This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/z1ig7aoRTuKmXolXHeCPJnQNUmU.roa File: z1ig7aoRTuKmXolXHeCPJnQNUmU.roa (raw, json) Hash identifier: ap2ra/J0tJE90DV+8e0IqRR4O5YRXCSyArsS7EtAi0k= Subject key identifier: CF:58:A0:ED:AA:11:4E:E2:A6:5E:89:57:1D:E0:8F:26:74:0D:52:65 Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019A816A982FE6D445999561FB08BF05294D Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/z1ig7aoRTuKmXolXHeCPJnQNUmU.roa Signing time: Fri 14 Nov 2025 08:10:37 +0000 ROA not before: Fri 14 Nov 2025 08:10:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8262 IP address blocks: 82.119.64.0/19 maxlen: 19 82.119.68.0/24 maxlen: 24 82.119.69.0/24 maxlen: 24 82.119.80.0/21 maxlen: 21 82.119.83.0/24 maxlen: 24 82.119.84.0/24 maxlen: 24 82.119.92.0/24 maxlen: 24 82.119.94.0/24 maxlen: 24 85.14.0.0/18 maxlen: 18 85.14.0.0/23 maxlen: 23 85.14.12.0/24 maxlen: 24 85.14.13.0/24 maxlen: 24 85.14.21.0/24 maxlen: 24 85.14.24.0/24 maxlen: 24 85.14.36.0/24 maxlen: 24 85.14.44.0/24 maxlen: 24 85.14.47.0/24 maxlen: 24 85.14.49.0/24 maxlen: 24 89.252.192.0/18 maxlen: 24 89.252.192.0/22 maxlen: 22 89.252.199.0/24 maxlen: 24 89.252.200.0/21 maxlen: 24 89.252.208.0/20 maxlen: 20 89.252.223.0/24 maxlen: 24 89.252.224.0/19 maxlen: 24 89.252.229.0/24 maxlen: 24 89.252.241.0/24 maxlen: 24 89.252.246.0/24 maxlen: 24 176.67.233.0/24 maxlen: 24 176.67.234.0/24 maxlen: 24 185.92.132.0/22 maxlen: 22 194.12.224.0/19 maxlen: 19 194.12.231.0/24 maxlen: 24 194.12.234.0/24 maxlen: 24 194.12.249.0/24 maxlen: 24 194.12.253.0/24 maxlen: 32 194.12.254.0/24 maxlen: 24 2001:1ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:6a:98:2f:e6:d4:45:99:95:61:fb:08:bf:05:29:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Nov 14 08:10:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf58a0edaa114ee2a65e89571de08f26740d5265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:ac:38:70:08:bc:46:b4:08:43:0b:15:de: 59:20:3e:1f:8b:d2:ed:ba:b0:0e:4c:80:4e:89:74: 13:72:ab:16:f1:ca:4c:57:15:8e:9f:13:0b:24:df: 72:50:af:10:01:81:2e:29:a0:93:55:87:d2:3e:ba: 36:6d:64:48:64:c5:bd:11:03:a2:c5:4f:a6:3d:2a: cb:c1:43:f5:cf:70:0c:73:33:51:5a:42:65:07:b8: df:e4:b7:62:6d:3f:2e:03:d5:04:68:ef:72:57:27: fa:d1:d8:71:c5:4f:63:13:85:fb:20:d3:f2:4d:14: 0c:b4:50:56:a6:f9:0d:82:fe:55:c8:66:94:8a:d2: ff:2e:67:24:e4:8b:57:4a:a6:64:31:f1:17:dc:6c: 49:27:7c:a4:e8:28:43:fc:45:63:e8:6c:48:db:05: 1d:f5:05:79:06:2d:e4:2c:5e:e4:ee:e8:65:19:e8: c9:18:50:81:65:47:13:a6:5c:03:f0:c5:b5:74:a5: 82:20:88:71:30:96:82:96:cd:d2:87:d2:51:1a:b5: 26:d6:57:77:47:c8:70:b1:ab:be:bd:8d:37:9f:bd: 30:95:92:8f:17:4f:c3:a8:1e:11:a7:85:34:16:2c: