This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/ZP2ggnguw-XEGATrr9PvJHdpJXI.roa File: ZP2ggnguw-XEGATrr9PvJHdpJXI.roa (raw, json) Hash identifier: Duuc/yLu6wD1kGS4ffozSoGNCQM0JNj0FjDWGSYtKmw= Subject key identifier: 64:FD:A0:82:78:2E:C3:E5:C4:18:04:EB:AF:D3:EF:24:77:69:25:72 Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Certificate serial: 019AC6124C4B7EDCAFB1733ADC841B43B4DF Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/ZP2ggnguw-XEGATrr9PvJHdpJXI.roa Signing time: Thu 27 Nov 2025 16:07:59 +0000 ROA not before: Thu 27 Nov 2025 16:07:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215131 IP address blocks: 2001:67c:e5c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:12:4c:4b:7e:dc:af:b1:73:3a:dc:84:1b:43:b4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Validity Not Before: Nov 27 16:07:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64fda082782ec3e5c41804ebafd3ef2477692572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:68:c1:f9:30:78:35:2b:3b:67:0d:87:d0: 29:6a:ca:25:2e:3a:2b:2b:31:be:8b:69:c6:08:f2: 29:d9:bf:8f:52:14:01:cb:01:49:c1:7f:e3:53:42: 73:b6:7c:5d:30:e3:6e:58:42:b2:cc:b0:af:a7:87: a7:12:57:0f:8a:41:63:6b:11:44:28:47:11:a5:32: 4c:af:7f:d5:f9:16:7e:87:93:ad:92:6f:2f:cd:8b: 75:53:18:25:ce:ab:2a:94:3c:e7:fb:dd:ab:ee:5e: b2:5f:ad:fc:6a:03:49:e2:25:fc:aa:03:2a:44:06: 1e:6f:29:8f:b0:e0:29:90:b2:95:bf:c9:a2:70:73: 70:cf:0b:93:99:a6:f3:08:f0:7d:6d:46:d3:9f:f1: c8:50:65:fe:2d:92:28:e6:92:0a:57:18:7f:9f:ea: 2c:66:31:5d:3a:08:ab:94:1e:83:7d:d6:a0:97:b0: 5e:54:e1:36:63:bf:a3:fd:d8:52:c7:0b:85:1e:68: 4b:36:e2:9e:c9:2f:13:d5:6d:ed:5c:90:5a:a3:7d: 8a:59:fb:e6:1b:11:b5:7f:72:6f:c0:9e:8f:fe:03: e4:f4:97:ae:5f:ac:ba:48:84:54:c7:30:65:b1:32: 71:b8:21:4e:06:b2:b1:b7:97:d9:09:97:55:53:20: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FD:A0:82:78:2E:C3:E5:C4:18:04:EB:AF:D3:EF:24:77:69:25:72 X509v3 Authority Key Identifier: keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/ZP2ggnguw-XEGATrr9PvJHdpJXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e5c::/48 Signature Algorithm: sha256WithRSAEncryption 7c:f5:14:c4:20:b5:df:87:c9:ef:86:f5:8f:74:b9:b9:49:38: 4d:9b:c8:a3:bf:86:29:e2:e6:f9:50:e5:4b:eb:9f:81:da:1a: 9a:4a:49:e2:72:5a:17:e3:2e:c2:42:eb:19:ac:cd:b6:68:e3: a2:34:4c:1d:07:0b:bc:ed:c2:18:63:e4:85:88:d1:12:ee:8c: dc:b1:45:70:8b:c2:d9:8d:4f:0f:e7:9c:f5:51:2f:14:41:de: 47:27:cc:b6:52:af:d2:d1:1d:4a:09:e0:71:92:02:1b:ac:a5: fa:21:a6:44:8d:dc:a7:57:3c:1e:47:09:88:19:3a:39:34:fe: 02:34:be:d3:c3:ae:7b:02:13:3e:5d:36:3a:d2:3b:11:9a:f7: ac:bb:94:d8:b2:6b:15:1e:d5:d5:30:e2:1d:f4:f5:17:15:3b: 5c:3f:38:fb:12:81:5b:b2:c3:46:ff:db:20:1c:74:f2:48:96: 75:d9:77:99:c3:33:bf:16:3c:f9:41:01:e9:54:c7:68:8a:36: b0:fa:4c:6f:47:3f:f9:95:91:fd:15:69:c4:72:3b:1f:89:fe: 8a:6b:b9:36:b1:8e:eb:c3:37:a6:93:ac:4a:36:2c:b0:f3:56: cb:d5:61:f3:e9:ed:17:8d:82:88:30:f1:ac:9f:fc:8f:25:0d: 86:eb:13:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrGEkxLftyvsXM63IQbQ7TfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzIwZWI0MDdkNWIxYjliMjQ0NTNiODI2Y2FhNmYwNzRl N2QxMmQwHhcNMjUxMTI3MTYwNzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGZkYTA4Mjc4MmVjM2U1YzQxODA0ZWJhZmQzZWYyNDc3NjkyNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaxowfkweDUrO2cNh9ApasolLjor KzG+i2nGCPIp2b+PUhQBywFJwX/jU0JztnxdMONuWEKyzLCvp4enElcPikFjaxFE KEcRpTJMr3/V+RZ+h5Otkm8vzYt1UxglzqsqlDzn+92r7l6yX638agNJ4iX8qgMq RAYebymPsOApkLKVv8micHNwzwuTmabzCPB9bUbTn/HIUGX+LZIo5pIKVxh/n+os ZjFdOgirlB6Dfdagl7BeVOE2Y7+j/dhSxwuFHmhLNuKeyS8T1W3tXJBao32KWfvm GxG1f3JvwJ6P/gPk9JeuX6y6SIRUxzBlsTJxuCFOBrKxt5fZCZdVUyAlbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGT9oIJ4LsPlxBgE66/T7yR3aSVyMB8GA1UdIwQY MBaAFAZyDrQH1bG5skRTuCbKpvB059EtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzct NzhjMGMwMmY3OGEyLzEvWlAyZ2duZ3V3LVhFR0FUcnI5UHZKSGRwSlhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzctNzhjMGMwMmY3OGEy LzEvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA5c MA0GCSqGSIb3DQEBCwUAA4IBAQB89RTEILXfh8nvhvWPdLm5SThNm8ijv4Yp4ub5 UOVL65+B2hqaSknicloX4y7CQusZrM22aOOiNEwdBwu87cIYY+SFiNES7ozcsUVw i8LZjU8P55z1US8UQd5HJ8y2Uq/S0R1KCeBxkgIbrKX6IaZEjdynVzweRwmIGTo5 NP4CNL7Tw657AhM+XTY60jsRmvesu5TYsmsVHtXVMOId9PUXFTtcPzj7EoFbssNG /9sgHHTySJZ12XeZwzO/Fjz5QQHpVMdoijaw+kxvRz/5lZH9FWnEcjsfif6Ka7k2 sY7rwzemk6xKNiyw81bL1WHz6e0XjYKIMPGsn/yPJQ2G6xMQ -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:00 2025 by rpki-client