This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZQZP9tmqrw0oleKoacuPeMonZi0.roa File: ZQZP9tmqrw0oleKoacuPeMonZi0.roa (raw, json) Hash identifier: hCNtY3FthmCJhKs+5DhJpeHuajkwscFxfq7x3dMt4X8= Subject key identifier: 65:06:4F:F6:D9:AA:AF:0D:28:95:E2:A8:69:CB:8F:78:CA:27:66:2D Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019AD738174FFA2CDA28A9972C0BA03CBEDE Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZQZP9tmqrw0oleKoacuPeMonZi0.roa Signing time: Mon 01 Dec 2025 00:02:48 +0000 ROA not before: Mon 01 Dec 2025 00:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215472 IP address blocks: 2a0f:b240:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:38:17:4f:fa:2c:da:28:a9:97:2c:0b:a0:3c:be:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Dec 1 00:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65064ff6d9aaaf0d2895e2a869cb8f78ca27662d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:26:ba:38:ac:b4:48:76:66:ad:51:61:f2:41: d1:07:70:ed:54:80:8f:af:68:8a:aa:9d:c2:93:b7: 38:a9:97:c5:5e:53:c0:1b:cd:b4:1f:f7:ca:ff:f6: 0a:2c:e6:ee:16:cf:e7:80:23:62:ac:b8:c7:bb:36: 8b:75:b4:e5:23:18:eb:69:b3:9f:0d:8d:7e:58:f8: bb:98:bf:79:ef:49:bb:98:91:94:a7:34:bb:de:2e: 2e:ca:bb:b3:c8:e9:62:11:bd:91:b0:13:0f:dd:75: a0:60:71:09:1c:ee:08:2c:fb:95:a5:dc:9b:aa:25: af:23:eb:89:15:de:e4:bb:15:f1:04:d5:a4:9f:cd: 04:73:63:0e:d7:4c:bc:20:66:da:75:71:7d:53:4a: ec:e8:33:b8:2f:d9:48:62:ea:27:96:06:b5:fe:aa: 9b:10:7d:18:50:7c:45:e9:ea:71:b5:36:bb:d2:a6: 68:a8:8e:72:8b:d7:94:38:6b:a5:ed:f2:24:ca:9f: 28:f4:ba:49:4a:ab:d3:33:a8:ff:0f:b2:c1:1c:f8: e5:a7:f5:8f:4f:35:5f:9d:19:90:d6:b9:4b:b3:0f: f6:98:b6:49:c2:bc:c6:d6:4f:6a:3e:a2:6c:e2:63: c7:e5:05:d7:7d:b3:54:27:17:f4:53:c6:c6:f2:41: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:4F:F6:D9:AA:AF:0D:28:95:E2:A8:69:CB:8F:78:CA:27:66:2D X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZQZP9tmqrw0oleKoacuPeMonZi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:a00::/40 Signature Algorithm: sha256WithRSAEncryption 62:ea:a4:f0:56:2e:e8:30:df:a7:e9:87:a6:e6:11:3b:17:f0: 2e:70:ce:e5:1c:75:26:89:f8:29:84:11:e4:db:6b:95:71:5c: bd:35:e5:29:39:87:eb:40:a3:97:7c:8a:18:33:2c:f7:10:9a: f8:90:ac:51:e0:a5:ee:5c:17:02:6b:59:20:03:87:2b:63:16: 07:49:af:e2:7d:95:33:58:86:09:f6:79:f5:eb:dc:43:15:02: de:ae:8f:77:86:24:ef:df:36:aa:0e:2f:d0:68:1a:52:c7:c8: de:f7:ef:7e:79:12:d6:5a:02:27:bc:4d:e6:29:ca:04:2e:0b: 4a:77:4d:71:82:2a:2b:25:03:bf:ba:e8:b3:08:a3:81:e3:a4: b3:11:90:2c:57:e6:3f:45:3f:5e:90:b0:39:81:fa:68:7a:d8: 6a:d9:52:8e:6d:7d:98:9d:fc:d2:3a:38:c6:eb:eb:c1:f8:3f: b9:5c:56:4d:39:8a:49:d0:a1:53:29:1b:08:1c:f2:82:a5:30: d3:0f:e6:39:68:1c:22:9c:52:06:b9:9e:22:c3:b3:94:38:3d: 2f:2f:83:10:a7:eb:0e:97:d5:20:18:1f:5f:8f:da:87:92:1d: 39:42:89:c0:96:26:66:f0:03:e1:63:df:89:2f:d7:58:44:b9: 6e:3e:86:8c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZrXOBdP+izaKKmXLAugPL7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUxMjAxMDAwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTA2NGZmNmQ5YWFhZjBkMjg5NWUyYTg2OWNiOGY3OGNhMjc2NjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ya6OKy0SHZmrVFh8kHRB3DtVICP r2iKqp3Ck7c4qZfFXlPAG820H/fK//YKLObuFs/ngCNirLjHuzaLdbTlIxjrabOf DY1+WPi7mL9570m7mJGUpzS73i4uyruzyOliEb2RsBMP3XWgYHEJHO4ILPuVpdyb qiWvI+uJFd7kuxXxBNWkn80Ec2MO10y8IGbadXF9U0rs6DO4L9lIYuonlga1/qqb EH0YUHxF6epxtTa70qZoqI5yi9eUOGul7fIkyp8o9LpJSqvTM6j/D7LBHPjlp/WP TzVfnRmQ1rlLsw/2mLZJwrzG1k9qPqJs4mPH5QXXfbNUJxf0U8bG8kE1XQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGUGT/bZqq8NKJXiqGnLj3jKJ2YtMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvWlFaUDl0bXFydzBvbGVLb2FjdVBlTW9uWmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAow DQYJKoZIhvcNAQELBQADggEBAGLqpPBWLugw36fph6bmETsX8C5wzuUcdSaJ+CmE EeTba5VxXL015Sk5h+tAo5d8ihgzLPcQmviQrFHgpe5cFwJrWSADhytjFgdJr+J9 lTNYhgn2efXr3EMVAt6uj3eGJO/fNqoOL9BoGlLHyN737355EtZaAie8TeYpygQu C0p3TXGCKislA7+66LMIo4HjpLMRkCxX5j9FP16QsDmB+mh62GrZUo5tfZid/NI6 OMbr68H4P7lcVk05iknQoVMpGwgc8oKlMNMP5jloHCKcUga5niLDs5Q4PS8vgxCn 6w6X1SAYH1+P2oeSHTlCicCWJmbwA+Fj34kv11hEuW4+how= -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:41 2025 by rpki-client