This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/z_tXbjwTybgsIu8gcHGw6c-3LCI.roa File: z_tXbjwTybgsIu8gcHGw6c-3LCI.roa (raw, json) Hash identifier: +h48Ej53f4z6jTARf/DyDynXjuIZO6RWwEf4zGYnud4= Subject key identifier: CF:FB:57:6E:3C:13:C9:B8:2C:22:EF:20:70:71:B0:E9:CF:B7:2C:22 Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880 Certificate serial: 019AD91B16BF1666478AB8EA47424B70AFB8 Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/z_tXbjwTybgsIu8gcHGw6c-3LCI.roa Signing time: Mon 01 Dec 2025 08:50:22 +0000 ROA not before: Mon 01 Dec 2025 08:50:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211644 IP address blocks: 185.252.192.0/24 maxlen: 24 2a10:b0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:1b:16:bf:16:66:47:8a:b8:ea:47:42:4b:70:af:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880 Validity Not Before: Dec 1 08:50:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cffb576e3c13c9b82c22ef207071b0e9cfb72c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:ec:17:44:38:aa:2e:da:36:ce:28:68:68: b0:9c:7a:86:e6:dd:1c:83:98:2a:c3:fa:2b:65:6e: 91:b5:ce:25:0e:5c:f6:8a:4b:8d:61:fd:1f:d9:cb: ac:65:8c:f1:cd:db:5c:bc:45:70:37:4a:74:df:20: 28:6f:45:f3:2f:c6:f5:17:c2:59:80:06:4e:56:ad: 93:04:02:50:a2:52:02:ed:c4:68:c8:05:d8:f3:c7: ce:48:91:a5:4b:04:22:90:59:06:53:b9:8c:7e:4f: dd:a7:0d:86:f4:a2:76:c9:aa:48:0c:b1:ba:6c:2a: 9b:03:e7:ab:8c:e7:5b:6e:d8:48:f6:19:7f:e7:c4: d5:90:be:81:9c:86:37:55:00:78:50:b4:8f:52:d9: 5f:52:19:63:68:6c:c5:0a:35:fe:00:44:37:6a:d1: 7f:31:c2:cb:37:2a:45:fd:41:e9:93:14:3c:84:c1: fd:3c:69:07:c5:02:db:ba:c0:6b:8a:82:02:62:5c: 5d:6a:53:99:bf:40:b5:77:5e:aa:18:05:ec:d6:8b: 43:15:ed:9c:3c:8a:77:7b:ad:88:73:84:ed:77:d0: 3d:64:d8:c1:23:8a:48:b7:c6:49:43:ea:f1:60:7b: 85:09:92:df:7e:8b:2d:df:d9:47:ab:34:0f:c0:3b: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FB:57:6E:3C:13:C9:B8:2C:22:EF:20:70:71:B0:E9:CF:B7:2C:22 X509v3 Authority Key Identifier: keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/z_tXbjwTybgsIu8gcHGw6c-3LCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.192.0/24 IPv6: 2a10:b0c0::/32 Signature Algorithm: sha256WithRSAEncryption 46:53:59:1f:fe:8b:8f:0a:34:0c:61:2f:a4:df:19:1f:8b:d1: d8:60:0b:3c:cb:4d:99:77:0e:d5:98:0e:c2:b2:98:c3:3c:46: e4:f1:d1:d0:38:ee:b5:fb:e0:64:bd:58:84:6d:84:9b:54:33: 91:59:3e:1d:c7:c9:9d:1b:d1:13:b6:e1:2e:c1:4f:7e:54:26: 3a:50:93:63:15:7c:85:3e:a3:27:99:53:c0:32:e5:42:18:d0: 40:a4:5c:da:f0:7f:27:8c:8e:2a:f8:6a:4f:54:66:bc:93:9f: 1f:57:66:b3:ee:46:af:d8:f7:ce:0d:ae:00:c6:ee:1a:1b:83: 42:2b:cf:60:a0:4c:97:81:33:06:9f:25:e4:7a:75:d3:eb:90: 07:a0:c7:88:d7:3f:f2:bc:27:f3:dc:15:5c:e6:95:57:82:a7: 75:f1:63:c8:51:18:e2:06:c0:71:6c:0f:aa:dd:93:ff:8f:d2: bc:51:4c:a1:f1:11:5f:d6:56:c3:af:db:b4:74:9f:79:21:c6: 43:28:50:e8:b2:7b:e2:c4:ea:fe:a6:87:db:a8:be:23:c2:5c: 41:13:cf:78:06:74:c1:c3:32:b4:92:69:a6:eb:8a:84:99:72: 37:b5:0c:5b:ca:f3:4f:18:f1:3d:9b:e2:aa:80:50:b8:4d:20: 04:e3:24:f8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrZGxa/FmZHirjqR0JLcK+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZGEwMDY2MTIyZTZiYTI5NGQyYjc0NzkzOGQ0NmM3NGU5 OWY4ODAwHhcNMjUxMjAxMDg1MDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmZiNTc2ZTNjMTNjOWI4MmMyMmVmMjA3MDcxYjBlOWNmYjcyYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8XsF0Q4qi7aNs4oaGiwnHqG5t0c g5gqw/orZW6Rtc4lDlz2ikuNYf0f2cusZYzxzdtcvEVwN0p03yAob0XzL8b1F8JZ gAZOVq2TBAJQolIC7cRoyAXY88fOSJGlSwQikFkGU7mMfk/dpw2G9KJ2yapIDLG6 bCqbA+erjOdbbthI9hl/58TVkL6BnIY3VQB4ULSPUtlfUhljaGzFCjX+AEQ3atF/ McLLNypF/UHpkxQ8hMH9PGkHxQLbusBrioICYlxdalOZv0C1d16qGAXs1otDFe2c PIp3e62Ic4Ttd9A9ZNjBI4pIt8ZJQ+rxYHuFCZLffost39lHqzQPwDsDnQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM/7V248E8m4LCLvIHBxsOnPtywiMB8GA1UdIwQY MBaAFFHaAGYSLmuilNK3R5ONRsdOmfiAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2It YmU0OGI3OTI1NDc4LzEvel90WGJqd1R5YmdzSXU4Z2NIR3c2Yy0zTENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mNjRlYjQtMjZjYy00MDU2LTg1M2ItYmU0OGI3OTI1NDc4 LzEvVWRvQVpoSXVhNktVMHJkSGs0MUd4MDZaLUlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufzAMA0E AgACMAcDBQAqELDAMA0GCSqGSIb3DQEBCwUAA4IBAQBGU1kf/ouPCjQMYS+k3xkf i9HYYAs8y02Zdw7VmA7CspjDPEbk8dHQOO61++BkvViEbYSbVDORWT4dx8mdG9ET tuEuwU9+VCY6UJNjFXyFPqMnmVPAMuVCGNBApFza8H8njI4q+GpPVGa8k58fV2az 7kav2PfODa4Axu4aG4NCK89goEyXgTMGnyXkenXT65AHoMeI1z/yvCfz3BVc5pVX gqd18WPIURjiBsBxbA+q3ZP/j9K8UUyh8RFf1lbDr9u0dJ95IcZDKFDosnvixOr+ pofbqL4jwlxBE894BnTBwzK0kmmm64qEmXI3tQxbyvNPGPE9m+KqgFC4TSAE4yT4 -----END CERTIFICATE-----Generated at Sun Dec 7 05:56:47 2025 by rpki-client