This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/zTyslOuOPP_JoMeTILXYxYfp5vA.roa File: zTyslOuOPP_JoMeTILXYxYfp5vA.roa (raw, json) Hash identifier: FbxFByVO0RsiamD0y9hyhyQ/dE01qwfGIUQWTBDqies= Subject key identifier: CD:3C:AC:94:EB:8E:3C:FF:C9:A0:C7:93:20:B5:D8:C5:87:E9:E6:F0 Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Certificate serial: 019A9795F200239EF37FA36649FD00B1E5A4 Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/zTyslOuOPP_JoMeTILXYxYfp5vA.roa Signing time: Tue 18 Nov 2025 15:29:37 +0000 ROA not before: Tue 18 Nov 2025 15:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20546 IP address blocks: 195.253.94.0/24 maxlen: 24 195.253.118.0/24 maxlen: 24 2a01:5b0:16::/48 maxlen: 48 2a01:5b0:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:95:f2:00:23:9e:f3:7f:a3:66:49:fd:00:b1:e5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Validity Not Before: Nov 18 15:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd3cac94eb8e3cffc9a0c79320b5d8c587e9e6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:51:1e:d8:6a:93:d2:4e:4f:76:13:9f:86:cc: 57:d7:eb:19:e6:db:88:d0:4d:e2:04:a0:14:9d:c0: cf:ab:0e:cd:90:3c:53:01:70:25:73:db:d6:48:cb: 51:23:14:07:79:f8:84:44:a5:43:f5:30:98:26:bd: b2:ff:2e:63:64:56:45:ef:33:c1:0c:f6:42:f9:71: d2:bf:99:31:cc:6f:b8:b3:76:a7:fc:7f:50:8f:7d: bc:b5:e5:42:aa:6c:54:d2:bf:88:24:b1:ee:59:18: d0:f9:30:56:e3:8f:4b:06:3d:7f:97:23:e4:e7:eb: 70:f4:06:6f:9f:5e:1e:c3:28:e6:8b:40:c8:fd:fc: 40:d3:d8:2f:ac:b7:48:b2:5c:cf:ce:83:12:59:b3: c3:68:d5:c1:4a:b8:ba:c4:1e:e4:50:20:7b:fe:04: 4c:83:f2:f1:5d:7a:cb:ba:15:c4:12:08:a7:97:d9: 15:bb:67:12:7e:8b:95:44:d3:5c:97:7d:2c:70:ec: 80:f3:ea:89:dd:2b:2e:bf:3f:a2:d6:65:5d:33:c0: c0:c9:1a:81:b5:21:d5:25:a1:0a:67:1d:c0:5c:d7: a7:d5:a0:dc:67:10:0d:56:ac:98:ca:51:d6:8a:1c: 64:2e:5d:ec:eb:7b:be:66:d0:50:3d:4b:76:b2:2e: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3C:AC:94:EB:8E:3C:FF:C9:A0:C7:93:20:B5:D8:C5:87:E9:E6:F0 X509v3 Authority Key Identifier: keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/zTyslOuOPP_JoMeTILXYxYfp5vA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.253.94.0/24 195.253.118.0/24 IPv6: 2a01:5b0:16::/48 2a01:5b0:36::/48 Signature Algorithm: sha256WithRSAEncryption 4a:c1:13:f1:11:40:15:46:b3:fa:c9:c8:09:fb:dd:c7:78:4f: ee:4f:73:8e:d8:52:e7:e2:07:ad:de:4a:dc:d2:36:a1:81:ce: 68:e8:40:6f:21:65:a8:97:81:34:59:6a:e5:ae:07:14:ad:79: 49:f5:c8:22:f8:3c:d1:64:d0:0b:b2:1b:15:6a:2c:68:fd:7c: 44:97:f3:0d:69:e0:e8:ed:3b:83:8a:18:53:1b:70:9a:27:ae: 9a:e9:20:f4:e7:b6:cf:60:6e:cf:45:24:ba:40:c5:25:68:e8: 3d:0e:aa:fe:7d:e9:46:50:d3:1b:be:01:20:63:63:d1:fb:25: 59:a3:05:33:33:eb:c7:80:ce:a3:cc:cd:e3:58:8c:97:63:f1: a3:ef:7e:75:bb:cb:54:99:7c:b9:9b:71:a1:51:83:70:46:c7: d6:16:12:ba:ff:e0:93:92:d9:27:c0:24:b2:36:61:73:d7:49: 25:58:2a:18:13:a9:0b:ce:37:fe:e3:56:5a:dd:ca:b7:b6:da: df:51:0e:b0:bd:87:8e:9d:26:63:29:4d:af:63:50:cd:0f:20: 34:b4:87:8b:1d:ac:84:6f:a4:50:f1:9c:92:5f:af:bd:5c:01: 55:b4:31:4b:0a:d3:04:4d:2b:93:da:ce:d0:22:5f:77:c2:f2: b1:de:c7:4e -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZqXlfIAI57zf6NmSf0AseWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk ODViMzAwHhcNMjUxMTE4MTUyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDNjYWM5NGViOGUzY2ZmYzlhMGM3OTMyMGI1ZDhjNTg3ZTllNmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FEe2GqT0k5PdhOfhsxX1+sZ5tuI 0E3iBKAUncDPqw7NkDxTAXAlc9vWSMtRIxQHefiERKVD9TCYJr2y/y5jZFZF7zPB DPZC+XHSv5kxzG+4s3an/H9Qj328teVCqmxU0r+IJLHuWRjQ+TBW449LBj1/lyPk 5+tw9AZvn14ewyjmi0DI/fxA09gvrLdIslzPzoMSWbPDaNXBSri6xB7kUCB7/gRM g/LxXXrLuhXEEginl9kVu2cSfouVRNNcl30scOyA8+qJ3Ssuvz+i1mVdM8DAyRqB tSHVJaEKZx3AXNen1aDcZxANVqyYylHWihxkLl3s63u+ZtBQPUt2si7PHwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFM08rJTrjjz/yaDHkyC12MWH6ebwMB8GA1UdIwQY MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt MDYzY2U2Y2Y0NjBkLzEvelR5c2xPdU9QUF9Kb01lVElMWFl4WWZwNXZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAw/1eAwQA w/12MBgEAgACMBIDBwAqAQWwABYDBwAqAQWwADYwDQYJKoZIhvcNAQELBQADggEB AErBE/ERQBVGs/rJyAn73cd4T+5Pc47YUufiB63eStzSNqGBzmjoQG8hZaiXgTRZ auWuBxSteUn1yCL4PNFk0AuyGxVqLGj9fESX8w1p4OjtO4OKGFMbcJonrprpIPTn ts9gbs9FJLpAxSVo6D0Oqv596UZQ0xu+ASBjY9H7JVmjBTMz68eAzqPMzeNYjJdj 8aPvfnW7y1SZfLmbcaFRg3BGx9YWErr/4JOS2SfAJLI2YXPXSSVYKhgTqQvON/7j Vlrdyre22t9RDrC9h46dJmMpTa9jUM0PIDS0h4sdrIRvpFDxnJJfr71cAVW0MUsK 0wRNK5PaztAiX3fC8rHex04= -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:36 2025 by rpki-client