This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/ZADDQFMtFH6S9zPMPQBQ4k81zyw.roa File: ZADDQFMtFH6S9zPMPQBQ4k81zyw.roa (raw, json) Hash identifier: Ha83MqIvOdOtkCK5xewSiOaqIZRDTizbHU6fnUXgFbA= Subject key identifier: 64:00:C3:40:53:2D:14:7E:92:F7:33:CC:3D:00:50:E2:4F:35:CF:2C Certificate issuer: /CN=de884b8e462f3ec13a4024d669a99d94af05cdb2 Certificate serial: 019AB5B3434D1393528807BC0FD551A081AA Authority key identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/ZADDQFMtFH6S9zPMPQBQ4k81zyw.roa Signing time: Mon 24 Nov 2025 11:50:15 +0000 ROA not before: Mon 24 Nov 2025 11:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216384 IP address blocks: 185.55.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:b3:43:4d:13:93:52:88:07:bc:0f:d5:51:a0:81:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de884b8e462f3ec13a4024d669a99d94af05cdb2 Validity Not Before: Nov 24 11:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6400c340532d147e92f733cc3d0050e24f35cf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:b2:5c:ee:a4:2a:72:fb:de:78:a8:77:02: 34:00:2f:ed:d7:89:cf:6f:bc:ed:f7:75:60:dd:cd: 4a:9b:1a:93:b9:7d:a2:13:48:09:75:ba:a3:94:66: a4:05:4c:0c:00:97:f5:c1:c6:7c:f3:9b:8c:2f:57: 57:9f:61:5f:03:29:22:58:51:8a:ce:54:04:ed:b4: d4:12:66:cb:bf:75:bf:b2:83:3e:99:f1:13:95:7e: 46:6d:0c:54:c2:55:25:e3:3c:d1:7c:41:7a:fe:e5: 76:d2:23:e7:26:fb:48:dc:58:73:f7:41:36:78:ef: 03:49:6f:3e:a6:b4:90:07:27:3f:98:f6:af:d4:a6: b9:8a:16:b5:8a:91:69:76:77:c7:08:4f:81:b2:60: 9d:8c:b6:3b:8a:5c:d7:45:6c:e9:17:50:89:00:4a: cf:d6:5e:ed:26:32:16:79:84:ff:32:e8:aa:62:4e: 6a:82:ec:f8:51:f1:93:7e:97:3b:7f:af:d7:d6:88: 93:9f:80:06:23:99:a2:69:d3:8e:90:de:10:e6:29: 70:09:2b:be:8d:db:ce:30:0b:d0:d8:c4:e3:20:0c: 7a:65:1d:f6:1f:9b:d9:3a:5d:97:cd:41:82:67:3f: 02:50:59:81:6b:b9:fa:97:4b:91:d8:8d:97:50:f3: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:00:C3:40:53:2D:14:7E:92:F7:33:CC:3D:00:50:E2:4F:35:CF:2C X509v3 Authority Key Identifier: keyid:DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/ZADDQFMtFH6S9zPMPQBQ4k81zyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.82.0/24 Signature Algorithm: sha256WithRSAEncryption 53:8e:ee:f8:3c:0e:5a:c5:b0:3d:d5:d5:4b:56:57:5c:46:d8: b5:c5:76:70:bc:09:89:4b:62:e2:73:8f:a9:12:ba:95:36:3b: 62:2e:b0:86:af:55:56:dc:d7:e1:c0:69:0d:a2:0f:9a:42:19: d2:f4:c5:f2:34:cf:22:75:89:ef:d7:83:9c:f8:56:6e:62:11: b1:6c:e0:85:e9:69:d4:ca:79:14:9e:d2:00:79:66:f1:d5:cf: 38:7d:35:23:1f:be:29:62:a4:3f:07:b8:76:03:25:bf:17:42: 0b:8b:cf:59:a9:d2:b7:b4:7f:2e:2b:8e:4b:e8:b3:86:76:be: 6e:47:0d:d3:14:82:37:3a:1b:5a:23:c6:8f:cc:1a:f5:25:76: e7:c8:94:54:ca:df:6d:d6:5c:1f:96:ef:86:7c:56:a2:a8:67: 17:e3:55:37:ee:12:80:bf:ca:8b:c9:23:28:e3:de:b9:fa:ab: a0:31:0f:95:68:bd:9c:e0:ee:72:21:90:fc:ca:6a:c9:43:f3: 55:f5:4d:84:f9:bf:89:2c:d8:0c:cb:cf:ae:86:0c:2e:a5:77: de:9d:7d:cb:2f:79:51:8b:68:1b:eb:a1:a1:30:db:db:58:ab: f2:56:e7:22:1c:b4:75:34:bd:f1:19:63:78:34:0f:2b:3a:c4: ca:89:fe:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1s0NNE5NSiAe8D9VRoIGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlODg0YjhlNDYyZjNlYzEzYTQwMjRkNjY5YTk5ZDk0YWYw NWNkYjIwHhcNMjUxMTI0MTE1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDAwYzM0MDUzMmQxNDdlOTJmNzMzY2MzZDAwNTBlMjRmMzVjZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujuyXO6kKnL73niodwI0AC/t14nP b7zt93Vg3c1KmxqTuX2iE0gJdbqjlGakBUwMAJf1wcZ885uML1dXn2FfAykiWFGK zlQE7bTUEmbLv3W/soM+mfETlX5GbQxUwlUl4zzRfEF6/uV20iPnJvtI3Fhz90E2 eO8DSW8+prSQByc/mPav1Ka5iha1ipFpdnfHCE+BsmCdjLY7ilzXRWzpF1CJAErP 1l7tJjIWeYT/MuiqYk5qguz4UfGTfpc7f6/X1oiTn4AGI5miadOOkN4Q5ilwCSu+ jdvOMAvQ2MTjIAx6ZR32H5vZOl2XzUGCZz8CUFmBa7n6l0uR2I2XUPOvYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQAw0BTLRR+kvczzD0AUOJPNc8sMB8GA1UdIwQY MBaAFN6IS45GLz7BOkAk1mmpnZSvBc2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NWRmNTYtZGQzMi00MzNjLWI0NGUt NGFmNzA0MDJiMjcwLzEvWkFERFFGTXRGSDZTOXpQTVBRQlE0azgxenl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80NWRmNTYtZGQzMi00MzNjLWI0NGUtNGFmNzA0MDJiMjcw LzEvM29oTGprWXZQc0U2UUNUV2FhbWRsSzhGemJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTdSMA0G CSqGSIb3DQEBCwUAA4IBAQBTju74PA5axbA91dVLVldcRti1xXZwvAmJS2Lic4+p ErqVNjtiLrCGr1VW3NfhwGkNog+aQhnS9MXyNM8idYnv14Oc+FZuYhGxbOCF6WnU ynkUntIAeWbx1c84fTUjH74pYqQ/B7h2AyW/F0ILi89ZqdK3tH8uK45L6LOGdr5u Rw3TFII3OhtaI8aPzBr1JXbnyJRUyt9t1lwflu+GfFaiqGcX41U37hKAv8qLySMo 4965+qugMQ+VaL2c4O5yIZD8ymrJQ/NV9U2E+b+JLNgMy8+uhgwupXfenX3LL3lR i2gb66GhMNvbWKvyVuciHLR1NL3xGWN4NA8rOsTKif4E -----END CERTIFICATE-----Generated at Sat Dec 6 19:18:15 2025 by rpki-client