This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZS85Vncyrn1Z9OynbzGvwoVD5KQ.roa File: ZS85Vncyrn1Z9OynbzGvwoVD5KQ.roa (raw, json) Hash identifier: XYRrdatZKQhp5IHGQ9CPoHMOF9O2tgPDGyAOTXCg9RM= Subject key identifier: 65:2F:39:56:77:32:AE:7D:59:F4:EC:A7:6F:31:AF:C2:85:43:E4:A4 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019ADB2CA90EDF890F896264585E17D6338C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZS85Vncyrn1Z9OynbzGvwoVD5KQ.roa Signing time: Mon 01 Dec 2025 18:28:48 +0000 ROA not before: Mon 01 Dec 2025 18:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395954 IP address blocks: 45.145.58.0/24 maxlen: 24 45.147.100.0/24 maxlen: 24 45.147.101.0/24 maxlen: 24 45.147.102.0/24 maxlen: 24 45.147.103.0/24 maxlen: 24 45.152.201.0/24 maxlen: 24 45.155.200.0/24 maxlen: 24 45.155.201.0/24 maxlen: 24 45.155.202.0/24 maxlen: 24 45.155.203.0/24 maxlen: 24 193.8.8.0/24 maxlen: 24 194.41.56.0/24 maxlen: 24 2a0e:c782::/32 maxlen: 32 2a0f:e1c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:2c:a9:0e:df:89:0f:89:62:64:58:5e:17:d6:33:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Dec 1 18:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=652f39567732ae7d59f4eca76f31afc28543e4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:d5:2a:8d:86:a2:cb:69:d3:08:42:63:ae: f4:2d:1b:87:d0:44:97:77:4e:4c:c8:5f:39:79:44: 92:2f:f5:8b:3f:e6:7d:9d:a2:39:a4:43:2f:ee:4c: 28:87:ab:00:11:d8:c7:de:62:0b:75:4d:5e:3e:8b: 54:b9:14:16:08:ee:57:99:a7:f1:59:ee:58:f5:28: 12:fe:ba:e1:25:73:f3:7a:6b:e7:87:c0:a9:58:cd: b4:d0:01:e5:33:b1:d8:0e:03:93:ea:92:df:c9:f3: de:18:8b:c8:46:81:e8:be:2a:2d:28:4b:a3:83:d8: 07:f4:70:ee:c5:3c:a3:f1:29:d9:d5:25:0b:ce:d8: 86:90:12:10:34:2d:3b:7a:57:a8:c6:ab:84:f9:dc: 14:5e:e8:2e:e8:9e:a5:99:6b:3d:eb:f4:13:6c:23: ca:10:81:37:91:17:fa:ec:04:93:1a:4b:6a:24:67: 08:3b:80:43:ef:be:a4:b7:0a:1a:c6:ba:c1:0b:45: d5:30:3a:cf:a0:4e:1b:04:fb:5b:cf:17:a8:37:fd: 81:3b:51:85:3b:fb:36:3c:d7:1d:66:55:b6:97:09: fa:e6:9e:7a:3b:ea:bd:fa:ee:b6:db:89:db:01:80: 28:d2:ed:5f:e7:64:80:6e:bb:fb:0e:f5:51:c0:d1: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2F:39:56:77:32:AE:7D:59:F4:EC:A7:6F:31:AF:C2:85:43:E4:A4 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZS85Vncyrn1Z9OynbzGvwoVD5KQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.58.0/24 45.147.100.0/22 45.152.201.0/24 45.155.200.0/22 193.8.8.0/24 194.41.56.0/24 IPv6: 2a0e:c782::/32 2a0f:e1c5::/32 Signature Algorithm: sha256WithRSAEncryption 29:19:ed:20:dc:4d:7b:2a:6a:a5:8e:12:e9:15:f2:db:05:a8: ba:36:74:a1:24:16:67:ec:5d:95:b3:7b:08:13:a6:c4:68:ef: 3d:99:67:6a:75:90:43:cb:a8:18:14:63:a8:26:fa:44:08:8c: 13:89:8b:06:e4:5a:e0:ab:08:d4:65:79:8b:5a:6f:ee:82:70: 39:b6:69:9a:6e:4c:59:75:cb:f3:01:17:81:81:04:a3:1a:48: 89:ea:4d:58:b6:c7:02:3a:1b:c6:12:23:56:77:7f:3b:52:cb: 84:78:e7:98:3a:97:3f:e4:18:ba:c5:06:28:2e:4b:31:65:d8: ff:6f:41:5d:17:ba:94:d2:9b:47:c2:19:59:6b:43:b9:66:82: 9d:da:bb:53:87:23:67:87:0a:27:5a:9a:b0:7e:e0:ee:c9:42: 45:80:31:e1:21:76:09:7e:57:52:f3:9c:7d:24:43:06:87:1f: b5:b4:67:5d:25:e2:e4:43:3f:56:16:29:58:76:69:44:50:cb: 67:fb:fe:fd:24:af:48:5a:e8:33:44:21:42:ae:e8:b8:af:38: f9:0b:e8:b2:ec:55:c7:8c:f0:49:ae:1d:e4:c5:84:7a:78:40: 94:e4:3b:b8:bc:11:45:42:de:3c:65:73:d9:c9:9e:20:fc:f1: e1:05:e4:86 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZrbLKkO34kPiWJkWF4X1jOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMjAxMTgyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTJmMzk1Njc3MzJhZTdkNTlmNGVjYTc2ZjMxYWZjMjg1NDNlNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0/VKo2Gostp0whCY670LRuH0ESX d05MyF85eUSSL/WLP+Z9naI5pEMv7kwoh6sAEdjH3mILdU1ePotUuRQWCO5Xmafx We5Y9SgS/rrhJXPzemvnh8CpWM200AHlM7HYDgOT6pLfyfPeGIvIRoHoviotKEuj g9gH9HDuxTyj8SnZ1SULztiGkBIQNC07eleoxquE+dwUXugu6J6lmWs96/QTbCPK EIE3kRf67ASTGktqJGcIO4BD776ktwoaxrrBC0XVMDrPoE4bBPtbzxeoN/2BO1GF O/s2PNcdZlW2lwn65p56O+q9+u6224nbAYAo0u1f52SAbrv7DvVRwNFq7wIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFGUvOVZ3Mq59WfTsp28xr8KFQ+SkMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvWlM4NVZuY3lybjFaOU95bmJ6R3Z3b1ZENUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQALZE6AwQC LZNkAwQALZjJAwQCLZvIAwQAwQgIAwQAwik4MBQEAgACMA4DBQAqDseCAwUAKg/h xTANBgkqhkiG9w0BAQsFAAOCAQEAKRntINxNeypqpY4S6RXy2wWoujZ0oSQWZ+xd lbN7CBOmxGjvPZlnanWQQ8uoGBRjqCb6RAiME4mLBuRa4KsI1GV5i1pv7oJwObZp mm5MWXXL8wEXgYEEoxpIiepNWLbHAjobxhIjVnd/O1LLhHjnmDqXP+QYusUGKC5L MWXY/29BXRe6lNKbR8IZWWtDuWaCndq7U4cjZ4cKJ1qasH7g7slCRYAx4SF2CX5X UvOcfSRDBocftbRnXSXi5EM/VhYpWHZpRFDLZ/v+/SSvSFroM0QhQq7ouK84+Qvo suxVx4zwSa4d5MWEenhAlOQ7uLwRRULePGVz2cmeIPzx4QXkhg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:29:59 2025 by rpki-client