This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/_ZA3fVjUOSpoMtDLyVYLBRx_dD8.roa File: _ZA3fVjUOSpoMtDLyVYLBRx_dD8.roa (raw, json) Hash identifier: 7oWaUTpctGN48g9MNHNn+KL+DygCtU5NImH7gjtLptQ= Subject key identifier: FD:90:37:7D:58:D4:39:2A:68:32:D0:CB:C9:56:0B:05:1C:7F:74:3F Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019B2857A0100ACEA1CD734F8950B5B3DF8C Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/_ZA3fVjUOSpoMtDLyVYLBRx_dD8.roa Signing time: Tue 16 Dec 2025 18:06:29 +0000 ROA not before: Tue 16 Dec 2025 18:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203149 IP address blocks: 82.206.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:57:a0:10:0a:ce:a1:cd:73:4f:89:50:b5:b3:df:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Dec 16 18:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd90377d58d4392a6832d0cbc9560b051c7f743f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:c2:7a:18:a5:f7:bf:e4:51:45:df:d5:91: 2a:44:36:c4:ab:d5:4e:84:02:6d:7b:aa:43:bc:95: d5:93:57:54:59:14:23:f9:b3:5d:3f:57:3d:f8:eb: d6:74:00:c2:95:ca:aa:47:32:4b:21:17:0e:7b:51: 4b:3b:3a:ec:dd:8a:d8:e7:58:3a:09:73:9d:a8:4c: 5f:36:ce:70:10:cd:57:fe:25:f1:b2:c7:3c:03:ea: d0:54:ce:38:2f:53:6b:d3:1f:6a:b6:68:87:08:b8: b4:3e:8d:68:c0:19:ec:d7:de:ea:ab:05:2c:07:bb: db:4f:4b:98:75:ad:c4:bc:78:44:06:18:3f:a4:8f: 9a:9b:6e:67:5d:31:de:1d:4a:2f:de:bc:c1:52:e3: ba:6b:25:1d:0c:a6:f1:2c:ca:e6:c0:38:8f:27:57: 7f:c8:61:25:b8:2f:82:66:05:6a:6f:83:74:a8:a8: 14:d8:b5:fe:e7:65:4e:3c:4a:74:51:99:4b:6c:7c: c7:c9:4c:46:9f:a1:c3:de:e9:87:4a:79:47:b3:b0: dc:ef:1e:30:ae:55:8f:a9:61:01:40:41:70:71:39: 9c:49:31:d9:f5:d1:61:04:4f:7d:ae:c7:9b:7e:e9: 9c:a6:0d:96:16:c5:ad:d6:7c:23:04:d0:5a:f0:9c: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:90:37:7D:58:D4:39:2A:68:32:D0:CB:C9:56:0B:05:1C:7F:74:3F X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/_ZA3fVjUOSpoMtDLyVYLBRx_dD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.206.94.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f4:91:48:2a:c6:65:9d:7a:11:92:d2:be:e9:49:57:00:4f: 28:f0:30:3a:3b:70:ed:a5:09:67:30:d9:ff:33:e4:ad:ea:9a: 88:d3:9d:bf:14:8e:c1:b4:f1:83:12:29:ae:7a:1b:f4:83:c2: af:08:48:a6:16:d8:3b:cb:e8:cb:9e:2b:09:fd:3b:6c:ce:b9: a1:0c:b0:b5:3c:13:7f:ef:c2:99:10:bd:32:30:1d:07:d4:36: 47:fd:8f:65:21:ae:99:41:10:67:c5:52:7e:e0:48:7f:00:01: a5:ff:d9:50:94:4f:96:a9:cc:82:a3:cc:85:7d:b5:86:77:37: 35:07:b3:7c:96:ad:13:a4:5c:16:e2:2e:05:92:23:7e:e0:e8: 6d:c3:2a:a1:cc:14:5a:70:a9:28:2d:55:49:16:a5:fd:2d:b9: 98:89:c7:27:e3:05:84:87:f1:e8:59:7a:9e:bc:72:8e:30:c2: 19:04:cd:b8:db:9e:9d:d6:96:37:66:5a:e5:fa:72:40:b0:ff: cf:9c:ab:5c:aa:03:2f:b2:47:8e:63:b6:93:c8:08:3f:8e:be: 09:de:d1:1d:a1:a6:b7:f6:81:38:ab:45:56:02:fc:64:b8:58: 07:87:a2:f0:38:75:2f:fe:90:a5:25:b8:67:00:03:ea:b4:cb: 34:56:b3:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsoV6AQCs6hzXNPiVC1s9+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUxMjE2MTgwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDkwMzc3ZDU4ZDQzOTJhNjgzMmQwY2JjOTU2MGIwNTFjN2Y3NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUjCehil97/kUUXf1ZEqRDbEq9VO hAJte6pDvJXVk1dUWRQj+bNdP1c9+OvWdADClcqqRzJLIRcOe1FLOzrs3YrY51g6 CXOdqExfNs5wEM1X/iXxssc8A+rQVM44L1Nr0x9qtmiHCLi0Po1owBns197qqwUs B7vbT0uYda3EvHhEBhg/pI+am25nXTHeHUov3rzBUuO6ayUdDKbxLMrmwDiPJ1d/ yGEluC+CZgVqb4N0qKgU2LX+52VOPEp0UZlLbHzHyUxGn6HD3umHSnlHs7Dc7x4w rlWPqWEBQEFwcTmcSTHZ9dFhBE99rsebfumcpg2WFsWt1nwjBNBa8JwPIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP2QN31Y1DkqaDLQy8lWCwUcf3Q/MB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvX1pBM2ZWalVPU3BvTXRETHlWWUxCUnhfZEQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUs5eMA0G CSqGSIb3DQEBCwUAA4IBAQBZ9JFIKsZlnXoRktK+6UlXAE8o8DA6O3DtpQlnMNn/ M+St6pqI052/FI7BtPGDEimuehv0g8KvCEimFtg7y+jLnisJ/TtszrmhDLC1PBN/ 78KZEL0yMB0H1DZH/Y9lIa6ZQRBnxVJ+4Eh/AAGl/9lQlE+WqcyCo8yFfbWGdzc1 B7N8lq0TpFwW4i4FkiN+4OhtwyqhzBRacKkoLVVJFqX9LbmYiccn4wWEh/HoWXqe vHKOMMIZBM24256d1pY3Zlrl+nJAsP/PnKtcqgMvskeOY7aTyAg/jr4J3tEdoaa3 9oE4q0VWAvxkuFgHh6LwOHUv/pClJbhnAAPqtMs0VrN9 -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:21 2025 by rpki-client