This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/zMR6QVCY7XDu7CjlFF2Zc2HvYX8.roa File: zMR6QVCY7XDu7CjlFF2Zc2HvYX8.roa (raw, json) Hash identifier: H+/kniid9OfMhYsVomtjxQTvfv/uf2k0o/IUWQqiT1w= Subject key identifier: CC:C4:7A:41:50:98:ED:70:EE:EC:28:E5:14:5D:99:73:61:EF:61:7F Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Certificate serial: 019ACA35662616095D0F43C59603C01BA372 Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/zMR6QVCY7XDu7CjlFF2Zc2HvYX8.roa Signing time: Fri 28 Nov 2025 11:24:48 +0000 ROA not before: Fri 28 Nov 2025 11:24:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205219 IP address blocks: 188.65.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:35:66:26:16:09:5d:0f:43:c5:96:03:c0:1b:a3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Validity Not Before: Nov 28 11:24:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ccc47a415098ed70eeec28e5145d997361ef617f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:2c:5a:1c:37:d3:15:af:8b:66:aa:b4:e1: 24:bb:4a:44:c1:7a:21:bd:6b:ff:99:dc:4e:11:f7: 28:05:cd:05:1f:71:6f:cd:72:ef:82:40:2d:23:ea: a8:9b:6a:74:60:96:2a:1b:e9:f8:c5:6a:57:0f:10: 72:50:43:f1:55:84:78:78:c8:7d:c3:57:45:0a:6e: d8:93:55:ea:9c:33:e2:58:d3:53:26:a7:3b:4f:75: 44:5a:67:78:d1:7c:cc:51:e7:e2:f3:3f:77:85:36: 20:92:79:3b:d4:d7:d0:df:8d:66:31:a0:b2:ff:8d: 66:29:88:30:15:1e:d5:64:47:f6:31:d2:2d:31:01: ae:a4:f9:87:b8:95:89:6b:93:16:72:08:4a:91:f8: d7:17:0f:21:ce:93:b0:6a:7e:0b:72:b2:05:cf:af: 96:25:06:37:b7:f0:cb:22:65:19:ce:d0:db:34:9b: ad:49:6e:8f:c3:bf:c3:af:41:2f:10:7a:43:0b:6e: c3:c1:67:6a:0d:11:84:77:8b:21:4f:6e:83:f1:41: ee:cf:ec:37:fb:90:79:5c:64:35:0e:01:8b:4d:42: 19:70:16:3d:45:2a:bd:4c:dd:45:ce:7d:17:06:26: 9f:42:6c:80:f6:20:4d:4c:b8:1f:3d:97:1f:fd:c9: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C4:7A:41:50:98:ED:70:EE:EC:28:E5:14:5D:99:73:61:EF:61:7F X509v3 Authority Key Identifier: keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/zMR6QVCY7XDu7CjlFF2Zc2HvYX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.65.82.0/24 Signature Algorithm: sha256WithRSAEncryption 32:1f:88:2a:fb:ae:df:ec:5c:89:70:ad:37:cc:06:61:3e:24: a0:32:32:09:8c:02:46:1c:8a:60:d3:a7:a2:1d:8d:08:67:85: 76:27:83:9a:19:90:f8:b9:27:7a:35:3b:13:da:5d:3b:46:81: cc:19:b1:fa:31:9f:e1:d3:ee:58:04:a6:54:da:ff:3e:9c:d1: 29:96:6d:15:76:cf:d7:d0:74:fd:aa:9d:db:d4:53:f0:9b:13: 0e:d9:9f:7c:5e:d7:2a:1a:f5:e6:bc:2b:97:d8:0a:2b:05:87: 38:80:a3:12:02:2b:6c:7c:6a:c4:7a:82:9b:9c:fa:6c:38:39: 7e:eb:c7:d4:e5:e6:29:e1:44:97:71:3c:d3:d0:e7:60:fb:07: 9a:ad:0e:d7:26:0e:e4:e4:9e:2b:34:e0:af:71:a6:2a:2c:5b: a8:f3:03:54:a2:07:d6:28:95:d0:6a:a2:57:d9:2a:47:00:56: 25:e9:b5:06:c1:5e:f7:af:81:ac:cf:29:0f:7c:c3:27:68:53: 2a:4b:53:bf:b2:20:d4:b7:1b:44:4b:c6:48:48:6d:34:f1:f9: 75:d1:ad:e3:7c:20:22:6c:2d:08:16:35:8d:f3:f0:d5:62:a1: 1d:f7:37:62:98:63:73:8f:b3:9a:a5:0b:5e:77:4a:34:a0:90: e2:8a:3b:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrKNWYmFgldD0PFlgPAG6NyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj ZTBhNzkwHhcNMjUxMTI4MTEyNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2M0N2E0MTUwOThlZDcwZWVlYzI4ZTUxNDVkOTk3MzYxZWY2MTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCosWhw30xWvi2aqtOEku0pEwXoh vWv/mdxOEfcoBc0FH3FvzXLvgkAtI+qom2p0YJYqG+n4xWpXDxByUEPxVYR4eMh9 w1dFCm7Yk1XqnDPiWNNTJqc7T3VEWmd40XzMUefi8z93hTYgknk71NfQ341mMaCy /41mKYgwFR7VZEf2MdItMQGupPmHuJWJa5MWcghKkfjXFw8hzpOwan4LcrIFz6+W JQY3t/DLImUZztDbNJutSW6Pw7/Dr0EvEHpDC27DwWdqDRGEd4shT26D8UHuz+w3 +5B5XGQ1DgGLTUIZcBY9RSq9TN1Fzn0XBiafQmyA9iBNTLgfPZcf/clTZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMzEekFQmO1w7uwo5RRdmXNh72F/MB8GA1UdIwQY MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt NmYxZmVjZTg3Yzg5LzEvek1SNlFWQ1k3WER1N0NqbEZGMlpjMkh2WVg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5 LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEFSMA0G CSqGSIb3DQEBCwUAA4IBAQAyH4gq+67f7FyJcK03zAZhPiSgMjIJjAJGHIpg06ei HY0IZ4V2J4OaGZD4uSd6NTsT2l07RoHMGbH6MZ/h0+5YBKZU2v8+nNEplm0Vds/X 0HT9qp3b1FPwmxMO2Z98XtcqGvXmvCuX2AorBYc4gKMSAitsfGrEeoKbnPpsODl+ 68fU5eYp4USXcTzT0Odg+wearQ7XJg7k5J4rNOCvcaYqLFuo8wNUogfWKJXQaqJX 2SpHAFYl6bUGwV73r4GszykPfMMnaFMqS1O/siDUtxtES8ZISG008fl10a3jfCAi bC0IFjWN8/DVYqEd9zdimGNzj7OapQted0o0oJDiijsJ -----END CERTIFICATE-----Generated at Sun Dec 7 00:27:15 2025 by rpki-client