This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/2ZJdZlNQngRUDvl5p6RXSIppK54.roa
File: 2ZJdZlNQngRUDvl5p6RXSIppK54.roa (raw, json)
Hash identifier: 5/RI/0rZcz+9JmaJZqOiKNXlkXj8pJBz9ZQmlsLnR54=
Subject key identifier: D9:92:5D:66:53:50:9E:04:54:0E:F9:79:A7:A4:57:48:8A:69:2B:9E
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 019A5A07E2FE011AC2A79E6BE5AE1BC25F48
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/2ZJdZlNQngRUDvl5p6RXSIppK54.roa
Signing time: Thu 06 Nov 2025 16:37:37 +0000
ROA not before: Thu 06 Nov 2025 16:37:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201448
IP address blocks: 194.92.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5a:07:e2:fe:01:1a:c2:a7:9e:6b:e5:ae:1b:c2:5f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Nov 6 16:37:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9925d6653509e04540ef979a7a457488a692b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:4d:a9:c3:d9:0b:3a:e4:e0:49:30:9a:9d:
60:92:e5:56:d3:7a:ce:e7:fa:ec:f3:4f:2a:9d:49:
b2:bc:47:4e:64:a4:f1:48:a6:1d:37:e4:53:bc:5a:
3a:9c:4e:45:b1:65:e6:57:25:3f:ab:7f:86:9d:e4:
8b:d3:4d:23:f4:d6:91:9e:74:81:2d:64:45:28:d4:
4f:0f:3b:c9:d6:f7:f1:11:74:36:79:2c:35:8a:28:
86:bc:eb:4f:58:a0:08:bb:56:0e:8a:65:8a:3c:3a:
d2:98:42:19:6c:a4:83:11:45:4c:4c:dc:e7:5a:37:
50:c4:6d:e1:c7:bf:ae:ea:67:1e:2d:31:57:07:ff:
1a:03:77:46:56:33:ea:72:14:e1:85:89:a2:35:6b:
5a:a9:0a:ae:ba:fb:1e:2e:16:9f:67:31:c9:53:f3:
87:17:7d:37:f9:99:36:0b:33:11:1b:4a:de:c4:10:
b8:69:ae:35:5a:67:e9:bd:ac:ec:08:61:25:0b:d4:
f8:53:c7:43:6c:ef:07:2e:54:10:81:15:f7:41:68:
0d:98:84:4c:47:f2:53:e0:61:85:a3:5d:ff:20:7d:
2f:bc:25:3e:fe:f6:3d:0b:32:73:b3:a0:3b:a2:d5:
0d:94:7f:b1:5c:c3:12:28:f0:6c:32:15:92:a1:f6:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:5D:66:53:50:9E:04:54:0E:F9:79:A7:A4:57:48:8A:69:2B:9E
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/2ZJdZlNQngRUDvl5p6RXSIppK54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:e7:04:8c:77:8e:70:6d:eb:3c:fa:91:bc:c1:76:4b:2f:
89:3e:38:53:06:d8:d4:4a:6c:80:10:1d:8d:f1:6d:88:91:8a:
e2:57:ce:75:e9:16:04:e1:f8:33:44:e2:83:7c:aa:87:8b:b0:
de:00:92:4e:67:f5:bd:17:6c:22:b6:cc:ed:63:65:d7:bd:9d:
70:cc:69:c9:bd:76:ec:14:7e:33:e8:d4:5f:18:14:2f:b6:1e:
46:71:74:a2:7a:4b:33:5b:78:ce:d3:20:10:89:f1:79:5f:55:
bc:95:1e:65:34:7f:80:c7:33:80:f7:2b:de:92:97:8a:82:f4:
a4:18:b1:fc:cb:4b:0f:62:62:a8:60:a1:6c:9d:66:e8:f9:df:
fa:f5:cb:55:b3:d7:ba:e3:a2:36:81:18:36:2e:cc:14:c3:c3:
6d:01:43:d8:21:de:73:19:1b:e4:26:35:0f:53:86:aa:14:29:
49:8a:c3:ba:e6:8b:c8:84:f1:c7:52:a1:bd:72:1f:e6:9e:7b:
f4:e5:59:0e:64:f6:84:97:0e:61:53:1f:62:54:e6:88:95:25:
8e:cb:0f:33:79:d4:86:7f:ce:de:b7:4f:9d:53:1c:e0:12:38:
1d:03:b0:c8:72:10:5c:8a:e3:fa:1b:08:61:90:bd:c3:fb:a3:
ab:74:e8:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpaB+L+ARrCp55r5a4bwl9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOWU5Njk2ZGNjZjZjMWE0MzIwOTA0MDg1MTRhZWNkYzNm
NjA3MzkwHhcNMjUxMTA2MTYzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTkyNWQ2NjUzNTA5ZTA0NTQwZWY5NzlhN2E0NTc0ODhhNjkyYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E1NqcPZCzrk4Ekwmp1gkuVW03rO
5/rs808qnUmyvEdOZKTxSKYdN+RTvFo6nE5FsWXmVyU/q3+GneSL000j9NaRnnSB
LWRFKNRPDzvJ1vfxEXQ2eSw1iiiGvOtPWKAIu1YOimWKPDrSmEIZbKSDEUVMTNzn
WjdQxG3hx7+u6mceLTFXB/8aA3dGVjPqchThhYmiNWtaqQquuvseLhafZzHJU/OH
F303+Zk2CzMRG0rexBC4aa41WmfpvazsCGElC9T4U8dDbO8HLlQQgRX3QWgNmIRM
R/JT4GGFo13/IH0vvCU+/vY9CzJzs6A7otUNlH+xXMMSKPBsMhWSofY25wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmSXWZTUJ4EVA75eaekV0iKaSueMB8GA1UdIwQY
MBaAFG+elpbcz2waQyCQQIUUrs3D9gc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjIt
YmFmNGUwYjRhNjllLzEvMlpKZFpsTlFuZ1JVRHZsNXA2UlhTSXBwSzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81N2NkNzItMzNlNC00MmRkLTlmMjItYmFmNGUwYjRhNjll
LzEvYjU2V2x0elBiQnBESUpCQWhSU3V6Y1AyQnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlxpMA0G
CSqGSIb3DQEBCwUAA4IBAQBPS+cEjHeOcG3rPPqRvMF2Sy+JPjhTBtjUSmyAEB2N
8W2IkYriV8516RYE4fgzROKDfKqHi7DeAJJOZ/W9F2witsztY2XXvZ1wzGnJvXbs
FH4z6NRfGBQvth5GcXSiekszW3jO0yAQifF5X1W8lR5lNH+AxzOA9yvekpeKgvSk
GLH8y0sPYmKoYKFsnWbo+d/69ctVs9e646I2gRg2LswUw8NtAUPYId5zGRvkJjUP
U4aqFClJisO65ovIhPHHUqG9ch/mnnv05VkOZPaElw5hUx9iVOaIlSWOyw8zedSG
f87et0+dUxzgEjgdA7DIchBciuP6GwhhkL3D+6OrdOiW
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:35:24 2025 by rpki-client