This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ZGnbqEJq-qw_IWPEKqawYAsKEw4.roa File: ZGnbqEJq-qw_IWPEKqawYAsKEw4.roa (raw, json) Hash identifier: SDtzm6VK9bckNeNEdZhn8jsHEtoYJ95MVTF5jrFtBQc= Subject key identifier: 64:69:DB:A8:42:6A:FA:AC:3F:21:63:C4:2A:A6:B0:60:0B:0A:13:0E Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019A8FD5FFDBE437A69AAF7D9AA41B2CE639 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ZGnbqEJq-qw_IWPEKqawYAsKEw4.roa Signing time: Mon 17 Nov 2025 03:22:37 +0000 ROA not before: Mon 17 Nov 2025 03:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 78.108.59.0/24 maxlen: 24 78.108.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8f:d5:ff:db:e4:37:a6:9a:af:7d:9a:a4:1b:2c:e6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Nov 17 03:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6469dba8426afaac3f2163c42aa6b0600b0a130e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:f4:e2:e4:f5:4e:6e:88:2a:25:11:8a:f7: 65:cf:05:2e:c9:c2:72:a0:39:cd:ef:6e:7e:94:8f: f9:32:d2:1e:f3:49:65:e5:45:4c:5d:07:63:73:26: 7a:4a:aa:7e:83:69:9c:a5:11:06:d9:45:0a:57:82: 32:28:d2:b0:e1:d0:6f:27:0a:48:ac:bc:13:fa:35: 79:e0:22:35:a2:52:ca:77:02:6c:d2:37:0f:31:ec: b6:8f:07:98:ca:25:b6:a7:94:9f:e9:0f:e3:be:c6: 8f:53:1e:bd:f1:9f:b1:70:3d:94:c3:f6:3c:9a:5b: e8:14:d9:b5:59:21:81:b2:98:d5:5a:4f:29:2e:5d: 4a:1d:6e:0f:48:a0:1a:5a:1b:0c:e1:86:f8:e5:6c: 12:15:05:b8:43:a3:d3:0b:4a:36:3f:82:34:27:81: 27:e3:7d:a8:1c:02:36:f6:41:33:4d:f3:79:97:77: 38:07:49:6e:5c:39:2a:2f:ca:84:21:e2:44:aa:ce: a1:24:bb:bf:9a:56:27:4d:9b:80:21:8a:7e:63:aa: a5:d7:c0:c5:bc:06:39:93:b4:ec:e2:a8:cc:44:28: f6:68:77:9b:94:48:fe:af:c5:80:1e:b0:7d:48:80: 43:78:51:3d:1f:e3:22:99:9d:2a:4a:33:dd:bc:f8: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:69:DB:A8:42:6A:FA:AC:3F:21:63:C4:2A:A6:B0:60:0B:0A:13:0E X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ZGnbqEJq-qw_IWPEKqawYAsKEw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.59.0-78.108.63.255 Signature Algorithm: sha256WithRSAEncryption d3:45:7d:4c:98:16:fa:a6:1d:a4:14:f2:11:31:91:0d:b1:4e: 13:1b:4e:6b:c9:8e:19:90:dc:25:14:8f:8c:1e:3f:39:73:a3: 30:60:30:f2:a3:2b:ce:a4:31:16:e1:72:00:52:b8:06:de:da: 23:a7:51:85:a3:bc:76:8b:dc:61:95:72:f3:96:e7:0d:e3:8d: 47:6a:0c:58:e1:5e:d2:71:4d:85:4b:15:ce:cd:89:ae:00:d1: d0:29:9d:e5:9f:08:20:37:78:a5:9a:fc:32:9a:85:dc:88:f6: a4:05:9f:cd:5c:84:d1:d5:6f:9d:3a:70:0c:9e:76:3f:94:f7: e7:b8:a5:22:0f:94:88:8d:7e:1f:9d:db:3e:03:95:9c:dd:7d: 94:c0:94:bf:a0:73:73:f6:59:06:c1:d7:1a:66:03:82:92:7c: 10:50:18:fc:c8:14:79:90:ea:4c:66:a1:f5:9d:4e:6d:e4:35: fc:9e:1b:34:ab:a2:95:9c:93:cb:03:e4:b2:b6:16:c7:a8:e3: 4e:ac:46:47:71:75:4d:b6:30:a4:7a:fe:57:56:b6:fb:c8:40: 68:61:e2:e9:b4:4f:74:ed:e0:1c:a4:c8:4c:14:e2:3f:29:d5: bb:23:3f:fd:f7:fb:49:04:86:e1:3c:ca:24:2e:a9:0a:58:c7: 06:ea:47:ac -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqP1f/b5Demmq99mqQbLOY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjUxMTE3MDMyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDY5ZGJhODQyNmFmYWFjM2YyMTYzYzQyYWE2YjA2MDBiMGExMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/04uT1Tm6IKiURivdlzwUuycJy oDnN725+lI/5MtIe80ll5UVMXQdjcyZ6Sqp+g2mcpREG2UUKV4IyKNKw4dBvJwpI rLwT+jV54CI1olLKdwJs0jcPMey2jweYyiW2p5Sf6Q/jvsaPUx698Z+xcD2Uw/Y8 mlvoFNm1WSGBspjVWk8pLl1KHW4PSKAaWhsM4Yb45WwSFQW4Q6PTC0o2P4I0J4En 432oHAI29kEzTfN5l3c4B0luXDkqL8qEIeJEqs6hJLu/mlYnTZuAIYp+Y6ql18DF vAY5k7Ts4qjMRCj2aHeblEj+r8WAHrB9SIBDeFE9H+MimZ0qSjPdvPh+CQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGRp26hCavqsPyFjxCqmsGALChMOMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvWkduYnFFSnEtcXdfSVdQRUtxYXdZQXNLRXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABObDsD BAZObAAwDQYJKoZIhvcNAQELBQADggEBANNFfUyYFvqmHaQU8hExkQ2xThMbTmvJ jhmQ3CUUj4wePzlzozBgMPKjK86kMRbhcgBSuAbe2iOnUYWjvHaL3GGVcvOW5w3j jUdqDFjhXtJxTYVLFc7Nia4A0dApneWfCCA3eKWa/DKahdyI9qQFn81chNHVb506 cAyedj+U9+e4pSIPlIiNfh+d2z4DlZzdfZTAlL+gc3P2WQbB1xpmA4KSfBBQGPzI FHmQ6kxmofWdTm3kNfyeGzSropWck8sD5LK2Fseo406sRkdxdU22MKR6/ldWtvvI QGhh4um0T3Tt4BykyEwU4j8p1bsjP/33+0kEhuE8yiQuqQpYxwbqR6w= -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:42 2025 by rpki-client