This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/ZehywsFIw6zmSabJPOURntRxi2o.roa File: ZehywsFIw6zmSabJPOURntRxi2o.roa (raw, json) Hash identifier: Z54sJab0NzRMzbhXOSvnBEqROWZ+D/M0wqcoEfAbg04= Subject key identifier: 65:E8:72:C2:C1:48:C3:AC:E6:49:A6:C9:3C:E5:11:9E:D4:71:8B:6A Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Certificate serial: 019A7390C09AFA30D61FC4282C484CF2FD69 Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/ZehywsFIw6zmSabJPOURntRxi2o.roa Signing time: Tue 11 Nov 2025 15:37:37 +0000 ROA not before: Tue 11 Nov 2025 15:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203244 IP address blocks: 45.80.85.0/24 maxlen: 24 45.80.86.0/24 maxlen: 24 45.80.87.0/24 maxlen: 24 177.8.68.0/24 maxlen: 24 185.140.216.0/22 maxlen: 24 185.246.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:90:c0:9a:fa:30:d6:1f:c4:28:2c:48:4c:f2:fd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a Validity Not Before: Nov 11 15:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65e872c2c148c3ace649a6c93ce5119ed4718b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:36:19:d3:3c:d7:28:fe:94:d2:e7:a7:7e: bd:1d:08:4f:93:15:c6:53:e6:dc:45:0f:33:52:cf: ba:1b:17:95:46:d7:43:59:a6:95:b4:6c:57:77:86: 1f:67:e6:96:5e:67:e5:f9:9f:12:32:ce:99:d9:96: cc:ff:9b:18:73:96:a3:45:8f:1f:60:2a:c4:be:e7: ef:a2:f1:03:be:e2:96:f9:77:e1:8d:9a:8c:30:8f: a7:c7:5c:70:ed:95:50:83:de:3d:d6:2d:c5:d2:5d: 25:10:ad:84:f9:ab:05:dd:5f:d0:bd:d4:21:fd:9d: 24:d4:fa:49:81:63:5d:8f:3f:2d:21:68:5f:5c:fc: a3:4e:f3:42:3e:2e:11:e7:93:dd:94:ac:a1:cf:d9: e3:e8:07:fa:12:25:7f:1b:ce:bc:d7:27:99:6b:df: 9d:5a:eb:f1:5a:42:ed:d1:99:5c:d1:88:ab:63:62: 18:26:f2:af:0f:e5:eb:81:86:db:40:b5:d4:e1:84: 13:6f:87:70:23:ac:2d:85:08:8d:d9:79:31:04:bd: 80:7f:07:9f:e4:0c:37:c6:a9:12:f8:16:08:2e:82: 63:e6:5c:af:fe:34:59:5c:66:78:c7:d9:6d:ad:24: d9:65:62:f2:e1:9c:08:00:96:95:fb:27:1e:0c:51: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E8:72:C2:C1:48:C3:AC:E6:49:A6:C9:3C:E5:11:9E:D4:71:8B:6A X509v3 Authority Key Identifier: keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/ZehywsFIw6zmSabJPOURntRxi2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.85.0-45.80.87.255 177.8.68.0/24 185.140.216.0/22 185.246.196.0/22 Signature Algorithm: sha256WithRSAEncryption 03:88:df:15:af:b4:5a:a5:e7:35:4f:7f:b4:0d:43:ca:52:01: 6b:45:79:10:d6:d3:99:73:fe:5a:8c:08:9f:f8:55:05:24:f8: e9:57:d8:32:22:a5:56:7e:fa:c5:e9:90:91:ce:58:46:74:fc: 56:5a:26:0c:ec:13:12:1a:84:d5:be:17:ae:c8:2d:98:f0:fc: e4:8f:5e:ec:a3:b9:e5:99:c2:06:21:5e:96:6a:9c:0f:82:4a: f6:08:7e:f7:04:b1:e8:4a:ae:9d:a1:05:4e:82:7e:8f:49:39: 21:53:6a:f3:ff:07:ff:43:d6:b9:56:7a:78:82:63:05:e6:6e: a9:df:51:77:fa:23:50:98:54:dd:70:c3:da:d4:0d:3b:ee:75: dc:47:a2:56:6d:7b:db:11:63:db:df:7b:4b:a6:6d:00:47:14: 95:1a:15:11:c7:fc:ff:da:e9:cf:43:fc:ca:d7:6c:55:40:a2: b3:b9:40:3c:5e:9c:3a:84:68:4e:22:16:f0:aa:27:03:11:c2: 50:aa:e6:55:7b:9a:c5:b5:76:7f:56:9f:ff:19:3e:36:48:e8: ae:23:1a:33:07:a3:66:29:eb:cd:de:85:21:2f:f2:7c:41:58: d3:48:27:5b:ec:88:85:69:64:54:d2:7e:0f:5b:63:02:51:0e: 2b:76:ee:be -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZpzkMCa+jDWH8QoLEhM8v1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjZiMTdiZDJlNWYxNGJkMzc1YTBjMGU2OWRmYzc3ZDk3 MDJmNGEwHhcNMjUxMTExMTUzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWU4NzJjMmMxNDhjM2FjZTY0OWE2YzkzY2U1MTE5ZWQ0NzE4YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovA2GdM81yj+lNLnp369HQhPkxXG U+bcRQ8zUs+6GxeVRtdDWaaVtGxXd4YfZ+aWXmfl+Z8SMs6Z2ZbM/5sYc5ajRY8f YCrEvufvovEDvuKW+XfhjZqMMI+nx1xw7ZVQg9491i3F0l0lEK2E+asF3V/QvdQh /Z0k1PpJgWNdjz8tIWhfXPyjTvNCPi4R55PdlKyhz9nj6Af6EiV/G8681yeZa9+d WuvxWkLt0Zlc0YirY2IYJvKvD+XrgYbbQLXU4YQTb4dwI6wthQiN2XkxBL2Afwef 5Aw3xqkS+BYILoJj5lyv/jRZXGZ4x9ltrSTZZWLy4ZwIAJaV+yceDFHG+QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFGXocsLBSMOs5kmmyTzlEZ7UcYtqMB8GA1UdIwQY MBaAFPy2sXvS5fFL03WgwOad/HfZcC9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWIt MmM0OGNiMjk4NjQ2LzEvWmVoeXdzRkl3NnptU2FiSlBPVVJudFJ4aTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wMWE0MjEtYmRiZi00M2UwLThhZWItMmM0OGNiMjk4NjQ2 LzEvX0xheGU5TGw4VXZUZGFEQTVwMzhkOWx3TDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAtUFUD BAMtUFADBACxCEQDBAK5jNgDBAK59sQwDQYJKoZIhvcNAQELBQADggEBAAOI3xWv tFql5zVPf7QNQ8pSAWtFeRDW05lz/lqMCJ/4VQUk+OlX2DIipVZ++sXpkJHOWEZ0 /FZaJgzsExIahNW+F67ILZjw/OSPXuyjueWZwgYhXpZqnA+CSvYIfvcEsehKrp2h BU6Cfo9JOSFTavP/B/9D1rlWeniCYwXmbqnfUXf6I1CYVN1ww9rUDTvuddxHolZt e9sRY9vfe0umbQBHFJUaFRHH/P/a6c9D/MrXbFVAorO5QDxenDqEaE4iFvCqJwMR wlCq5lV7msW1dn9Wn/8ZPjZI6K4jGjMHo2Yp683ehSEv8nxBWNNIJ1vsiIVpZFTS fg9bYwJRDit27r4= -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:45 2025 by rpki-client