This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/ZbN_Tk_CETTLbIv1rfJVJVIzmDE.roa File: ZbN_Tk_CETTLbIv1rfJVJVIzmDE.roa (raw, json) Hash identifier: 1XXH10Y+2gdU8Q+rD/o/yfLbeK+8DegL5sQuHcQrofQ= Subject key identifier: 65:B3:7F:4E:4F:C2:11:34:CB:6C:8B:F5:AD:F2:55:25:52:33:98:31 Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Certificate serial: 019AF7EFF5C138EB304255D7AF1635751502 Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/ZbN_Tk_CETTLbIv1rfJVJVIzmDE.roa Signing time: Sun 07 Dec 2025 08:31:29 +0000 ROA not before: Sun 07 Dec 2025 08:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204533 IP address blocks: 78.109.203.0/24 maxlen: 24 78.109.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:ef:f5:c1:38:eb:30:42:55:d7:af:16:35:75:15:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Validity Not Before: Dec 7 08:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65b37f4e4fc21134cb6c8bf5adf2552552339831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:89:74:c5:1c:a0:f3:ec:d9:c0:78:21:6d: 29:b8:a1:74:a1:76:ef:7d:16:66:48:19:5f:2e:84: 84:ec:bd:38:54:97:7d:19:f9:3d:b8:97:2d:28:73: 40:f4:70:72:3b:4d:ea:9c:5d:58:48:21:35:5c:53: 54:fa:a2:5b:be:9e:58:62:d3:4f:7f:2d:ae:50:13: 0e:03:18:db:1a:bb:36:eb:0c:58:9a:c3:d2:29:77: 0a:d9:7e:0c:5e:68:9f:6c:3e:ea:bd:4a:79:91:9a: 0f:88:65:ec:2c:bd:1e:81:5d:80:ea:07:98:24:5b: d8:b7:e4:ed:91:02:b6:56:b4:c7:19:d0:8a:73:14: 72:3e:31:6d:6c:2a:41:e3:d4:29:09:5a:3f:f5:17: 8e:31:81:f8:0b:6f:14:ab:7c:2d:e9:ae:30:ab:af: 96:31:cc:b6:c5:39:0b:1e:5b:b3:a9:50:8a:9e:a4: d9:55:19:9b:f5:66:e7:2b:a6:e9:fe:a3:31:1e:84: 35:bf:b5:cb:f7:2b:a2:e0:61:6a:e9:70:09:f7:01: 8c:8b:f3:e1:c1:b7:b1:00:e1:05:ce:ba:a3:1d:15: a0:1d:2e:4c:e6:79:62:f9:ae:b0:56:a4:f1:be:c5: 41:b6:58:21:ea:2d:73:b2:da:a7:d8:32:83:74:ae: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:7F:4E:4F:C2:11:34:CB:6C:8B:F5:AD:F2:55:25:52:33:98:31 X509v3 Authority Key Identifier: keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/ZbN_Tk_CETTLbIv1rfJVJVIzmDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.109.203.0/24 78.109.207.0/24 Signature Algorithm: sha256WithRSAEncryption 82:90:0a:49:42:83:53:05:ac:82:9c:88:40:78:d1:47:67:89: f4:6d:14:1f:51:0e:46:10:bb:2e:86:c1:9e:ca:79:c8:63:10: 68:aa:3c:52:c0:8a:57:03:d2:5e:19:75:8b:6a:a7:6e:ff:51: 3e:38:50:84:57:6c:c8:4a:7e:46:1e:3b:c9:b4:97:cc:05:ae: 5a:32:1d:8a:8a:eb:b6:65:27:c4:94:a9:62:4d:bd:08:46:e2: af:b9:d8:7c:03:6c:55:f2:56:34:53:ec:e2:65:d6:f8:e1:cd: 65:f4:e2:c8:3b:68:aa:3a:9b:d6:83:a9:84:89:ca:37:53:ef: 52:48:1f:c0:91:46:59:97:1c:dd:2e:f9:b6:2c:7a:2a:5c:98: 11:7a:19:2d:92:0d:5e:22:2e:72:41:2b:92:db:02:94:83:d3: 89:75:24:79:2b:6e:18:c1:90:c0:b8:2c:78:98:44:66:55:5f: 0b:6f:a3:5d:54:ea:c1:b7:57:54:d1:89:28:7b:d1:01:2b:a3: 2e:4a:be:fb:15:53:22:38:b8:93:47:40:f6:09:85:07:9d:40: 50:98:05:5c:bb:7e:bd:f3:36:13:99:84:e1:31:f7:73:a9:3a: b6:7d:0d:77:bc:05:e4:f4:ac:69:00:08:17:0e:87:3a:eb:29: 3c:cf:1b:4d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr37/XBOOswQlXXrxY1dRUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NWM1ZjNiYjgxMTkxNzIwYzBkZGY4YjNjZjM0ZDkxZGFi NGUxZDMwHhcNMjUxMjA3MDgzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWIzN2Y0ZTRmYzIxMTM0Y2I2YzhiZjVhZGYyNTUyNTUyMzM5ODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOqJdMUcoPPs2cB4IW0puKF0oXbv fRZmSBlfLoSE7L04VJd9Gfk9uJctKHNA9HByO03qnF1YSCE1XFNU+qJbvp5YYtNP fy2uUBMOAxjbGrs26wxYmsPSKXcK2X4MXmifbD7qvUp5kZoPiGXsLL0egV2A6geY JFvYt+TtkQK2VrTHGdCKcxRyPjFtbCpB49QpCVo/9ReOMYH4C28Uq3wt6a4wq6+W Mcy2xTkLHluzqVCKnqTZVRmb9WbnK6bp/qMxHoQ1v7XL9yui4GFq6XAJ9wGMi/Ph wbexAOEFzrqjHRWgHS5M5nli+a6wVqTxvsVBtlgh6i1zstqn2DKDdK5vzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGWzf05PwhE0y2yL9a3yVSVSM5gxMB8GA1UdIwQY MBaAFARcXzu4EZFyDA3fizzzTZHatOHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2Mt ZmJiODA4NTNjMWJlLzEvWmJOX1RrX0NFVFRMYkl2MXJmSlZKVkl6bURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2MtZmJiODA4NTNjMWJl LzEvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATm3LAwQA Tm3PMA0GCSqGSIb3DQEBCwUAA4IBAQCCkApJQoNTBayCnIhAeNFHZ4n0bRQfUQ5G ELsuhsGeynnIYxBoqjxSwIpXA9JeGXWLaqdu/1E+OFCEV2zISn5GHjvJtJfMBa5a Mh2Kiuu2ZSfElKliTb0IRuKvudh8A2xV8lY0U+ziZdb44c1l9OLIO2iqOpvWg6mE ico3U+9SSB/AkUZZlxzdLvm2LHoqXJgRehktkg1eIi5yQSuS2wKUg9OJdSR5K24Y wZDAuCx4mERmVV8Lb6NdVOrBt1dU0Ykoe9EBK6MuSr77FVMiOLiTR0D2CYUHnUBQ mAVcu3698zYTmYThMfdzqTq2fQ13vAXk9KxpAAgXDoc66yk8zxtN -----END CERTIFICATE-----Generated at Mon Dec 8 01:16:48 2025 by rpki-client