This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/z0lqz9_pi7nNDOaCZPjUekef-0s.roa File: z0lqz9_pi7nNDOaCZPjUekef-0s.roa (raw, json) Hash identifier: YdH1v7lP8vjgkR0BPfbp4nmWFfYVAUVYWhhC0qKj8kQ= Subject key identifier: CF:49:6A:CF:DF:E9:8B:B9:CD:0C:E6:82:64:F8:D4:7A:47:9F:FB:4B Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482 Certificate serial: 019A4645FC617B328B269FF273B7B394F60E Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/z0lqz9_pi7nNDOaCZPjUekef-0s.roa Signing time: Sun 02 Nov 2025 20:33:03 +0000 ROA not before: Sun 02 Nov 2025 20:33:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207216 IP address blocks: 185.162.160.0/22 maxlen: 24 2a0b:a000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:46:45:fc:61:7b:32:8b:26:9f:f2:73:b7:b3:94:f6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482 Validity Not Before: Nov 2 20:33:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf496acfdfe98bb9cd0ce68264f8d47a479ffb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:15:33:90:d8:88:e4:68:b2:f9:d6:2c:a8: 13:e5:b8:a0:cb:30:f0:cb:22:62:25:75:07:0a:5f: 33:e9:f4:34:81:2f:f6:b3:8d:f9:18:96:b3:7b:47: e3:8e:d7:94:6e:f8:8c:52:4f:c0:5e:bb:77:29:93: 79:6a:c1:93:05:a1:12:2a:c8:d5:5d:98:61:aa:74: 9b:e3:db:b6:12:08:48:f9:37:d8:32:3b:32:70:98: df:7d:2c:86:d0:4d:c5:85:a6:b6:d2:c4:aa:67:65: 1a:23:e2:c7:2d:2a:aa:60:16:90:03:1b:32:1a:77: 5c:e3:c1:0a:dd:ff:a7:5d:6f:b6:ac:9f:83:b2:0a: ab:d3:4f:a5:6c:86:c2:2e:61:e4:3f:06:da:cb:53: 48:ca:0a:d6:5f:f9:57:c0:d2:79:ec:d5:a8:f7:26: dd:7e:23:b7:a1:9a:f8:61:5c:90:66:97:f5:19:84: 8b:83:06:15:6b:d7:6c:96:5b:4b:b1:fc:45:c9:0e: 77:d0:f0:23:39:b2:d8:7e:a2:dd:5a:1d:76:52:67: 18:66:a5:8a:d7:de:23:0f:f0:e5:1f:d2:16:2c:9b: d8:5a:8c:b9:f1:e0:e5:86:90:73:04:0b:20:82:66: 0c:72:26:ae:cb:cc:01:08:9d:1e:02:3e:8c:de:a2: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:49:6A:CF:DF:E9:8B:B9:CD:0C:E6:82:64:F8:D4:7A:47:9F:FB:4B X509v3 Authority Key Identifier: keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/z0lqz9_pi7nNDOaCZPjUekef-0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.160.0/22 IPv6: 2a0b:a000::/29 Signature Algorithm: sha256WithRSAEncryption 67:9c:52:2b:2b:cc:70:82:f0:87:99:f9:10:d5:4a:71:25:f3: 5c:91:76:0c:73:77:2d:52:c3:9b:a4:00:7d:63:10:0a:dd:23: 91:1d:2b:fc:63:a7:74:75:9b:c7:ab:c8:b1:6a:da:07:ac:05: d8:37:69:aa:04:31:f3:8d:8f:d5:da:78:d5:51:51:1d:f8:4f: 41:dd:33:fd:04:82:56:d3:fb:be:0d:bb:57:6d:b3:10:f5:94: 6e:69:9b:8b:da:6d:21:87:ab:7a:d3:58:f5:58:6c:bb:53:47: bd:78:8b:72:5e:ff:8e:74:cd:6d:56:10:77:eb:e1:1e:7e:63: 18:a6:57:47:e9:db:2c:5f:89:41:6c:3f:1f:a5:e3:d2:72:a6: 9f:ee:84:83:25:e8:9a:fd:90:07:0a:b1:47:7c:8d:33:4e:f2: d5:d9:69:3c:fe:88:1f:24:ac:cb:b8:07:ef:58:47:60:73:8e: 11:24:02:29:55:59:dd:09:62:1d:95:0b:1a:bb:7d:dc:41:76: 72:d6:46:56:ed:7d:ec:8f:1b:01:d6:48:f2:61:f5:14:ce:5f: 5c:ff:27:e2:e0:58:0a:ea:e3:dd:5b:88:1e:89:56:5c:2a:ec: b5:70:d2:6a:8b:10:1e:b7:b5:1d:38:59:54:14:c2:26:6a:4a: ac:14:04:74 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZpGRfxhezKLJp/yc7ezlPYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOGRkZjgyMTIwOGEzNzBlM2E1YjdlZjhjZDQ3OTdjZmM1 Nzc0ODIwHhcNMjUxMTAyMjAzMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjQ5NmFjZmRmZTk4YmI5Y2QwY2U2ODI2NGY4ZDQ3YTQ3OWZmYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzYVM5DYiORosvnWLKgT5bigyzDw yyJiJXUHCl8z6fQ0gS/2s435GJaze0fjjteUbviMUk/AXrt3KZN5asGTBaESKsjV XZhhqnSb49u2EghI+TfYMjsycJjffSyG0E3Fhaa20sSqZ2UaI+LHLSqqYBaQAxsy Gndc48EK3f+nXW+2rJ+Dsgqr00+lbIbCLmHkPwbay1NIygrWX/lXwNJ57NWo9ybd fiO3oZr4YVyQZpf1GYSLgwYVa9dslltLsfxFyQ530PAjObLYfqLdWh12UmcYZqWK 194jD/DlH9IWLJvYWoy58eDlhpBzBAsggmYMciauy8wBCJ0eAj6M3qJgmwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM9Jas/f6Yu5zQzmgmT41HpHn/tLMB8GA1UdIwQY MBaAFO2N34ISCKNw46W374zUeXz8V3SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMt ZTlkODFlM2Q4YjU0LzEvejBscXo5X3BpN25ORE9hQ1pQalVla2VmLTBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9hODMxODQtNWZjNS00NzI0LWJhZWMtZTlkODFlM2Q4YjU0 LzEvN1kzZmdoSUlvM0RqcGJmdmpOUjVmUHhYZElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaKgMA0E AgACMAcDBQMqC6AAMA0GCSqGSIb3DQEBCwUAA4IBAQBnnFIrK8xwgvCHmfkQ1Upx JfNckXYMc3ctUsObpAB9YxAK3SORHSv8Y6d0dZvHq8ixatoHrAXYN2mqBDHzjY/V 2njVUVEd+E9B3TP9BIJW0/u+DbtXbbMQ9ZRuaZuL2m0hh6t601j1WGy7U0e9eIty Xv+OdM1tVhB36+EefmMYpldH6dssX4lBbD8fpePScqaf7oSDJeia/ZAHCrFHfI0z TvLV2Wk8/ogfJKzLuAfvWEdgc44RJAIpVVndCWIdlQsau33cQXZy1kZW7X3sjxsB 1kjyYfUUzl9c/yfi4FgK6uPdW4geiVZcKuy1cNJqixAet7UdOFlUFMImakqsFAR0 -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:43 2025 by rpki-client