This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zDlRIJkZ7yMaX86qI0Bkk_7UAvw.roa File: zDlRIJkZ7yMaX86qI0Bkk_7UAvw.roa (raw, json) Hash identifier: TYakkpJYrl/ISpQR3vCmg1Hn8fjTugkDpreIIbSgp70= Subject key identifier: CC:39:51:20:99:19:EF:23:1A:5F:CE:AA:23:40:64:93:FE:D4:02:FC Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019AA097D28C7FF24FAAABDDA3E33FF72418 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zDlRIJkZ7yMaX86qI0Bkk_7UAvw.roa Signing time: Thu 20 Nov 2025 09:28:15 +0000 ROA not before: Thu 20 Nov 2025 09:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43160 IP address blocks: 185.244.229.0/24 maxlen: 24 185.244.230.0/24 maxlen: 24 185.244.231.0/24 maxlen: 24 185.246.13.0/24 maxlen: 24 185.246.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:97:d2:8c:7f:f2:4f:aa:ab:dd:a3:e3:3f:f7:24:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Nov 20 09:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc3951209919ef231a5fceaa23406493fed402fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:f3:c6:1f:b9:1b:7a:39:df:a4:4f:39:97: a1:06:0b:a0:cf:c3:ad:1c:4e:10:0e:9d:40:3c:4d: d3:9f:7e:21:1a:17:23:15:7e:44:9a:39:e1:96:7e: 13:91:43:09:0f:82:9c:ed:f1:e3:13:36:bc:a4:60: 44:2d:64:61:3f:5f:5a:eb:b0:b6:bb:80:b6:9c:08: 84:d9:1e:e9:67:81:9e:97:94:27:0b:61:99:5a:53: 87:dc:c4:7b:25:41:23:e7:0e:9b:91:be:f3:c5:0c: f4:47:f7:fe:b3:ec:ec:9d:0d:de:05:f6:21:c3:ba: 53:ed:b1:53:04:66:32:4a:2c:15:6b:ca:b9:30:3d: 32:c6:7a:41:1b:9e:48:b1:e4:fe:c2:51:f2:fc:84: 72:35:09:eb:13:d6:f5:5a:7d:41:f4:95:d8:69:6f: 41:ee:4b:19:f5:f5:a0:5c:b4:e4:87:1b:8a:80:7c: b5:5a:38:88:a4:e4:5d:ea:47:1f:b5:00:90:fe:93: 80:24:b9:4c:81:3e:89:50:01:8e:4d:f5:ce:cc:7d: ae:91:86:f3:9f:2d:e0:b5:94:7f:d4:93:86:94:6b: e5:9c:4e:7b:0d:38:66:da:1e:35:6c:fc:91:1b:3f: ab:71:21:f9:a6:c1:c2:ab:f1:c0:ef:39:aa:f1:ce: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:39:51:20:99:19:EF:23:1A:5F:CE:AA:23:40:64:93:FE:D4:02:FC X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zDlRIJkZ7yMaX86qI0Bkk_7UAvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.229.0-185.244.231.255 185.246.13.0/24 185.246.15.0/24 Signature Algorithm: sha256WithRSAEncryption a2:bc:98:cc:01:77:d2:aa:2a:1d:eb:83:8a:44:ad:1b:2b:66: dc:f7:cb:f9:9a:78:4f:c4:02:21:cc:ef:8b:a8:9b:87:75:10: f2:5a:ff:d8:e9:6e:36:23:88:95:f4:67:0c:68:b4:78:fe:c3: f3:82:ef:d2:1c:84:16:bd:81:52:84:a2:41:06:f7:74:36:8b: 53:52:19:45:8a:47:ec:51:6e:e2:2b:6d:bf:49:c9:b5:d6:55: 56:57:c7:8f:c5:13:39:a2:9e:7d:98:05:25:07:9d:3b:8b:dd: 8b:a9:c8:ef:3f:d6:04:be:56:f1:2a:97:21:1f:a8:57:de:07: f5:62:fc:fc:54:b9:31:53:db:22:71:c6:13:30:ad:a3:15:73: a3:39:8b:02:ac:6e:dc:ee:e4:25:01:ca:71:35:a5:71:42:bd: c8:64:70:f2:b7:72:9d:dd:98:f5:16:85:c5:36:04:57:01:69: 37:55:a4:c8:38:00:68:92:ad:c3:65:ae:94:10:80:ab:af:d2: 34:a5:f1:bc:2b:d5:f8:43:f6:d4:a2:ae:ca:04:67:6d:1a:f9: ac:df:e8:24:58:a7:78:ae:2f:9d:72:65:d2:53:94:57:ef:e7: aa:d2:ce:10:d8:38:bc:cd:5e:71:c2:24:1d:75:dc:25:7c:db: 44:30:4e:88 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZqgl9KMf/JPqqvdo+M/9yQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjUxMTIwMDkyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzM5NTEyMDk5MTllZjIzMWE1ZmNlYWEyMzQwNjQ5M2ZlZDQwMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv3zxh+5G3o536RPOZehBgugz8Ot HE4QDp1APE3Tn34hGhcjFX5Emjnhln4TkUMJD4Kc7fHjEza8pGBELWRhP19a67C2 u4C2nAiE2R7pZ4Gel5QnC2GZWlOH3MR7JUEj5w6bkb7zxQz0R/f+s+zsnQ3eBfYh w7pT7bFTBGYySiwVa8q5MD0yxnpBG55IseT+wlHy/IRyNQnrE9b1Wn1B9JXYaW9B 7ksZ9fWgXLTkhxuKgHy1WjiIpORd6kcftQCQ/pOAJLlMgT6JUAGOTfXOzH2ukYbz ny3gtZR/1JOGlGvlnE57DThm2h41bPyRGz+rcSH5psHCq/HA7zmq8c627wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMw5USCZGe8jGl/OqiNAZJP+1AL8MB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvekRsUklKa1o3eU1hWDg2cUkwQmtrXzdVQXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAC59OUD BAO59OADBAC59g0DBAC59g8wDQYJKoZIhvcNAQELBQADggEBAKK8mMwBd9KqKh3r g4pErRsrZtz3y/maeE/EAiHM74uom4d1EPJa/9jpbjYjiJX0ZwxotHj+w/OC79Ic hBa9gVKEokEG93Q2i1NSGUWKR+xRbuIrbb9JybXWVVZXx4/FEzminn2YBSUHnTuL 3YupyO8/1gS+VvEqlyEfqFfeB/Vi/PxUuTFT2yJxxhMwraMVc6M5iwKsbtzu5CUB ynE1pXFCvchkcPK3cp3dmPUWhcU2BFcBaTdVpMg4AGiSrcNlrpQQgKuv0jSl8bwr 1fhD9tSirsoEZ20a+azf6CRYp3iuL51yZdJTlFfv56rSzhDYOLzNXnHCJB113CV8 20QwTog= -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:29 2025 by rpki-client