This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/zXLZgOznbeWyf_N1JnlIcyffF6M.roa File: zXLZgOznbeWyf_N1JnlIcyffF6M.roa (raw, json) Hash identifier: GpFbBkssI7iKvY9iZ7bM0NgFLkd9zFizZTUXDM83c5s= Subject key identifier: CD:72:D9:80:EC:E7:6D:E5:B2:7F:F3:75:26:79:48:73:27:DF:17:A3 Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Certificate serial: 019AE3F0EDF7D90930A7BA3B34D4733DFFDB Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/zXLZgOznbeWyf_N1JnlIcyffF6M.roa Signing time: Wed 03 Dec 2025 11:20:08 +0000 ROA not before: Wed 03 Dec 2025 11:20:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6700 IP address blocks: 62.108.96.0/19 maxlen: 19 62.108.103.0/24 maxlen: 24 62.108.105.0/24 maxlen: 24 62.108.107.0/24 maxlen: 24 62.193.128.0/19 maxlen: 19 91.148.64.0/18 maxlen: 18 91.148.72.0/24 maxlen: 24 91.223.162.0/24 maxlen: 24 178.20.205.0/24 maxlen: 24 185.47.210.0/24 maxlen: 24 194.106.160.0/19 maxlen: 19 194.106.166.0/24 maxlen: 24 194.106.170.0/24 maxlen: 24 195.252.64.0/18 maxlen: 18 213.244.232.0/21 maxlen: 21 217.26.64.0/20 maxlen: 20 2001:8c8::/32 maxlen: 32 2a02:e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:f0:ed:f7:d9:09:30:a7:ba:3b:34:d4:73:3d:ff:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7 Validity Not Before: Dec 3 11:20:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd72d980ece76de5b27ff3752679487327df17a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:19:ec:70:0a:d8:18:fd:31:44:8d:f2:e5: 79:da:be:44:78:f8:67:d5:7a:0c:2f:83:d9:16:88: 7e:30:da:25:79:36:fb:a4:d9:9a:d1:06:95:58:45: 99:96:01:41:df:89:a3:d3:d8:cf:36:6e:f3:34:8c: 26:c8:f4:0c:44:ca:db:5e:c9:ab:7a:16:09:7e:0c: 38:48:68:55:e4:c4:38:cb:0e:bf:1d:32:7a:01:d8: 26:83:25:27:7e:05:bb:32:4f:85:22:1b:8c:28:23: 05:70:3c:fd:6c:7d:f8:44:63:7f:20:8b:fb:3c:d9: 5b:f0:5b:b9:6b:d5:38:b8:88:36:2d:5d:5f:19:72: 9c:46:36:ce:22:6c:8c:49:dd:06:bb:a6:23:45:b2: 09:79:d5:95:80:c1:fa:54:bb:f0:24:5c:ea:c6:ad: af:70:5e:93:a2:34:bf:c8:dc:83:04:7b:90:cd:73: 0c:7d:5d:78:25:f3:44:ce:60:4c:3c:10:a0:e8:d2: 64:4e:80:d3:f8:5d:7d:ee:43:8d:e4:4d:09:66:db: 69:af:54:70:a9:7e:d8:a6:4f:61:5d:4c:d4:29:99: b4:ec:9b:a7:f9:7b:b2:ec:be:45:d2:58:5c:76:f2: 3d:7b:b6:b9:22:99:7d:6b:cc:9f:ff:81:56:da:e3: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:D9:80:EC:E7:6D:E5:B2:7F:F3:75:26:79:48:73:27:DF:17:A3 X509v3 Authority Key Identifier: keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/zXLZgOznbeWyf_N1JnlIcyffF6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.96.0/19 