This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/z4oor_anfKvF8OJgHq78qxzauZw.roa File: z4oor_anfKvF8OJgHq78qxzauZw.roa (raw, json) Hash identifier: Av1Epao40j1p+xBtHh/bygdrMOec+Urn13J/fU6v3Ag= Subject key identifier: CF:8A:28:AF:F6:A7:7C:AB:C5:F0:E2:60:1E:AE:FC:AB:1C:DA:B9:9C Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Certificate serial: 019A729F0D2EC690D774FF9C35B177733E0B Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/z4oor_anfKvF8OJgHq78qxzauZw.roa Signing time: Tue 11 Nov 2025 11:13:37 +0000 ROA not before: Tue 11 Nov 2025 11:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57099 IP address blocks: 5.133.172.0/22 maxlen: 24 46.231.8.0/21 maxlen: 24 85.95.32.0/19 maxlen: 24 91.209.142.0/24 maxlen: 24 91.214.228.0/22 maxlen: 24 151.249.64.0/20 maxlen: 24 185.44.248.0/22 maxlen: 24 185.113.0.0/22 maxlen: 24 185.168.144.0/22 maxlen: 24 209.35.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:9f:0d:2e:c6:90:d7:74:ff:9c:35:b1:77:73:3e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Validity Not Before: Nov 11 11:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf8a28aff6a77cabc5f0e2601eaefcab1cdab99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8a:86:59:7c:8c:8e:3e:28:9b:c2:b6:be:56: 8e:4b:6c:64:1c:5b:f2:46:14:57:66:60:f5:5b:aa: 14:b3:f0:dd:6f:fb:5f:ee:68:01:e7:93:91:73:e8: 46:13:a4:61:da:8e:f0:d5:e7:e0:6e:f0:ef:9a:58: 0c:ed:be:4d:ec:b0:0b:48:51:ab:18:54:43:94:59: 3d:75:d7:dd:22:94:09:2d:35:69:33:fe:46:85:19: 90:00:7b:e3:f1:09:75:6f:18:21:12:b3:e6:50:ab: 41:97:f7:e8:0b:ba:d4:48:a3:b8:81:82:d6:6c:0a: 5c:35:1f:4c:c0:83:4c:c7:93:46:91:ce:ad:2e:8d: dc:43:0c:8e:a6:ad:06:59:8e:e3:0f:96:bf:cc:57: d4:85:0e:81:23:14:ab:35:8e:e3:d0:57:2e:7e:1c: 5f:95:40:44:ee:67:20:b8:5b:f7:e7:ca:ac:b4:68: 59:d8:be:e9:6c:74:5f:4a:0f:d4:e5:f5:15:64:af: dc:b4:51:37:68:4e:d4:18:a8:78:09:58:a4:a1:81: 66:b9:7f:44:2d:22:bf:c3:cc:8b:6f:ab:81:36:99: 14:4d:c3:ae:74:c0:99:72:f5:04:c1:56:bc:cd:1d: 3a:86:d1:e2:57:54:17:ef:b2:97:65:19:10:43:2f: d2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8A:28:AF:F6:A7:7C:AB:C5:F0:E2:60:1E:AE:FC:AB:1C:DA:B9:9C X509v3 Authority Key Identifier: keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/z4oor_anfKvF8OJgHq78qxzauZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.172.0/22 46.231.8.0/21 85.95.32.0/19 91.209.142.0/24 91.214.228.0/22 151.249.64.0/20 185.44.248.0/22 185.113.0.0/22 185.168.144.0/22 209.35.128.0/20 