This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ze6Jy-wEyQOgUT5_tzw4Yi-9ljE.roa File: ze6Jy-wEyQOgUT5_tzw4Yi-9ljE.roa (raw, json) Hash identifier: apVZ3JWIKH9e8JcSsM1dtB933XqOFmvSIVqu1auN2Gc= Subject key identifier: CD:EE:89:CB:EC:04:C9:03:A0:51:3E:7F:B7:3C:38:62:2F:BD:96:31 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019A6DC857FA02DD904CACF15DF4C0A5DBB1 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ze6Jy-wEyQOgUT5_tzw4Yi-9ljE.roa Signing time: Mon 10 Nov 2025 12:40:37 +0000 ROA not before: Mon 10 Nov 2025 12:40:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8708 IP address blocks: 5.2.128.0/17 maxlen: 24 5.12.0.0/14 maxlen: 24 31.14.224.0/22 maxlen: 24 62.231.64.0/18 maxlen: 24 62.231.120.0/24 maxlen: 24 79.114.0.0/15 maxlen: 24 79.118.0.0/15 maxlen: 24 79.118.155.0/24 maxlen: 24 81.18.64.0/19 maxlen: 24 81.196.0.0/16 maxlen: 24 82.76.0.0/14 maxlen: 24 82.79.10.0/24 maxlen: 24 82.137.0.0/18 maxlen: 24 82.137.0.0/21 maxlen: 24 82.137.16.0/20 maxlen: 24 82.137.32.0/19 maxlen: 24 84.232.128.0/17 maxlen: 24 84.232.149.0/24 maxlen: 24 86.120.0.0/13 maxlen: 24 86.121.222.0/24 maxlen: 24 86.127.54.0/24 maxlen: 24 86.127.59.0/24 maxlen: 24 89.43.180.0/23 maxlen: 24 89.45.72.0/22 maxlen: 24 89.46.12.0/22 maxlen: 24 93.113.40.0/22 maxlen: 24 94.176.220.0/22 maxlen: 24 185.129.36.0/22 maxlen: 22 188.24.0.0/15 maxlen: 24 188.26.0.0/17 maxlen: 24 188.26.128.0/18 maxlen: 24 188.26.224.0/19 maxlen: 24 188.27.0.0/16 maxlen: 24 188.27.120.0/24 maxlen: 24 193.111.232.0/24 maxlen: 24 194.102.80.0/24 maxlen: 24 194.102.81.0/24 maxlen: 24 212.54.96.0/19 maxlen: 24 212.54.120.0/24 maxlen: 24 212.54.122.0/24 maxlen: 24 212.54.123.0/24 maxlen: 24 212.93.128.0/19 maxlen: 24 212.93.143.0/24 maxlen: 24 213.154.96.0/19 maxlen: 24 213.154.100.0/24 maxlen: 24 213.154.128.0/19 maxlen: 24 213.157.160.0/19 maxlen: 24 213.157.189.0/24 maxlen: 24 2a02:2f00::/28 maxlen: 48 2a02:2f01:100::/48 maxlen: 48 2a02:2f09:3100::/48 maxlen: 48 2a02:2f0c:8002::/48 maxlen: 48 2a03:9c20::/32 maxlen: 32 2a03:9c20:1000::/48 maxlen: 48 2a03:9c20:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:c8:57:fa:02:dd:90:4c:ac:f1:5d:f4:c0:a5:db:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Nov 10 12:40:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cdee89cbec04c903a0513e7fb73c38622fbd9631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:f8:69:a9:29:a6:68:18:d2:04:07:63:3a: 3d:9a:d0:06:2b:d6:81:53:44:df:41:cf:2d:a9:e5: 0a:58:fc:87:6f:0c:0a:48:54:2c:6b:24:f1:55:33: 90:18:02:06:78:7d:da:7e:9f:7e:59:c9:e3:00:b6: 47:fa:af:c9:3b:3f:f3:52:ef:b7:7a:4a:2d:1f:e0: 18:86:b2:74:77:5c:ea:de:91:2e:dd:df:97:f9:48: c6:1e:d7:5b:fd:03:bb:7d:8b:fb:af:68:88:c0:79: 62:5a:24:96:a9:1b:58:5a:7a:14:94:38:00:1a:2c: ac:68:12:5d:ed:91:a5:0e:f4:c7:57:03:71:71:29: 07:ac:4f:72:6e:cd:4a:3d:36:77:6d:c0:4f:43:3f: 77:5c:a4:29:f8:2c:4f:96:6a:d8:dc:23:44:7d:ce: 1b:b8:69:78:58:ad:af:d1:85:bc:b8:88:4f:90:b8: f8:d5:d8:8e:bf:ef:d8:a6:a5:bc:9a:c8:54:af:6d: 40:55:5c:36:31:c3:4a:d3:0a:a9:39:92:84:c8:cd: 1e:48:26:f3:bc:21:84:fe:48:38:1d:89:98:63:a7: 11:8a:ab:e5:d5:be:af:fd:a8:00:21:79:c9:d2:84: