This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/zH4uo7wZS9DthbMbIV3cUe0ok_c.roa File: zH4uo7wZS9DthbMbIV3cUe0ok_c.roa (raw, json) Hash identifier: HLzxWTEgetYO6uF6aHtVJHRcG+Z9PahsUBDMJkY5lPc= Subject key identifier: CC:7E:2E:A3:BC:19:4B:D0:ED:85:B3:1B:21:5D:DC:51:ED:28:93:F7 Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2 Certificate serial: 019A53DA3EFCE6830B7C3CAE5DF4615733C8 Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/zH4uo7wZS9DthbMbIV3cUe0ok_c.roa Signing time: Wed 05 Nov 2025 11:50:03 +0000 ROA not before: Wed 05 Nov 2025 11:50:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212904 IP address blocks: 185.100.229.0/24 maxlen: 24 185.100.230.0/24 maxlen: 24 185.192.100.0/24 maxlen: 24 185.192.101.0/24 maxlen: 24 185.192.103.0/24 maxlen: 24 185.243.28.0/24 maxlen: 24 185.243.29.0/24 maxlen: 24 185.243.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:da:3e:fc:e6:83:0b:7c:3c:ae:5d:f4:61:57:33:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2 Validity Not Before: Nov 5 11:50:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc7e2ea3bc194bd0ed85b31b215ddc51ed2893f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:52:00:88:84:cf:98:4b:c2:7d:eb:76:99:ed: ed:cc:3c:45:67:6d:b2:76:f8:11:f7:45:74:67:67: 15:00:dd:bb:53:ae:b9:59:e6:8c:6e:87:4e:70:b3: a8:58:22:4d:0a:9f:31:54:5f:9c:a8:9d:b6:0d:2e: c6:ca:3b:e6:cb:3c:27:6f:30:1c:74:c0:e3:f3:41: 6f:a5:a7:c6:df:94:62:7c:c3:df:2d:2b:a5:ad:96: e6:75:07:56:91:b7:d8:40:9c:d8:db:f6:22:8d:47: f3:69:19:cd:0e:36:ac:26:ac:04:6f:43:43:0d:4d: 03:6d:af:ef:98:db:3a:33:84:b7:8d:7c:1f:5e:48: 29:cb:28:40:98:01:eb:02:df:5b:aa:b3:4c:07:e1: 1a:8f:bc:c4:7e:d6:8d:db:4e:5b:f8:8f:b2:77:16: 80:57:01:f7:2a:23:3b:40:2c:95:18:6e:50:87:14: 6d:cb:39:5b:19:3e:8a:b7:c7:37:a8:36:e4:63:e8: 1e:72:b7:7f:88:8a:6d:64:b0:ea:f0:7d:cf:31:00: 23:95:82:79:f1:2c:de:7b:20:13:ed:a0:85:fc:ae: 32:f2:af:92:0c:36:5d:7b:7c:70:b5:b7:a1:18:1c: 24:5e:59:c9:97:3e:89:f1:ff:62:7a:db:de:cd:5a: 5a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7E:2E:A3:BC:19:4B:D0:ED:85:B3:1B:21:5D:DC:51:ED:28:93:F7 X509v3 Authority Key Identifier: keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/zH4uo7wZS9DthbMbIV3cUe0ok_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.229.0-185.100.230.255 185.192.100.0/23 185.192.103.0/24 185.243.28.0-185.243.30.255 Signature Algorithm: sha256WithRSAEncryption 