a7:59:58:91:40:9e:3d:21:53:6a:9b:dd:d6:b5:51: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:58:A0:ED:AA:11:4E:E2:A6:5E:89:57:1D:E0:8F:26:74:0D:52:65 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/z1ig7aoRTuKmXolXHeCPJnQNUmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.64.0/19 85.14.0.0/18 89.252.192.0/18 176.67.233.0-176.67.234.255 185.92.132.0/22 194.12.224.0/19 IPv6: 2001:1ae0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:c5:99:5c:48:48:d6:7a:66:76:e4:cd:d3:9c:fb:05:eb:40: 24:c2:c2:98:da:10:7f:63:7e:9e:d0:c4:d7:a6:41:a8:dc:91: b1:35:13:36:c2:7c:fb:11:92:4f:2d:d0:16:fa:5e:60:f3:58: 6a:d8:f3:eb:bd:b6:37:e4:cc:14:82:23:61:81:13:0e:1b:1e: 42:03:24:70:86:0e:3f:d0:85:32:fd:c0:fb:c7:bc:9c:38:b0: 81:bc:eb:f1:f2:f5:a4:a7:98:2c:eb:60:c1:66:62:0a:d3:53: 7b:81:ce:e1:f9:26:82:8b:51:b9:0f:02:e0:dc:c5:6c:02:55: 3f:62:3c:02:f9:c3:31:ca:ac:94:62:35:d2:11:52:3c:bb:13: 9a:d7:9c:97:ea:c1:c1:f9:04:69:9e:1d:a6:64:2d:55:88:bb: 78:01:3e:0f:33:18:07:13:6f:ec:39:fd:1b:ba:11:ea:ff:2d: 76:00:5a:72:c2:35:8c:ce:0f:db:05:bc:6d:ed:db:6b:cd:06: 2e:65:06:19:63:94:78:fc:d1:e2:aa:1f:a8:2e:56:0b:e7:32: d9:59:a8:17:34:81:e1:ae:72:ae:27:47:2e:3d:4a:06:ce:b4: fb:b2:5a:35:f1:e4:fa:a1:68:98:fa:ba:9c:d5:3f:a3:a6:24: cc:f7:62:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZqBapgv5tRFmZVh+wi/BSlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjUxMTE0MDgxMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjU4YTBlZGFhMTE0ZWUyYTY1ZTg5NTcxZGUwOGYyNjc0MGQ1MjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCWsOHAIvEa0CEMLFd5ZID4fi9Lt urAOTIBOiXQTcqsW8cpMVxWOnxMLJN9yUK8QAYEuKaCTVYfSPro2bWRIZMW9EQOi xU+mPSrLwUP1z3AMczNRWkJlB7jf5LdibT8uA9UEaO9yVyf60dhxxU9jE4X7INPy TRQMtFBWpvkNgv5VyGaUitL/Lmck5ItXSqZkMfEX3GxJJ3yk6ChD/EVj6GxI2wUd 9QV5Bi3kLF7k7uhlGejJGFCBZUcTplwD8MW1dKWCIIhxMJaCls3Sh9JRGrUm1ld3 R8hwsau+vY03n70wlZKPF0/DqB4Rp4U0FiynWViRQJ49IVNqm93WtVEnyQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFM9YoO2qEU7ipl6JVx3gjyZ0DVJlMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvejFpZzdhb1JUdUttWG9sWEhlQ1BKblFOVW1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQFUndAAwQG VQ4AAwQGWfzAMAwDBACwQ+kDBACwQ+oDBAK5XIQDBAXCDOAwDQQCAAIwBwMFACAB GuAwDQYJKoZIhvcNAQELBQADggEBAIvFmVxISNZ6ZnbkzdOc+wXrQCTCwpjaEH9j fp7QxNemQajckbE1EzbCfPsRkk8t0Bb6XmDzWGrY8+u9tjfkzBSCI2GBEw4bHkID JHCGDj/QhTL9wPvHvJw4sIG86/Hy9aSnmCzrYMFmYgrTU3uBzuH5JoKLUbkPAuDc xWwCVT9iPAL5wzHKrJRiNdIRUjy7E5rXnJfqwcH5BGmeHaZkLVWIu3gBPg8zGAcT b+w5/Ru6Eer/LXYAWnLCNYzOD9sFvG3t22vNBi5lBhljlHj80eKqH6guVgvnMtlZ qBc0geGucq4nRy49SgbOtPuyWjXx5PqhaJj6upzVP6OmJMz3Yls= -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:46 2025 by rpki-client