ac:3d:b6:77:f3:42:8e:cf:d3:9d:65:5a:66:e1:59: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:89:CB:EC:04:C9:03:A0:51:3E:7F:B7:3C:38:62:2F:BD:96:31 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ze6Jy-wEyQOgUT5_tzw4Yi-9ljE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.2.128.0/17 5.12.0.0/14 31.14.224.0/22 62.231.64.0/18 79.114.0.0/15 79.118.0.0/15 81.18.64.0/19 81.196.0.0/16 82.76.0.0/14 82.137.0.0/18 84.232.128.0/17 86.120.0.0/13 89.43.180.0/23 89.45.72.0/22 89.46.12.0/22 93.113.40.0/22 94.176.220.0/22 185.129.36.0/22 188.24.0.0-188.26.191.255 188.26.224.0-188.27.255.255 193.111.232.0/24 194.102.80.0/23 212.54.96.0/19 212.93.128.0/19 213.154.96.0-213.154.159.255 213.157.160.0/19 IPv6: 2a02:2f00::/28 2a03:9c20::/32 Signature Algorithm: sha256WithRSAEncryption 23:4c:d9:32:82:fb:85:6a:dd:b3:5c:17:f9:02:9d:f4:9b:a2: 17:ab:26:e4:50:4e:a2:48:aa:44:7d:44:6f:1c:8a:f8:8e:06: f3:17:e6:2f:80:e5:cd:da:dd:cf:33:de:31:c9:e1:09:ec:20: b3:11:f2:d7:e8:e2:c5:8a:91:cc:ac:30:76:72:c6:d9:68:6c: cc:5f:75:bb:b5:4f:9c:86:96:c9:54:b4:18:d5:a7:7b:07:23: 8d:ab:20:5d:9f:4e:a4:f4:34:82:07:86:fc:fc:16:07:b0:64: d5:dc:71:7e:dc:b6:d7:01:a2:f9:0b:d7:c7:f3:1b:82:55:09: 72:25:04:5a:1f:52:da:ba:88:90:e6:17:0f:3c:63:80:1c:82: ec:3e:b2:84:55:37:51:82:e2:91:ed:4c:8a:6d:00:ec:de:63: 56:e8:2f:42:45:c4:26:3d:fa:dd:e6:80:7f:51:e5:fc:89:da: fe:95:eb:67:69:5d:74:3b:af:ae:14:46:d8:be:a8:70:fb:32: 1a:3b:26:f1:bb:3e:18:c1:25:0f:36:df:ed:c4:e3:17:96:26: 30:fd:1b:5d:5a:80:ce:c6:7d:5e:99:ec:af:70:76:07:3d:96: 87:76:ae:a9:b0:51:b6:8d:06:05:b0:92:9e:2f:82:47:2c:e1: fb:10:7d:5a -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgISAZptyFf6At2QTKzxXfTApduxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUxMTEwMTI0MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGVlODljYmVjMDRjOTAzYTA1MTNlN2ZiNzNjMzg2MjJmYmQ5NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSb4aakppmgY0gQHYzo9mtAGK9aB U0TfQc8tqeUKWPyHbwwKSFQsayTxVTOQGAIGeH3afp9+WcnjALZH+q/JOz/zUu+3 ekotH+AYhrJ0d1zq3pEu3d+X+UjGHtdb/QO7fYv7r2iIwHliWiSWqRtYWnoUlDgA GiysaBJd7ZGlDvTHVwNxcSkHrE9ybs1KPTZ3bcBPQz93XKQp+CxPlmrY3CNEfc4b uGl4WK2v0YW8uIhPkLj41diOv+/YpqW8mshUr21AVVw2McNK0wqpOZKEyM0eSCbz vCGE/kg4HYmYY6cRiqvl1b6v/agAIXnJ0oSsPbZ380KOz9OdZVpm4VmmiQIDAQAB o4ICyjCCAsYwHQYDVR0OBBYEFM3uicvsBMkDoFE+f7c8OGIvvZYxMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvemU2Snktd0V5UU9nVVQ1X3R6dzRZaS05bGpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCBswQCAAEwgawDBAcF AoADAwIFDAMEAh8O4AMEBj7nQAMDAU9yAwMBT3YDBAVREkADAwBRxAMDAlJMAwQG UokAAwQHVOiAAwMDVngDBAFZK7QDBAJZLUgDBAJZLgwDBAJdcSgDBAJesNwDBAK5 gSQwCwMDA7wYAwQGvBqAMAsDBAW8GuADAwK8GAMEAMFv6AMEAcJmUAMEBdQ2YAME BdRdgDAMAwQF1ZpgAwQF1ZqAAwQF1Z2gMBQEAgACMA4DBQQqAi8AAwUAKgOcIDAN BgkqhkiG9w0BAQsFAAOCAQEAI0zZMoL7hWrds1wX+QKd9JuiF6sm5FBOokiqRH1E bxyK+I4G8xfmL4DlzdrdzzPeMcnhCewgsxHy1+jixYqRzKwwdnLG2WhszF91u7VP nIaWyVS0GNWnewcjjasgXZ9OpPQ0ggeG/PwWB7Bk1dxxfty21wGi+QvXx/MbglUJ ciUEWh9S2rqIkOYXDzxjgByC7D6yhFU3UYLike1Mim0A7N5jVugvQkXEJj363eaA f1Hl/Ina/pXrZ2lddDuvrhRG2L6ocPsyGjsm8bs+GMElDzbf7cTjF5YmMP0bXVqA zsZ9Xpnsr3B2Bz2Wh3auqbBRto0GBbCSni+CRyzh+xB9Wg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:50 2025 by rpki-client