This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/ZSFecb5m7-Uo29szadbrmtN6IgA.roa File: ZSFecb5m7-Uo29szadbrmtN6IgA.roa (raw, json) Hash identifier: JpRnQHYlzNbpcuUtllWhr9SiuI0ih37zok5GOb1RqnA= Subject key identifier: 65:21:5E:71:BE:66:EF:E5:28:DB:DB:33:69:D6:EB:9A:D3:7A:22:00 Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019AE4C8FF12B52BFDD71DF62734C3E831BA Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/ZSFecb5m7-Uo29szadbrmtN6IgA.roa Signing time: Wed 03 Dec 2025 15:16:09 +0000 ROA not before: Wed 03 Dec 2025 15:16:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208002 IP address blocks: 185.137.212.0/24 maxlen: 24 185.137.213.0/24 maxlen: 24 185.137.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:c8:ff:12:b5:2b:fd:d7:1d:f6:27:34:c3:e8:31:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Dec 3 15:16:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65215e71be66efe528dbdb3369d6eb9ad37a2200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:53:43:6e:1b:8e:a3:79:65:59:98:ca:0b:ee: a5:01:3a:cf:ce:4c:6a:b3:71:07:82:b9:14:71:b3: 8a:80:07:cd:6f:41:35:48:93:56:1c:de:04:8a:0c: 18:a1:d8:4a:e9:3d:3f:da:a1:e6:e9:15:1c:84:68: 1d:1f:f0:4e:f1:93:1d:ec:d2:c1:ab:af:03:1e:a2: db:75:06:a8:62:16:2c:1d:90:44:27:6a:4e:b1:b2: 39:4a:14:1a:8e:ac:1e:f5:74:6d:71:cc:d0:66:96: 92:f3:53:ef:b0:fe:94:01:00:f2:48:8e:8b:8d:dc: 39:c6:00:41:c0:9f:56:74:85:e1:c0:52:b2:c7:e7: 63:7f:cc:21:92:43:bf:b5:d5:d6:d9:c4:13:63:c5: 19:d2:fa:76:2c:9e:05:e5:f3:e6:3c:6c:5e:d3:ac: d6:64:84:17:9c:a1:4d:f3:8c:d6:79:15:f2:4f:5a: e2:0e:ed:af:40:5a:29:20:e8:f6:ea:61:7a:6f:cb: 85:c5:f0:76:b6:92:89:eb:4e:dc:5f:21:5d:8d:19: 4c:86:6a:6a:e1:03:c2:92:c0:ad:65:f3:de:8d:07: 8c:c3:5b:76:12:aa:18:64:fc:8d:dd:24:7c:5f:33: bb:a8:71:0b:3d:f9:4b:9e:ce:56:52:ed:ff:3c:b9: 9f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:5E:71:BE:66:EF:E5:28:DB:DB:33:69:D6:EB:9A:D3:7A:22:00 X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/ZSFecb5m7-Uo29szadbrmtN6IgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.212.0-185.137.214.255 Signature Algorithm: sha256WithRSAEncryption 10:f9:cb:6d:0b:79:90:f1:6d:bc:1b:22:e6:e8:57:1e:1d:ee: 3e:00:19:8f:15:de:75:6d:2a:cd:21:16:17:03:64:4a:e1:6b: 4e:fc:bd:c4:60:a9:1b:93:51:a6:32:00:42:9b:9b:78:9e:6a: b0:f3:e9:87:1d:a9:f0:30:5f:68:b9:21:d6:93:f4:3d:65:66: bb:d5:16:0f:bf:de:01:1d:7e:3f:3c:6a:d6:1d:e8:5a:14:0a: f8:45:34:b7:6f:27:98:9d:52:4b:52:dc:d7:94:4e:b5:29:ad: e5:c2:99:80:67:a1:63:4d:dd:0a:78:f0:88:2f:b6:28:30:fc: b2:13:06:d0:90:4e:b9:ee:e2:89:59:63:74:31:85:05:3f:1b: 6a:86:70:1c:45:ed:8e:a6:f7:7a:8f:b2:b9:c0:db:13:a0:9a: 5c:f4:bc:14:bd:fb:47:a6:fd:06:83:89:6a:11:01:65:32:0e: aa:61:b7:6f:9c:73:50:e5:a6:42:00:98:0e:05:b1:81:4f:b8: 69:23:9d:cc:21:47:46:6e:e8:b2:43:1c:e7:2b:78:c6:44:c8: 50:34:20:f7:85:1d:21:6d:bf:76:4c:7e:1f:e4:6e:4b:2a:c1: a8:a0:f7:fe:41:4a:cd:e6:b5:f0:ca:03:f0:fd:68:b7:e1:36: cc:c6:a7:46 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrkyP8StSv91x32JzTD6DG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjUxMjAzMTUxNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTIxNWU3MWJlNjZlZmU1MjhkYmRiMzM2OWQ2ZWI5YWQzN2EyMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lNDbhuOo3llWZjKC+6lATrPzkxq s3EHgrkUcbOKgAfNb0E1SJNWHN4EigwYodhK6T0/2qHm6RUchGgdH/BO8ZMd7NLB q68DHqLbdQaoYhYsHZBEJ2pOsbI5ShQajqwe9XRtcczQZpaS81PvsP6UAQDySI6L jdw5xgBBwJ9WdIXhwFKyx+djf8whkkO/tdXW2cQTY8UZ0vp2LJ4F5fPmPGxe06zW ZIQXnKFN84zWeRXyT1riDu2vQFopIOj26mF6b8uFxfB2tpKJ607cXyFdjRlMhmpq 4QPCksCtZfPejQeMw1t2EqoYZPyN3SR8XzO7qHELPflLns5WUu3/PLmfKQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGUhXnG+Zu/lKNvbM2nW65rTeiIAMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEvWlNGZWNiNW03LVVvMjlzemFkYnJtdE42SWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5idQD BAC5idYwDQYJKoZIhvcNAQELBQADggEBABD5y20LeZDxbbwbIuboVx4d7j4AGY8V 3nVtKs0hFhcDZErha078vcRgqRuTUaYyAEKbm3iearDz6YcdqfAwX2i5IdaT9D1l ZrvVFg+/3gEdfj88atYd6FoUCvhFNLdvJ5idUktS3NeUTrUpreXCmYBnoWNN3Qp4 8Igvtigw/LITBtCQTrnu4olZY3QxhQU/G2qGcBxF7Y6m93qPsrnA2xOgmlz0vBS9 +0em/QaDiWoRAWUyDqpht2+cc1DlpkIAmA4FsYFPuGkjncwhR0Zu6LJDHOcreMZE yFA0IPeFHSFtv3ZMfh/kbksqwaig9/5BSs3mtfDKA/D9aLfhNszGp0Y= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:24 2025 by rpki-client