This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Zpb-gXrDhJa7NMcEvpIzV40tw_8.roa File: Zpb-gXrDhJa7NMcEvpIzV40tw_8.roa (raw, json) Hash identifier: l/+E+RaWRzpqf1VgIm3hci/InuzWsfeLPBbYsbYMOK4= Subject key identifier: 66:96:FE:81:7A:C3:84:96:BB:34:C7:04:BE:92:33:57:8D:2D:C3:FF Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019ABB5279E12A6EF7EEF5C98CE4F3AF7C60 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Zpb-gXrDhJa7NMcEvpIzV40tw_8.roa Signing time: Tue 25 Nov 2025 14:02:15 +0000 ROA not before: Tue 25 Nov 2025 14:02:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25186 IP address blocks: 81.80.17.0/24 maxlen: 24 81.80.72.0/24 maxlen: 24 194.3.255.0/24 maxlen: 24 195.6.9.0/24 maxlen: 24 195.6.20.0/24 maxlen: 24 195.6.66.0/24 maxlen: 24 195.6.67.0/24 maxlen: 24 195.6.171.0/24 maxlen: 24 195.6.174.0/24 maxlen: 24 195.6.230.0/24 maxlen: 24 217.167.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:52:79:e1:2a:6e:f7:ee:f5:c9:8c:e4:f3:af:7c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Nov 25 14:02:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6696fe817ac38496bb34c704be9233578d2dc3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:20:01:62:d3:db:92:eb:3c:c3:5c:09:4f: 1a:f7:d7:b0:82:d8:e4:e2:45:13:c2:ba:08:42:62: 34:ef:2c:64:66:06:fd:8f:90:2b:da:a9:e3:5f:68: 82:d5:2a:f8:6a:17:34:b8:d3:ef:b2:46:c9:c7:15: 66:b3:0b:bb:84:b9:49:75:68:99:3a:c3:db:eb:9e: 45:01:97:7d:c1:c5:c1:0b:47:fb:6b:a9:71:4b:89: 5b:d3:d0:6f:4d:d8:46:55:ce:40:45:f8:04:5b:b7: 1d:5e:fd:eb:85:98:72:69:f2:c0:67:21:6c:3f:95: 38:3c:17:b1:99:06:24:f8:d7:a6:19:d2:6f:50:a2: c4:56:0d:f3:31:e9:de:88:ec:82:80:65:fa:bb:2c: 94:cd:f1:de:e8:95:bb:ab:61:86:d5:7f:d2:eb:b5: 53:ac:36:6c:a3:11:26:46:de:6a:69:4c:b5:11:87: 1a:d9:3f:fd:af:5d:a2:02:f4:a1:74:5e:df:30:03: ce:c9:38:3a:f6:67:a7:34:fa:b7:61:c1:e2:eb:3b: 69:c6:d8:0d:24:3a:f2:69:7b:af:30:8f:87:04:ce: 78:e9:4e:00:17:a1:2e:b7:fa:3b:e7:ea:88:a5:1e: c0:ad:e3:93:0b:e2:06:b6:56:33:3c:1f:c8:47:7a: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:FE:81:7A:C3:84:96:BB:34:C7:04:BE:92:33:57:8D:2D:C3:FF X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Zpb-gXrDhJa7NMcEvpIzV40tw_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.80.17.0/24 81.80.72.0/24 194.3.255.0/24 195.6.9.0/24 195.6.20.0/24 195.6.66.0/23 195.6.171.0/24 195.6.174.0/24 195.6.230.0/24 217.167.104.0/24 Signature Algorithm: sha256WithRSAEncryption a3:69:b8:da:a2:e2:79:e8:46:b0:38:ac:26:b5:d7:bf:c5:d2: 4a:85:b2:4f:d8:5f:96:33:d6:1e:b7:bd:02:79:4b:c4:c4:f8: 54:1d:f2:65:56:67:bc:e0:73:14:38:20:1a:2c:80:c7:8a:0d: 03:42:93:38:cf:3a:50:dd:05:a3:a3:59:76:b7:c8:31:2a:a4: 01:0f:d1:b2:8e:65:34:8e:56:1e:70:85:b6:a0:24:c9:18:51: 51:71:42:74:e6:13:de:fd:23:eb:8e:2b:9d:6e:c0:c5:0b:2c: 1b:96:8f:15:dc:e2:41:50:85:82:0a:59:19:33:82:6a:4e:5f: b0:d1:5f:22:be:57:6f:df:1d:2e:e1:cc:bc:29:88:fa:aa:90: 99:dc:e0:ea:99:b9:fb:23:e5:75:1c:2a:90:b2:05:6f:39:f5: ae:b1:72:40:01:c4:91:ce:c7:b0:92:05:69:8b:88:61:8c:0c: 25:a7:01:91:aa:c1:42:8d:9a:96:9d:e0:33:46:4f:de:95:33: e4:21:fe:aa:e6:ec:51:12:e4:5a:1c:00:18:50:df:bc:dc:b9: e3:af:b9:88:b6:0a:63:a9:97:9b:a9:2e:d1:68:b1:f2:59:1d: 33:42:f0:14:8e:f4:66:49:dd:56:a9:0f:43:d5:19:f1:eb:79: b7:6f:ab:f0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZq7UnnhKm737vXJjOTzr3xgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjUxMTI1MTQwMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Njk2ZmU4MTdhYzM4NDk2YmIzNGM3MDRiZTkyMzM1NzhkMmRjM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GYgAWLT25LrPMNcCU8a99ewgtjk 4kUTwroIQmI07yxkZgb9j5Ar2qnjX2iC1Sr4ahc0uNPvskbJxxVmswu7hLlJdWiZ OsPb655FAZd9wcXBC0f7a6lxS4lb09BvTdhGVc5ARfgEW7cdXv3rhZhyafLAZyFs P5U4PBexmQYk+NemGdJvUKLEVg3zMeneiOyCgGX6uyyUzfHe6JW7q2GG1X/S67VT rDZsoxEmRt5qaUy1EYca2T/9r12iAvShdF7fMAPOyTg69menNPq3YcHi6ztpxtgN JDryaXuvMI+HBM546U4AF6Eut/o75+qIpR7AreOTC+IGtlYzPB/IR3ohzQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFGaW/oF6w4SWuzTHBL6SM1eNLcP/MB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvWnBiLWdYckRoSmE3Tk1jRXZwSXpWNDB0d184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAUVARAwQA UVBIAwQAwgP/AwQAwwYJAwQAwwYUAwQBwwZCAwQAwwarAwQAwwauAwQAwwbmAwQA 2adoMA0GCSqGSIb3DQEBCwUAA4IBAQCjabjaouJ56EawOKwmtde/xdJKhbJP2F+W M9Yet70CeUvExPhUHfJlVme84HMUOCAaLIDHig0DQpM4zzpQ3QWjo1l2t8gxKqQB D9GyjmU0jlYecIW2oCTJGFFRcUJ05hPe/SPrjiudbsDFCywblo8V3OJBUIWCClkZ M4JqTl+w0V8ivldv3x0u4cy8KYj6qpCZ3ODqmbn7I+V1HCqQsgVvOfWusXJAAcSR zsewkgVpi4hhjAwlpwGRqsFCjZqWneAzRk/elTPkIf6q5uxREuRaHAAYUN+83Lnj r7mItgpjqZebqS7RaLHyWR0zQvAUjvRmSd1WqQ9D1Rnx63m3b6vw -----END CERTIFICATE-----Generated at Sat Dec 6 20:13:40 2025 by rpki-client