This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/CZOyLCDq6Iq_ffaqvjI3PSVVOvU.roa File: CZOyLCDq6Iq_ffaqvjI3PSVVOvU.roa (raw, json) Hash identifier: nxYpf3d1kInNnFvQ38+l8rg/HLKSq+o3Lo1uxdJMCqg= Subject key identifier: 09:93:B2:2C:20:EA:E8:8A:BF:7D:F6:AA:BE:32:37:3D:25:55:3A:F5 Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Certificate serial: 019AC28DAC386B404C927AA6A2B0BBDFA356 Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/CZOyLCDq6Iq_ffaqvjI3PSVVOvU.roa Signing time: Wed 26 Nov 2025 23:44:15 +0000 ROA not before: Wed 26 Nov 2025 23:44:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207465 IP address blocks: 194.147.139.0/24 maxlen: 24 2a07:e480:2::/48 maxlen: 48 2a07:e480:aaa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c2:8d:ac:38:6b:40:4c:92:7a:a6:a2:b0:bb:df:a3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Validity Not Before: Nov 26 23:44:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0993b22c20eae88abf7df6aabe32373d25553af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:52:1d:13:57:7d:c9:89:70:cc:dd:c2:6a: eb:c3:d9:08:74:06:db:bf:d4:74:d1:11:42:ab:a5: a8:5a:73:36:f8:9a:bf:6e:8f:42:73:87:eb:64:9c: 0a:7c:b8:95:fe:f5:98:85:29:56:cb:6c:d8:f1:d2: 77:d7:e2:64:70:19:fb:45:d8:bf:53:f4:f6:4f:64: 85:cd:93:b1:6b:2c:44:39:41:66:ca:9b:cb:3d:d1: 3f:89:28:a7:7b:6b:5e:eb:14:9c:ab:a3:52:fc:b4: a5:db:56:6c:c4:a5:fa:77:7f:af:20:75:c6:df:3a: ba:53:52:1e:3d:21:c5:bf:3b:8d:cb:52:bb:be:88: d7:4b:7a:db:31:bd:97:c4:1d:ef:03:3b:74:29:f0: 3b:3a:a1:ea:f9:88:8b:41:ee:eb:33:00:47:0f:a5: a5:8e:c7:6c:ef:8c:60:b1:91:0d:cb:c2:82:17:1b: d3:38:b4:b6:7c:fe:09:56:bc:04:c0:b0:cb:b0:33: 9a:9c:c7:7f:c6:08:34:a9:c6:a7:11:9c:19:79:03: 1d:3d:3e:96:50:aa:8c:02:1c:39:21:c3:46:80:7a: e2:34:dc:13:34:ae:48:b4:86:15:15:ef:1a:5c:48: 27:fc:35:cc:bb:3b:7d:d7:53:b8:7d:64:0f:c8:cf: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:93:B2:2C:20:EA:E8:8A:BF:7D:F6:AA:BE:32:37:3D:25:55:3A:F5 X509v3 Authority Key Identifier: keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/CZOyLCDq6Iq_ffaqvjI3PSVVOvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.139.0/24 IPv6: 2a07:e480:2::/48 2a07:e480:aaa::/48 Signature Algorithm: sha256WithRSAEncryption 1d:b9:d6:fd:8c:48:e0:c5:db:86:6f:08:58:ab:58:35:83:fb: 50:ab:1c:b1:6c:2f:38:22:f0:9f:a8:72:0d:68:00:50:40:ee: f2:b6:24:a5:95:17:c8:42:17:3a:bb:86:5c:a8:75:55:c2:33: 7a:2f:8a:24:19:2b:11:f8:87:d6:67:c9:d6:9c:c6:9d:9f:a8: 9d:86:17:4d:a6:95:fe:5d:99:bc:4b:51:35:69:6f:30:ff:d8: 15:6c:5b:d9:1c:76:56:90:3d:70:66:d6:9d:b5:2e:d8:49:87: bc:07:9c:d2:a8:26:15:5e:be:40:fe:08:66:9f:d7:86:7e:de: 36:0d:6b:f2:af:1e:fd:7e:ad:82:a4:f1:d8:87:34:36:07:94: d1:16:a6:41:12:f1:cb:7f:dc:19:11:78:c3:e5:04:96:62:21: ae:a5:7a:49:1c:38:09:f8:2b:a4:e8:5e:6d:ce:48:3e:ea:2b: c1:dd:9b:5b:14:3a:ea:67:79:10:41:55:29:25:3c:99:1c:7e: 0f:10:1d:97:0d:cb:8a:13:be:38:69:5d:15:69:7d:38:f7:f0: 96:60:a8:14:29:9c:a2:bd:c2:35:a4:d6:a8:4b:8d:9e:9e:c7: 3e:09:a8:2e:f3:9c:db:53:80:45:0d:70:45:68:2c:3a:4a:f4: ba:2d:d6:33 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZrCjaw4a0BMknqmorC736NWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy N2M2YzMwHhcNMjUxMTI2MjM0NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTkzYjIyYzIwZWFlODhhYmY3ZGY2YWFiZTMyMzczZDI1NTUzYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHBSHRNXfcmJcMzdwmrrw9kIdAbb v9R00RFCq6WoWnM2+Jq/bo9Cc4frZJwKfLiV/vWYhSlWy2zY8dJ31+JkcBn7Rdi/ U/T2T2SFzZOxayxEOUFmypvLPdE/iSine2te6xScq6NS/LSl21ZsxKX6d3+vIHXG 3zq6U1IePSHFvzuNy1K7vojXS3rbMb2XxB3vAzt0KfA7OqHq+YiLQe7rMwBHD6Wl jsds74xgsZENy8KCFxvTOLS2fP4JVrwEwLDLsDOanMd/xgg0qcanEZwZeQMdPT6W UKqMAhw5IcNGgHriNNwTNK5ItIYVFe8aXEgn/DXMuzt911O4fWQPyM94/QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAmTsiwg6uiKv332qr4yNz0lVTr1MB8GA1UdIwQY MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt NDBlYTgwODkyZjAzLzEvQ1pPeUxDRHE2SXFfZmZhcXZqSTNQU1ZWT3ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAwpOLMBgE AgACMBIDBwAqB+SAAAIDBwAqB+SACqowDQYJKoZIhvcNAQELBQADggEBAB251v2M SODF24ZvCFirWDWD+1CrHLFsLzgi8J+ocg1oAFBA7vK2JKWVF8hCFzq7hlyodVXC M3oviiQZKxH4h9Znydacxp2fqJ2GF02mlf5dmbxLUTVpbzD/2BVsW9kcdlaQPXBm 1p21LthJh7wHnNKoJhVevkD+CGaf14Z+3jYNa/KvHv1+rYKk8diHNDYHlNEWpkES 8ct/3BkReMPlBJZiIa6lekkcOAn4K6ToXm3OSD7qK8Hdm1sUOupneRBBVSklPJkc fg8QHZcNy4oTvjhpXRVpfTj38JZgqBQpnKK9wjWk1qhLjZ6exz4JqC7znNtTgEUN cEVoLDpK9Lot1jM= -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:19 2025 by rpki-client