5a:ef:67:c9:71:91:6e:a2:55:82:f8:e0:a6:3a:28:67:1b:82: d4:6f:9c:d3:81:79:c8:50:2b:13:d7:b3:c2:2a:4a:8f:00:93: a7:15:27:70:60:8f:09:5d:6b:2b:52:f4:5d:04:05:48:85:b8: 25:cb:93:d2:fe:3e:69:af:ad:bc:72:62:fb:ba:be:1e:d2:f4: 0a:05:07:b8:4b:ce:a4:ef:a7:de:2f:23:fb:c1:ec:8f:e9:ef: 1c:48:47:e0:b5:6d:bb:a6:2e:09:54:28:27:15:f1:8a:0c:13: a9:12:c3:75:3f:46:31:ac:87:17:61:b3:b3:00:e4:4f:f3:64: 29:40:4d:70:70:fe:ca:4f:a6:19:a0:19:8d:5f:93:dd:cc:4b: d3:19:2d:14:b9:bc:67:f5:4d:86:4c:b3:2d:93:8a:b6:1b:a0: b2:49:2f:c1:08:99:7a:4e:e7:50:27:3f:dd:c7:c4:1d:a5:38: c2:c2:74:0b:b7:32:2d:7c:c9:1c:6b:8a:f7:59:40:59:93:5b: 90:44:85:69:67:fe:1d:67:46:70:30:98:1e:90:21:00:b7:72: c4:37:ef:0c:8b:c4:71:44:42:68:8c:0c:7d:72:3c:7e:59:2e: 68:3a:fb:4b:ab:56:c8:81:51:1c:3a:df:a1:5c:67:1a:a9:ab: 29:00:6b:01 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZpT2j785oMLfDyuXfRhVzPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmVjNzU3ODQ1MGY5NDVkNGYzMzRkZjYwMGM2MWE2ZjQ3 MjMyZjIwHhcNMjUxMTA1MTE1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzdlMmVhM2JjMTk0YmQwZWQ4NWIzMWIyMTVkZGM1MWVkMjg5M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFIAiITPmEvCfet2me3tzDxFZ22y dvgR90V0Z2cVAN27U665WeaMbodOcLOoWCJNCp8xVF+cqJ22DS7GyjvmyzwnbzAc dMDj80FvpafG35RifMPfLSulrZbmdQdWkbfYQJzY2/YijUfzaRnNDjasJqwEb0ND DU0Dba/vmNs6M4S3jXwfXkgpyyhAmAHrAt9bqrNMB+Eaj7zEftaN205b+I+ydxaA VwH3KiM7QCyVGG5QhxRtyzlbGT6Kt8c3qDbkY+gecrd/iIptZLDq8H3PMQAjlYJ5 8SzeeyAT7aCF/K4y8q+SDDZde3xwtbehGBwkXlnJlz6J8f9ietvezVpajwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMx+LqO8GUvQ7YWzGyFd3FHtKJP3MB8GA1UdIwQY MBaAFAS+x1eEUPlF1PM032AMYab0cjLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2Yt OWRiNjE0Y2IxMjdhLzEvekg0dW83d1pTOUR0aGJNYklWM2NVZTBva19jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2YtOWRiNjE0Y2IxMjdh LzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAC5ZOUD BAC5ZOYDBAG5wGQDBAC5wGcwDAMEArnzHAMEALnzHjANBgkqhkiG9w0BAQsFAAOC AQEAWu9nyXGRbqJVgvjgpjooZxuC1G+c04F5yFArE9ezwipKjwCTpxUncGCPCV1r K1L0XQQFSIW4JcuT0v4+aa+tvHJi+7q+HtL0CgUHuEvOpO+n3i8j+8Hsj+nvHEhH 4LVtu6YuCVQoJxXxigwTqRLDdT9GMayHF2GzswDkT/NkKUBNcHD+yk+mGaAZjV+T 3cxL0xktFLm8Z/VNhkyzLZOKthugskkvwQiZek7nUCc/3cfEHaU4wsJ0C7cyLXzJ HGuK91lAWZNbkESFaWf+HWdGcDCYHpAhALdyxDfvDIvEcURCaIwMfXI8flkuaDr7 S6tWyIFRHDrfoVxnGqmrKQBrAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:17:12 2025 by rpki-client