This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/ZYsoBGMwVduC-15rPBuElury6Nw.roa File: ZYsoBGMwVduC-15rPBuElury6Nw.roa (raw, json) Hash identifier: JY9tVJYutXSfQPNipmAaG+iP3ktsBCWu487gcbubKLw= Subject key identifier: 65:8B:28:04:63:30:55:DB:82:FB:5E:6B:3C:1B:84:96:EA:F2:E8:DC Certificate issuer: /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Certificate serial: 019A9C2F4FB9DEC2947EF4C780354D33CB37 Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/ZYsoBGMwVduC-15rPBuElury6Nw.roa Signing time: Wed 19 Nov 2025 12:55:37 +0000 ROA not before: Wed 19 Nov 2025 12:55:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39122 IP address blocks: 64.255.40.0/24 maxlen: 24 69.5.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:2f:4f:b9:de:c2:94:7e:f4:c7:80:35:4d:33:cb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Validity Not Before: Nov 19 12:55:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=658b2804633055db82fb5e6b3c1b8496eaf2e8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:35:82:f7:39:92:2d:75:97:13:cc:6e:ed: c9:2c:4a:93:ec:0e:9b:84:af:87:48:29:fc:6e:c7: 59:65:33:57:b0:7f:c7:20:dc:34:e5:07:76:f7:72: f3:ea:8c:e2:0e:6d:f0:1b:60:68:14:aa:88:d4:76: 02:1f:c4:4c:18:55:d7:6b:7f:e5:37:df:23:86:51: 27:73:f7:fc:71:1e:58:32:bb:96:94:3e:ad:e3:de: ee:70:e3:41:01:ea:79:25:70:4e:5a:3d:47:f5:33: 08:1b:3a:20:00:73:26:51:5a:c7:ba:9b:0a:8c:86: ed:76:7c:9a:f2:6b:8b:a7:eb:bc:63:7a:07:24:56: 45:1c:df:8d:6a:d6:f1:8f:df:cd:51:87:38:00:5c: 25:fc:0c:d7:ca:11:c9:fe:b7:c8:71:c9:46:99:d9: f7:4f:54:df:bd:15:af:85:1d:23:a1:e6:d9:c7:fe: be:63:5c:7e:6e:f6:a9:76:a1:e0:8d:66:e8:ab:3b: 6b:6c:b1:da:04:69:88:36:b9:04:31:a4:46:1e:32: 63:03:27:72:11:57:15:15:ed:92:8e:05:a6:21:42: 97:8a:fb:45:d4:ac:07:21:ee:61:eb:39:2b:44:52: c2:70:64:d2:06:0e:f2:92:db:3b:7b:1e:f2:ce:13: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8B:28:04:63:30:55:DB:82:FB:5E:6B:3C:1B:84:96:EA:F2:E8:DC X509v3 Authority Key Identifier: keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/ZYsoBGMwVduC-15rPBuElury6Nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.255.40.0/24 69.5.186.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:60:bd:ff:29:c6:dc:ad:1c:54:31:72:b3:07:84:a2:87:f1: c6:b0:c2:d1:b3:cd:53:2e:7e:64:ab:07:17:51:e7:48:92:6d: 46:11:8e:55:26:1b:a7:20:4c:a7:30:18:85:be:10:c7:ec:3e: 36:8c:58:35:2c:80:52:3b:59:78:86:cf:37:8b:d5:15:e8:5f: 3b:7f:ea:29:58:aa:b9:d4:6d:83:02:74:9f:2c:f6:4e:00:7a: 68:54:6d:95:f4:f9:06:20:f4:ad:9a:c6:8c:a6:57:02:8b:3f: 08:91:06:2f:39:6e:7a:f4:33:ff:e8:c6:1a:9a:27:5a:89:8e: fc:92:cc:d7:47:1e:4f:d1:fe:0d:c4:d8:28:d5:6a:8a:4e:8c: 65:d1:0e:0d:0f:c7:7b:90:b1:55:af:6c:b3:99:90:ac:59:5b: 4c:0f:9a:8e:a7:85:cb:c2:8f:a8:44:2c:24:9c:7b:51:b7:df: 2d:20:69:44:6f:0b:57:7e:46:65:1f:20:97:08:1b:5c:e1:6e: 7a:7d:17:54:df:4a:fd:cb:2f:9f:4e:bb:2b:b5:0d:11:d4:f3: 87:1e:28:2c:e5:a6:19:e3:81:cb:a8:d9:09:4d:cd:ae:00:b7: 15:09:be:cc:e7:49:99:e3:6d:06:47:88:3e:0c:6a:62:0d:b9: 61:99:a8:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqcL0+53sKUfvTHgDVNM8s3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWI3YjcxOTU0ZWRmZmNhMzU4NGM4NWZhMDhmYjEyMjQy ZmVjZDUwHhcNMjUxMTE5MTI1NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NThiMjgwNDYzMzA1NWRiODJmYjVlNmIzYzFiODQ5NmVhZjJlOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0s1gvc5ki11lxPMbu3JLEqT7A6b hK+HSCn8bsdZZTNXsH/HINw05Qd293Lz6oziDm3wG2BoFKqI1HYCH8RMGFXXa3/l N98jhlEnc/f8cR5YMruWlD6t497ucONBAep5JXBOWj1H9TMIGzogAHMmUVrHupsK jIbtdnya8muLp+u8Y3oHJFZFHN+Natbxj9/NUYc4AFwl/AzXyhHJ/rfIcclGmdn3 T1TfvRWvhR0joebZx/6+Y1x+bvapdqHgjWboqztrbLHaBGmINrkEMaRGHjJjAydy EVcVFe2SjgWmIUKXivtF1KwHIe5h6zkrRFLCcGTSBg7ykts7ex7yzhPxFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGWLKARjMFXbgvteazwbhJbq8ujcMB8GA1UdIwQY MBaAFKHre3GVTt/8o1hMhfoI+xIkL+zVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMt MGVkMTdhNjk4MDBmLzEvWllzb0JHTXdWZHVDLTE1clBCdUVsdXJ5Nk53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMtMGVkMTdhNjk4MDBm LzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQP8oAwQA RQW6MA0GCSqGSIb3DQEBCwUAA4IBAQCdYL3/KcbcrRxUMXKzB4Sih/HGsMLRs81T Ln5kqwcXUedIkm1GEY5VJhunIEynMBiFvhDH7D42jFg1LIBSO1l4hs83i9UV6F87 f+opWKq51G2DAnSfLPZOAHpoVG2V9PkGIPStmsaMplcCiz8IkQYvOW569DP/6MYa midaiY78kszXRx5P0f4NxNgo1WqKToxl0Q4ND8d7kLFVr2yzmZCsWVtMD5qOp4XL wo+oRCwknHtRt98tIGlEbwtXfkZlHyCXCBtc4W56fRdU30r9yy+fTrsrtQ0R1POH Higs5aYZ44HLqNkJTc2uALcVCb7M50mZ420GR4g+DGpiDblhmagl -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:12 2025 by rpki-client