This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/ZFn-3T3HpfQBuAHKtlkfBlzyMFE.roa File: ZFn-3T3HpfQBuAHKtlkfBlzyMFE.roa (raw, json) Hash identifier: bL5zNEbul9UL3VC1iqKC23m10I1zTh///EbTXCvQGbo= Subject key identifier: 64:59:FE:DD:3D:C7:A5:F4:01:B8:01:CA:B6:59:1F:06:5C:F2:30:51 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019AD57111A058E24ACB09634A980CFBE246 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/ZFn-3T3HpfQBuAHKtlkfBlzyMFE.roa Signing time: Sun 30 Nov 2025 15:45:48 +0000 ROA not before: Sun 30 Nov 2025 15:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401293 IP address blocks: 84.247.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:71:11:a0:58:e2:4a:cb:09:63:4a:98:0c:fb:e2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Nov 30 15:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6459fedd3dc7a5f401b801cab6591f065cf23051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:2b:dc:e6:24:a3:ed:38:4d:46:9c:66:bc: 6f:dc:aa:e2:f1:90:b3:9a:f2:db:c4:0b:e4:8d:ff: 87:4a:54:32:89:91:83:23:26:00:69:bb:ce:c1:92: 4c:67:57:60:79:53:e2:c3:bd:c6:6d:e9:e6:c2:c0: bb:4e:b2:cf:bd:2f:e7:64:15:df:f3:88:12:61:e6: ca:1c:f0:fc:71:ba:a7:08:da:95:8b:10:44:e0:96: 4d:eb:24:c8:c9:4b:f7:57:0d:31:34:32:43:c8:0f: d3:c2:cd:b9:ad:35:3d:6c:22:37:00:ed:b9:5e:0f: 44:26:1f:29:63:5d:fd:74:6b:b0:04:0c:08:89:c2: 0f:9b:99:ee:2f:48:84:f2:e6:8c:17:26:78:07:12: 98:04:1a:64:cd:94:63:3a:16:4e:43:10:5e:b4:c6: 87:de:21:40:3f:b5:19:92:56:4c:22:53:74:9c:8d: 48:2d:7d:8d:a0:0a:7d:a5:47:25:0b:3b:7d:e7:1c: a7:f8:8b:7a:0e:06:7a:58:7a:32:be:6e:20:15:2d: fe:73:fa:da:6b:8d:14:0a:69:52:4e:4a:bb:01:27: 19:71:f8:63:1f:cd:45:57:37:ef:af:d1:ba:fd:af: 82:a6:9f:69:e7:b6:07:c0:8e:00:60:b7:0e:55:d2: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:59:FE:DD:3D:C7:A5:F4:01:B8:01:CA:B6:59:1F:06:5C:F2:30:51 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/ZFn-3T3HpfQBuAHKtlkfBlzyMFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.119.0/24 Signature Algorithm: sha256WithRSAEncryption 99:12:cb:57:66:b5:09:e6:fa:ae:b3:35:c8:b3:e2:b5:02:a1: 95:4a:9f:8e:89:68:38:17:4a:0d:dd:14:30:97:48:04:f0:1e: d3:9c:0d:11:99:6e:24:de:da:00:3c:3a:97:35:39:3b:ee:98: 78:f7:e8:1b:06:2d:1e:b6:7f:8c:49:c8:65:59:ce:61:ab:64: 36:bf:9c:2b:ff:38:32:d1:00:ab:37:5d:ad:f5:cd:ae:49:dc: 1e:00:40:ff:9b:6b:8d:6b:48:2e:66:8f:11:51:a6:0f:46:f1: 51:cc:d1:4b:3d:8e:47:91:05:05:4d:c2:ab:f9:88:55:77:fb: c0:34:e2:2f:f6:4a:d1:ff:ce:b8:2b:d5:d8:b4:32:d2:6e:0a: ab:12:69:0d:60:ad:13:b8:3e:60:17:21:f7:19:23:4f:f7:3d: 32:c3:11:2e:e3:34:08:a1:44:34:82:dc:72:a5:c1:1b:9d:ee: a3:1a:39:4c:5c:0a:c7:d2:60:ad:7a:ff:3c:b3:57:ee:7e:07: ac:07:be:85:24:64:44:ee:fb:81:d2:dd:31:0c:4f:b6:9f:1a: e2:28:87:14:a0:12:2a:fe:29:78:f5:66:89:f9:0b:dc:e4:d4: 8c:13:50:9b:58:05:68:f7:03:3a:8b:b2:59:a1:a3:7f:db:f9: 68:70:22:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrVcRGgWOJKywljSpgM++JGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjUxMTMwMTU0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDU5ZmVkZDNkYzdhNWY0MDFiODAxY2FiNjU5MWYwNjVjZjIzMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkror3OYko+04TUacZrxv3Kri8ZCz mvLbxAvkjf+HSlQyiZGDIyYAabvOwZJMZ1dgeVPiw73GbenmwsC7TrLPvS/nZBXf 84gSYebKHPD8cbqnCNqVixBE4JZN6yTIyUv3Vw0xNDJDyA/Tws25rTU9bCI3AO25 Xg9EJh8pY139dGuwBAwIicIPm5nuL0iE8uaMFyZ4BxKYBBpkzZRjOhZOQxBetMaH 3iFAP7UZklZMIlN0nI1ILX2NoAp9pUclCzt95xyn+It6DgZ6WHoyvm4gFS3+c/ra a40UCmlSTkq7AScZcfhjH81FVzfvr9G6/a+Cpp9p57YHwI4AYLcOVdJfRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGRZ/t09x6X0AbgByrZZHwZc8jBRMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvWkZuLTNUM0hwZlFCdUFIS3Rsa2ZCbHp5TUZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPd3MA0G CSqGSIb3DQEBCwUAA4IBAQCZEstXZrUJ5vquszXIs+K1AqGVSp+OiWg4F0oN3RQw l0gE8B7TnA0RmW4k3toAPDqXNTk77ph49+gbBi0etn+MSchlWc5hq2Q2v5wr/zgy 0QCrN12t9c2uSdweAED/m2uNa0guZo8RUaYPRvFRzNFLPY5HkQUFTcKr+YhVd/vA NOIv9krR/864K9XYtDLSbgqrEmkNYK0TuD5gFyH3GSNP9z0ywxEu4zQIoUQ0gtxy pcEbne6jGjlMXArH0mCtev88s1fufgesB76FJGRE7vuB0t0xDE+2nxriKIcUoBIq /il49WaJ+Qvc5NSME1CbWAVo9wM6i7JZoaN/2/locCLS -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:50 2025 by rpki-client