This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Z-L7tmP6jPzdsqIRNjMahPTnEcE.roa File: Z-L7tmP6jPzdsqIRNjMahPTnEcE.roa (raw, json) Hash identifier: uqSW4c7lDey3q9smYCULLNkdbEbpO2kOH2zagS3boIE= Subject key identifier: 67:E2:FB:B6:63:FA:8C:FC:DD:B2:A2:11:36:33:1A:84:F4:E7:11:C1 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019ABB5C8A9DC82AD17155DB8B8623E8F34A Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Z-L7tmP6jPzdsqIRNjMahPTnEcE.roa Signing time: Tue 25 Nov 2025 14:13:15 +0000 ROA not before: Tue 25 Nov 2025 14:13:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 46450 IP address blocks: 188.255.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:5c:8a:9d:c8:2a:d1:71:55:db:8b:86:23:e8:f3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 25 14:13:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67e2fbb663fa8cfcddb2a21136331a84f4e711c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fd:c3:cc:a3:1e:c9:90:49:48:aa:d0:36:5a: 2f:ec:10:90:1f:77:8d:a4:78:eb:1c:14:83:b6:78: 63:0d:42:33:90:0f:b8:56:68:b7:1d:81:a2:c1:b3: 82:d3:d0:82:69:16:9c:81:89:93:8b:ab:26:b3:d0: 2a:4f:f7:4a:e5:69:8a:4c:d8:13:04:9b:f9:6e:90: 5e:7b:be:52:2f:0c:dc:dc:ab:c1:a2:00:5e:1e:8d: be:c6:0e:13:85:6c:0f:25:e4:c8:89:39:c5:8c:f7: 39:a7:dc:e0:67:2e:41:72:50:2a:63:c9:78:40:63: 61:84:80:99:b5:b8:bf:de:49:19:fe:f4:24:39:22: 2c:c5:1a:8b:cd:23:a1:98:1b:d2:01:f4:72:b5:55: 3a:be:f3:b1:be:30:48:26:ef:f2:82:ab:91:38:a7: 23:a7:cf:3b:d7:28:de:f6:61:51:4a:34:73:77:5a: 17:bf:39:76:df:f1:c8:a2:39:f2:fd:89:07:c5:30: 71:a1:23:2a:52:ca:2f:f1:1f:aa:7f:6c:6c:11:b0: 1e:ff:1f:d6:96:e5:40:f4:c0:27:70:ea:87:1d:7b: 6b:31:d1:1e:5e:ed:ca:1b:76:87:9c:48:a6:75:33: 42:09:72:59:7b:5c:bf:88:b5:ed:3b:74:c8:e7:28: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E2:FB:B6:63:FA:8C:FC:DD:B2:A2:11:36:33:1A:84:F4:E7:11:C1 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Z-L7tmP6jPzdsqIRNjMahPTnEcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.222.0/24 Signature Algorithm: sha256WithRSAEncryption 41:be:ce:a6:b1:bb:31:93:b4:2e:a1:d3:20:bd:08:e5:c8:7b: 9e:40:77:32:eb:ae:14:3d:a2:f7:ad:19:9e:dc:3a:30:bd:0c: 10:ee:6b:3d:e7:65:d2:70:7c:a7:56:fc:ea:f2:1c:d7:f6:05: aa:82:08:d8:c9:b4:6e:79:69:3f:59:ad:f0:e9:32:5a:db:01: 42:f8:34:44:a2:e5:21:76:04:bd:b7:d8:6d:cd:00:da:93:dd: 8a:df:f4:03:97:19:db:9a:f6:f3:86:03:cf:a7:db:ad:96:ee: e7:8e:a9:b0:68:47:2e:5e:7c:b3:1d:c3:cc:2c:3e:5e:5d:61: d6:44:5a:47:17:b2:25:61:eb:82:30:14:c2:c9:e5:aa:d6:b2: bb:a5:c8:9e:b2:b9:43:37:02:d8:11:75:dd:cc:5a:bc:18:6f: 54:15:98:f1:d4:bc:f9:42:af:3c:8d:f5:e2:b2:6b:04:c7:f8: 10:a6:8d:10:ff:ed:2d:2f:5b:66:64:65:1c:47:67:bb:90:b9: a6:ef:58:db:94:9f:3b:d4:26:70:69:8e:8b:ab:0f:86:63:9b: 35:f2:7f:82:d6:47:82:c9:c0:50:c6:41:a4:bf:6b:98:0a:f7: c0:87:61:5f:80:df:88:05:00:c7:72:34:db:90:5b:6f:b3:0a: 00:b7:4c:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq7XIqdyCrRcVXbi4Yj6PNKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTI1MTQxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2UyZmJiNjYzZmE4Y2ZjZGRiMmEyMTEzNjMzMWE4NGY0ZTcxMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf3DzKMeyZBJSKrQNlov7BCQH3eN pHjrHBSDtnhjDUIzkA+4Vmi3HYGiwbOC09CCaRacgYmTi6sms9AqT/dK5WmKTNgT BJv5bpBee75SLwzc3KvBogBeHo2+xg4ThWwPJeTIiTnFjPc5p9zgZy5BclAqY8l4 QGNhhICZtbi/3kkZ/vQkOSIsxRqLzSOhmBvSAfRytVU6vvOxvjBIJu/ygquROKcj p8871yje9mFRSjRzd1oXvzl23/HIojny/YkHxTBxoSMqUsov8R+qf2xsEbAe/x/W luVA9MAncOqHHXtrMdEeXu3KG3aHnEimdTNCCXJZe1y/iLXtO3TI5yifeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGfi+7Zj+oz83bKiETYzGoT05xHBMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvWi1MN3RtUDZqUHpkc3FJUk5qTWFoUFRuRWNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/eMA0G CSqGSIb3DQEBCwUAA4IBAQBBvs6msbsxk7QuodMgvQjlyHueQHcy664UPaL3rRme 3DowvQwQ7ms952XScHynVvzq8hzX9gWqggjYybRueWk/Wa3w6TJa2wFC+DREouUh dgS9t9htzQDak92K3/QDlxnbmvbzhgPPp9utlu7njqmwaEcuXnyzHcPMLD5eXWHW RFpHF7IlYeuCMBTCyeWq1rK7pciesrlDNwLYEXXdzFq8GG9UFZjx1Lz5Qq88jfXi smsEx/gQpo0Q/+0tL1tmZGUcR2e7kLmm71jblJ871CZwaY6Lqw+GY5s18n+C1keC ycBQxkGkv2uYCvfAh2FfgN+IBQDHcjTbkFtvswoAt0yk -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:31 2025 by rpki-client