This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/zo1EB5eOu--ZgkCTUFK4z2eLIIU.roa File: zo1EB5eOu--ZgkCTUFK4z2eLIIU.roa (raw, json) Hash identifier: GOnyByd/Nh/dSSCTb9OFvngxMy/STifQEOgflC9UV2k= Subject key identifier: CE:8D:44:07:97:8E:BB:EF:99:82:40:93:50:52:B8:CF:67:8B:20:85 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019AE4D22667C6236DEABC9E54539A2B888E Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/zo1EB5eOu--ZgkCTUFK4z2eLIIU.roa Signing time: Wed 03 Dec 2025 15:26:08 +0000 ROA not before: Wed 03 Dec 2025 15:26:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203936 IP address blocks: 45.93.180.0/22 maxlen: 24 45.144.248.0/22 maxlen: 24 89.40.238.0/24 maxlen: 24 89.43.72.0/24 maxlen: 24 89.43.198.0/24 maxlen: 24 89.44.145.0/24 maxlen: 24 185.249.232.0/24 maxlen: 24 185.253.144.0/22 maxlen: 24 185.253.145.0/24 maxlen: 24 193.39.92.0/24 maxlen: 24 193.39.93.0/24 maxlen: 24 193.39.94.0/24 maxlen: 24 193.39.95.0/24 maxlen: 24 194.15.219.0/24 maxlen: 24 194.15.232.0/24 maxlen: 24 194.15.236.0/24 maxlen: 24 194.26.1.0/24 maxlen: 24 2a0c:1380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:d2:26:67:c6:23:6d:ea:bc:9e:54:53:9a:2b:88:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Dec 3 15:26:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ce8d4407978ebbef998240935052b8cf678b2085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:8a:6d:45:08:33:32:15:77:ac:cc:13:c4: cb:9f:af:bc:d4:c3:77:3f:23:fb:8e:e6:38:87:e1: 3a:0d:15:1b:c8:d2:f8:f8:ba:f9:21:df:a1:a6:68: ee:a9:83:72:52:5b:6c:82:76:28:ec:a0:aa:31:bb: db:94:84:e3:e1:38:48:c1:39:26:46:bf:f9:a5:ee: ad:7c:91:b0:49:c0:b9:30:ca:de:8f:56:0f:bf:0f: 0c:23:72:51:93:12:f7:67:9f:cd:28:96:81:c9:91: d4:c3:0e:6a:f7:cd:6a:b7:27:d7:80:78:9a:6a:d9: bf:b9:ed:c4:8f:61:0c:0a:d9:0a:02:22:be:6f:f8: be:bd:7d:06:a1:36:01:7d:ec:a4:97:4f:b2:be:cc: 95:f8:66:45:77:c5:c7:b5:de:d7:4b:bc:cb:bc:b8: 5f:76:43:31:9b:56:c8:65:65:a2:a5:57:33:48:87: 2c:fe:10:93:ce:1a:e8:12:b1:d8:75:35:0e:2b:a1: 03:fc:a0:dd:3f:db:cf:6d:31:1c:72:c6:4b:2f:51: 50:e2:a6:7f:e4:2f:4c:df:ed:2a:4b:b3:c3:d5:3c: 63:54:8e:20:ff:fb:cc:44:f9:11:41:40:97:08:ea: 43:24:35:1b:bc:fc:32:b6:7a:2c:7e:c8:39:21:6a: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8D:44:07:97:8E:BB:EF:99:82:40:93:50:52:B8:CF:67:8B:20:85 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/zo1EB5eOu--ZgkCTUFK4z2eLIIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.180.0/22 45.144.248.0/22 89.40.238.0/24 89.43.72.0/24 