62.193.128.0/19 91.148.64.0/18 91.223.162.0/24 178.20.205.0/24 185.47.210.0/24 194.106.160.0/19 195.252.64.0/18 213.244.232.0/21 217.26.64.0/20 IPv6: 2001:8c8::/32 2a02:e40::/32 Signature Algorithm: sha256WithRSAEncryption 36:ca:dc:28:b8:87:25:d2:30:df:80:b5:38:d6:22:13:e0:df: 37:24:13:d0:27:ee:58:4a:f2:ce:d0:ed:b1:4c:e6:5f:6a:f6: 44:c5:b8:f4:f5:da:5f:cf:12:a8:84:c8:9f:42:a8:97:19:7f: 4c:95:d2:d0:45:30:4e:9f:2c:ba:6e:9d:12:1a:fd:a1:b8:f2: dd:76:97:ed:11:20:eb:a6:cb:51:da:82:b3:70:ad:70:42:65: 66:3c:44:8c:1c:ee:0e:eb:57:1c:98:3f:02:8c:17:b1:63:7a: a2:43:2c:04:f0:ad:83:ce:79:59:39:21:ab:fa:4a:51:b0:3b: f4:5f:63:9c:5f:0e:a2:68:d4:89:59:b1:6e:12:d7:0c:b1:4d: 55:ae:4d:dc:b6:ce:9c:3a:85:6e:08:5e:83:3d:a4:87:08:8a: d1:f6:31:72:2c:ee:eb:4f:06:3d:48:0d:0f:aa:a7:eb:d1:3a: 5c:f8:87:25:e6:f0:6e:28:c2:8a:71:37:2a:da:ae:d5:05:b5: 15:6b:c9:91:b2:4a:46:c0:8b:e0:a0:8e:a2:c6:86:94:e9:72: 58:2f:61:6a:64:10:9b:f4:e8:2a:98:f5:dd:b4:75:14:80:50: 8a:90:3b:9d:a7:7b:3a:3e:8b:dd:4b:ea:ba:95:68:2b:55:b2: 30:ac:04:4b -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZrj8O332Qkwp7o7NNRzPf/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi NmJkZjcwHhcNMjUxMjAzMTEyMDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDcyZDk4MGVjZTc2ZGU1YjI3ZmYzNzUyNjc5NDg3MzI3ZGYxN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTgZ7HAK2Bj9MUSN8uV52r5EePhn 1XoML4PZFoh+MNoleTb7pNma0QaVWEWZlgFB34mj09jPNm7zNIwmyPQMRMrbXsmr ehYJfgw4SGhV5MQ4yw6/HTJ6AdgmgyUnfgW7Mk+FIhuMKCMFcDz9bH34RGN/IIv7 PNlb8Fu5a9U4uIg2LV1fGXKcRjbOImyMSd0Gu6YjRbIJedWVgMH6VLvwJFzqxq2v cF6TojS/yNyDBHuQzXMMfV14JfNEzmBMPBCg6NJkToDT+F197kON5E0JZttpr1Rw qX7Ypk9hXUzUKZm07Jun+Xuy7L5F0lhcdvI9e7a5Ipl9a8yf/4FW2uPcyQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFM1y2YDs523lsn/zdSZ5SHMn3xejMB8GA1UdIwQY MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt ZDNlMjgwMGJkNjQwLzEvelhMWmdPem5iZVd5Zl9OMUpubEljeWZmRjZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQFPmxgAwQF PsGAAwQGW5RAAwQAW9+iAwQAshTNAwQAuS/SAwQFwmqgAwQGw/xAAwQD1fToAwQE 2RpAMBQEAgACMA4DBQAgAQjIAwUAKgIOQDANBgkqhkiG9w0BAQsFAAOCAQEANsrc KLiHJdIw34C1ONYiE+DfNyQT0CfuWEryztDtsUzmX2r2RMW49PXaX88SqITIn0Ko lxl/TJXS0EUwTp8sum6dEhr9objy3XaX7REg66bLUdqCs3CtcEJlZjxEjBzuDutX HJg/AowXsWN6okMsBPCtg855WTkhq/pKUbA79F9jnF8OomjUiVmxbhLXDLFNVa5N 3LbOnDqFbghegz2khwiK0fYxcizu608GPUgND6qn69E6XPiHJebwbijCinE3Ktqu 1QW1FWvJkbJKRsCL4KCOosaGlOlyWC9hamQQm/ToKpj13bR1FIBQipA7nad7Oj6L 3UvqupVoK1WyMKwESw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:28 2025 by rpki-client