Signature Algorithm: sha256WithRSAEncryption 33:9c:57:e1:29:0d:c6:77:69:91:bb:5b:81:2f:59:4b:7e:2d: 59:8d:99:fe:98:51:42:59:c0:2d:40:f1:de:d6:cb:b3:a8:99: 66:66:ab:69:ff:ad:de:9f:5a:2c:0c:37:7d:64:bc:81:ca:d6: af:03:de:63:f9:3b:da:3e:b9:c0:2a:32:56:b9:7e:67:37:22: 91:f7:77:5f:41:1f:3c:ee:24:fe:25:d3:ae:84:7a:49:5f:e5: a2:6f:61:7d:6b:74:2f:c2:49:c6:38:97:de:37:ce:fa:61:17: bf:e5:fd:6d:e5:c7:4a:17:90:93:97:c9:2e:e3:9b:22:70:4e: dd:e6:d6:dd:24:87:8c:18:37:bb:96:42:96:07:73:04:e4:cd: 02:fa:eb:47:ad:6b:18:d7:22:c4:14:c0:2a:9a:07:2b:d1:22: 31:a2:aa:c2:01:ed:f8:07:ec:da:d7:4d:ba:b0:25:fb:8e:52: fe:81:c2:6c:05:93:95:29:87:c7:85:03:45:f7:1a:33:a7:6b: 3c:09:b4:db:6c:df:c6:54:c7:83:17:c7:90:82:a4:59:3c:f7: b7:ae:f7:bc:1e:af:7b:03:13:fc:20:fe:ce:b0:d9:95:27:4d: d3:1e:51:79:1b:4f:28:c1:42:85:b6:8a:79:b2:05:b7:09:92: a1:13:d7:4f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZpynw0uxpDXdP+cNbF3cz4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNDVhOWEwMzUzYTMzYzZhNGY5MzYwOGY5ZDI1ZjI3Yzg1 OTQ4YjcwHhcNMjUxMTExMTExMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjhhMjhhZmY2YTc3Y2FiYzVmMGUyNjAxZWFlZmNhYjFjZGFiOTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYqGWXyMjj4om8K2vlaOS2xkHFvy RhRXZmD1W6oUs/Ddb/tf7mgB55ORc+hGE6Rh2o7w1efgbvDvmlgM7b5N7LALSFGr GFRDlFk9ddfdIpQJLTVpM/5GhRmQAHvj8Ql1bxghErPmUKtBl/foC7rUSKO4gYLW bApcNR9MwINMx5NGkc6tLo3cQwyOpq0GWY7jD5a/zFfUhQ6BIxSrNY7j0Fcufhxf lUBE7mcguFv358qstGhZ2L7pbHRfSg/U5fUVZK/ctFE3aE7UGKh4CVikoYFmuX9E LSK/w8yLb6uBNpkUTcOudMCZcvUEwVa8zR06htHiV1QX77KXZRkQQy/S2wIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFM+KKK/2p3yrxfDiYB6u/Ksc2rmcMB8GA1UdIwQY MBaAFH5FqaA1OjPGpPk2CPnSXyfIWUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2Qt MzdhNjBjMzM1YTVkLzEvejRvb3JfYW5mS3ZGOE9KZ0hxNzhxeHphdVp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2QtMzdhNjBjMzM1YTVk LzEvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCBYWsAwQD LucIAwQFVV8gAwQAW9GOAwQCW9bkAwQEl/lAAwQCuSz4AwQCuXEAAwQCuaiQAwQE 0SOAMA0GCSqGSIb3DQEBCwUAA4IBAQAznFfhKQ3Gd2mRu1uBL1lLfi1ZjZn+mFFC WcAtQPHe1suzqJlmZqtp/63en1osDDd9ZLyBytavA95j+TvaPrnAKjJWuX5nNyKR 93dfQR887iT+JdOuhHpJX+Wib2F9a3QvwknGOJfeN876YRe/5f1t5cdKF5CTl8ku 45sicE7d5tbdJIeMGDe7lkKWB3ME5M0C+utHrWsY1yLEFMAqmgcr0SIxoqrCAe34 B+za1026sCX7jlL+gcJsBZOVKYfHhQNF9xozp2s8CbTbbN/GVMeDF8eQgqRZPPe3 rve8Hq97AxP8IP7OsNmVJ03THlF5G08owUKFtop5sgW3CZKhE9dP -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:37 2025 by rpki-client