89.43.198.0/24 89.44.145.0/24 185.249.232.0/24 185.253.144.0/22 193.39.92.0/22 194.15.219.0/24 194.15.232.0/24 194.15.236.0/24 194.26.1.0/24 IPv6: 2a0c:1380::/29 Signature Algorithm: sha256WithRSAEncryption aa:33:9a:6c:43:4f:56:82:24:90:be:55:0b:8c:4c:bd:cc:17: 09:79:31:14:34:b4:a7:b3:df:3a:f7:7a:c4:02:89:1e:29:e3: cb:be:55:ab:a5:c2:e4:1e:34:e2:09:e2:e0:0b:81:3f:55:ee: 27:2d:bf:b7:6a:f7:15:9a:ce:4d:1d:aa:c0:74:38:7f:02:50: ab:57:2b:dc:bc:bb:b2:8a:e7:89:1d:8d:01:88:ca:39:36:f5: 47:06:49:3d:e4:d6:e6:3c:5e:b5:1b:1e:c3:9f:6b:e5:b5:04: 86:db:1a:53:d2:c0:4e:af:51:18:f2:1e:64:6c:35:8f:c5:90: d2:8f:82:e9:56:f9:c6:06:2e:e6:87:02:7d:9c:d9:f7:47:eb: 25:89:d6:07:57:60:0e:25:12:73:d5:67:ba:18:04:e8:e5:f6: 65:a3:68:78:1a:97:4c:43:cb:29:4c:79:d4:30:22:db:07:c6: 56:f1:62:8d:6d:d0:10:2e:7b:03:d5:8d:31:40:6b:0e:b2:a0: 17:ff:54:45:b6:8b:96:50:82:1f:d9:84:89:74:81:f8:49:a6: e6:f9:13:ee:79:24:0a:a4:21:5b:dd:e5:39:54:24:ed:6c:3d: fd:63:44:b3:93:ef:12:48:72:37:51:5d:38:3c:c8:b1:8b:43: 52:6a:ca:40 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISAZrk0iZnxiNt6ryeVFOaK4iOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjUxMjAzMTUyNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZThkNDQwNzk3OGViYmVmOTk4MjQwOTM1MDUyYjhjZjY3OGIyMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolWKbUUIMzIVd6zME8TLn6+81MN3 PyP7juY4h+E6DRUbyNL4+Lr5Id+hpmjuqYNyUltsgnYo7KCqMbvblITj4ThIwTkm Rr/5pe6tfJGwScC5MMrej1YPvw8MI3JRkxL3Z5/NKJaByZHUww5q981qtyfXgHia atm/ue3Ej2EMCtkKAiK+b/i+vX0GoTYBfeykl0+yvsyV+GZFd8XHtd7XS7zLvLhf dkMxm1bIZWWipVczSIcs/hCTzhroErHYdTUOK6ED/KDdP9vPbTEccsZLL1FQ4qZ/ 5C9M3+0qS7PD1TxjVI4g//vMRPkRQUCXCOpDJDUbvPwytnosfsg5IWq6EwIDAQAB o4ICYDCCAlwwHQYDVR0OBBYEFM6NRAeXjrvvmYJAk1BSuM9niyCFMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvem8xRUI1ZU91LS1aZ2tDVFVGSzR6MmVMSUlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHYGCCsGAQUFBwEHAQH/BGcwZTBUBAIAATBOAwQCLV20AwQC LZD4AwQAWSjuAwQAWStIAwQAWSvGAwQAWSyRAwQAufnoAwQCuf2QAwQCwSdcAwQA wg/bAwQAwg/oAwQAwg/sAwQAwhoBMA0EAgACMAcDBQMqDBOAMA0GCSqGSIb3DQEB CwUAA4IBAQCqM5psQ09WgiSQvlULjEy9zBcJeTEUNLSns98693rEAokeKePLvlWr pcLkHjTiCeLgC4E/Ve4nLb+3avcVms5NHarAdDh/AlCrVyvcvLuyiueJHY0BiMo5 NvVHBkk95NbmPF61Gx7Dn2vltQSG2xpT0sBOr1EY8h5kbDWPxZDSj4LpVvnGBi7m hwJ9nNn3R+slidYHV2AOJRJz1We6GATo5fZlo2h4GpdMQ8spTHnUMCLbB8ZW8WKN bdAQLnsD1Y0xQGsOsqAX/1RFtouWUIIf2YSJdIH4Sabm+RPueSQKpCFb3eU5VCTt bD39Y0Szk+8SSHI3UV04PMixi0NSaspA -----END CERTIFICATE-----Generated at Sat Dec 6 16:15:16 2025 by rpki-client