:31:3a:c2:7b:1e:aa:68:d2:64:e2:08:83:7c:1f:fc: 22:96:32:bd:80:25:db:72:0b:bb:08:a8:94:2f:14:e0:d7:49: a2:97:0f:eb:9e:4f:f6:30:a4:fa:c5:25:2d:59:16:63:21:08: 16:2d:94:6f:6f:4f:85:16:e3:c8:18:a1:d3:e0:b4:ba:48:c8: 66:fa:ff:42:c2:e8:fe:a0:0c:0c:d2:eb:66:3c:7f:fd:ee:a9: f0:78:79:97:f1:66:04:8e:d3:e1:09:51:70:78:87:f6:18:0b: 12:6a:e5:8c:0a:5b:e1:34:6e:cb:c1:86:c5:73:f0:a1:ba:2c: 9f:58:f6:11:18:ce:99:7a:c3:f6:1f:e7:fc:4f:94:df:c4:2f: 67:64:b0:ca:bc:d5:26:16:b6:cd:96:f2:67:ba:a3:ef:1b:c2: 82:bb:ae:f2:a6:f1:2a:15:db:62:b4:04:84:dd:38:6b:e2:70: 4e:65:c8:f1:ee:4d:02:f6:5b:66:f8:b5:c9:b3:5e:87:bd:49: 6d:67:d5:ac:78:4a:ad:09:cb:f9:a2:bf:f8:8c:78:69:82:15: 4c:69:82:73:e5:df:7d:d8:48:fb:d9:d9:b8:eb:f1:3d:63:7e: 9a:6c:8d:2e:3e:db:80:93:7b:6b:10:72:1c:ff:0f:3c:d7:df: 34:e8:8a:d6 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZruHQJ1sTbHq+qZ+mZJCGb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjA1MTA0NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDljNmY0Yzg0NjI0ZWE4ZTg5ZGRmYmY1NmJkMjVlZWVkMDE0Mjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvV23BVqBYWXcnukCfhbk67DLs4s r4G137MTVpi+y0jjLu4iCgj88qlt8tOIs7oyzo6HYuSfBh/YSBFB5GRBIvnmg2yz HpxbkpYY2zf2GfDV85PaG4FgiMbUWRZ4vr0U0+M7O16FiQ0SXDYlQp9Jy1fX9wL3 O+W9v28lfJuCupE44JBy/KB6Sq+mn2Bim8DluIxJbr+3YffMNmJBSpz35eKGiotd EqY6NtuJxl9gkyHH6aF6I7lFG2hMWiOTKHTviYYBFl7nP4QXNqP8mQHvWCv905AT VCprxU4D2bhVgIqzkp6Cr7oTgezYOERd3ihUTaVFhhxPdItQy6funQioKQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFP2cb0yEYk6o6J3fv1a9Je7tAUKHMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvX1p4dlRJUmlUcWpvbmQtX1ZyMGw3dTBCUW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBALC54QD BALC54gDBADC55YDBALC55gwDAMEAMLnwwMEA8Ln0AMEAsLn3DANBgkqhkiG9w0B AQsFAAOCAQEALo+7MTrCex6qaNJk4giDfB/8IpYyvYAl23ILuwiolC8U4NdJopcP 655P9jCk+sUlLVkWYyEIFi2Ub29PhRbjyBih0+C0ukjIZvr/QsLo/qAMDNLrZjx/ /e6p8Hh5l/FmBI7T4QlRcHiH9hgLEmrljApb4TRuy8GGxXPwobosn1j2ERjOmXrD 9h/n/E+U38QvZ2SwyrzVJha2zZbyZ7qj7xvCgruu8qbxKhXbYrQEhN04a+JwTmXI 8e5NAvZbZvi1ybNeh71JbWfVrHhKrQnL+aK/+Ix4aYIVTGmCc+XffdhI+9nZuOvx PWN+mmyNLj7bgJN7axByHP8PPNffNOiK1g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:46:40 2025 by rpki-client