This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/zsEKdVIWJGw2hp0KeaFT1iITaKQ.roa File: zsEKdVIWJGw2hp0KeaFT1iITaKQ.roa (raw, json) Hash identifier: U8tpscsIRLd16f6+qEhSkEpM/x2ts7BQwlrwWR8Iyyw= Subject key identifier: CE:C1:0A:75:52:16:24:6C:36:86:9D:0A:79:A1:53:D6:22:13:68:A4 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AA6DCBDBB03C6FDCDE7AE3D1BAE56F5B9 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/zsEKdVIWJGw2hp0KeaFT1iITaKQ.roa Signing time: Fri 21 Nov 2025 14:41:15 +0000 ROA not before: Fri 21 Nov 2025 14:41:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203790 IP address blocks: 138.249.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:dc:bd:bb:03:c6:fd:cd:e7:ae:3d:1b:ae:56:f5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 21 14:41:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cec10a755216246c36869d0a79a153d6221368a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:3d:92:c3:b9:5a:f6:8d:00:bd:4b:4d:70: 8c:bc:1a:d3:8e:51:a1:23:75:89:30:f4:b3:e6:bf: 21:b8:cf:b0:0d:57:87:7a:8f:ed:d0:29:0c:c8:3c: 5a:60:6c:58:d8:15:6d:f8:81:77:3b:8c:27:36:71: 57:76:37:8f:69:d1:36:e2:4d:3f:23:a7:aa:b8:0c: 8d:ae:70:4f:f5:95:8e:c7:1b:7e:82:d0:7f:2e:76: 80:60:bd:d2:68:1d:c9:43:f1:96:96:06:91:1a:3d: 73:49:84:0f:ab:08:21:66:34:eb:29:b0:4a:04:8a: 32:ef:9d:e6:68:8d:69:75:44:61:4e:b6:32:b1:ff: bd:e5:fe:cb:71:cb:3d:1f:3f:c4:b7:08:12:79:97: ae:30:6b:fd:20:9a:45:ab:a0:55:31:5d:94:1c:0b: 63:2f:0c:a6:1f:f7:a2:3b:b8:6d:d5:1d:9e:c4:9b: eb:ea:5f:0d:f4:0e:a6:de:c0:47:a4:a4:6d:a3:4d: fa:33:c3:29:f0:6b:c3:2b:85:c8:b8:5e:3d:68:70: 1b:ab:a9:52:24:f3:c9:69:bc:d3:26:27:c9:24:1b: e3:eb:64:bc:ef:fb:5d:14:1f:d3:06:39:35:9e:cd: 11:25:3a:55:78:b9:cc:34:a8:ba:b0:ad:92:29:11: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C1:0A:75:52:16:24:6C:36:86:9D:0A:79:A1:53:D6:22:13:68:A4 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/zsEKdVIWJGw2hp0KeaFT1iITaKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.4.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:5e:1a:2f:8a:2a:4b:0a:06:f3:cb:56:2a:09:8d:ce:24:8d: fa:82:1c:78:4c:5a:aa:df:db:d8:38:25:bc:8e:0d:3f:03:fe: 38:56:ec:db:53:b3:24:4d:7f:cc:1f:bf:c7:4b:2b:56:c6:39: 91:0e:50:f1:b3:3e:1b:97:24:22:47:e0:0e:9f:0c:ec:09:ca: 3e:04:79:85:af:d1:ff:ef:52:e5:24:ff:09:cf:10:d1:10:fa: af:78:bc:8b:a9:71:31:2e:ee:eb:59:1d:9a:f1:ef:3c:e5:56: 70:74:ec:90:22:c8:80:9c:01:28:5d:d9:57:32:ec:af:45:b6: 46:1b:bf:02:e5:78:9f:c8:89:b3:0b:44:1c:d1:3c:37:69:9b: aa:eb:a2:af:a1:49:e0:b6:a4:d3:4f:4d:bc:d1:78:23:74:e1: ff:2d:be:25:d1:fb:0c:67:2c:cd:ef:59:4c:6a:3e:1a:7b:54: e8:f3:fb:53:b3:ba:01:64:79:9c:69:a7:63:39:e5:c0:24:a9: dd:c9:a6:51:b9:67:e8:99:8f:06:76:fc:8f:19:fe:1f:79:2f: f4:c1:d3:65:8a:aa:cc:6a:d4:a6:27:42:3f:c7:08:59:01:15: fc:85:92:26:ff:a2:15:06:8f:49:c4:e8:b3:f9:4a:9c:e9:29: 1c:60:d4:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqm3L27A8b9zeeuPRuuVvW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTIxMTQ0MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWMxMGE3NTUyMTYyNDZjMzY4NjlkMGE3OWExNTNkNjIyMTM2OGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqA9ksO5WvaNAL1LTXCMvBrTjlGh I3WJMPSz5r8huM+wDVeHeo/t0CkMyDxaYGxY2BVt+IF3O4wnNnFXdjePadE24k0/ I6equAyNrnBP9ZWOxxt+gtB/LnaAYL3SaB3JQ/GWlgaRGj1zSYQPqwghZjTrKbBK BIoy753maI1pdURhTrYysf+95f7Lccs9Hz/EtwgSeZeuMGv9IJpFq6BVMV2UHAtj LwymH/eiO7ht1R2exJvr6l8N9A6m3sBHpKRto036M8Mp8GvDK4XIuF49aHAbq6lS JPPJabzTJifJJBvj62S87/tdFB/TBjk1ns0RJTpVeLnMNKi6sK2SKRGrnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM7BCnVSFiRsNoadCnmhU9YiE2ikMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvenNFS2RWSVdKR3cyaHAwS2VhRlQxaUlUYUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivkEMA0G CSqGSIb3DQEBCwUAA4IBAQAvXhoviipLCgbzy1YqCY3OJI36ghx4TFqq39vYOCW8 jg0/A/44VuzbU7MkTX/MH7/HSytWxjmRDlDxsz4blyQiR+AOnwzsCco+BHmFr9H/ 71LlJP8JzxDREPqveLyLqXExLu7rWR2a8e885VZwdOyQIsiAnAEoXdlXMuyvRbZG G78C5XifyImzC0Qc0Tw3aZuq66KvoUngtqTTT0280XgjdOH/Lb4l0fsMZyzN71lM aj4ae1To8/tTs7oBZHmcaadjOeXAJKndyaZRuWfomY8GdvyPGf4feS/0wdNliqrM atSmJ0I/xwhZARX8hZIm/6IVBo9JxOiz+Uqc6SkcYNRA -----END CERTIFICATE-----Generated at Sat Dec 6 08:57:58 2025 by rpki-client