This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/zbIAsFwD5ePJdM-wyedaiDucJ4s.roa File: zbIAsFwD5ePJdM-wyedaiDucJ4s.roa (raw, json) Hash identifier: FD7BXNbP86/URBegfFq5gaF2zYtItcl8bvGrxblk8mA= Subject key identifier: CD:B2:00:B0:5C:03:E5:E3:C9:74:CF:B0:C9:E7:5A:88:3B:9C:27:8B Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731C7FB8D89BC5EC670D4F2459BEB2AC Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/zbIAsFwD5ePJdM-wyedaiDucJ4s.roa Signing time: Tue 11 Nov 2025 13:30:38 +0000 ROA not before: Tue 11 Nov 2025 13:30:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208360 IP address blocks: 2a0c:2847::/32 maxlen: 32 2a0e:67c5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1c:7f:b8:d8:9b:c5:ec:67:0d:4f:24:59:be:b2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:30:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cdb200b05c03e5e3c974cfb0c9e75a883b9c278b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a7:12:45:6b:30:82:e5:2e:2b:01:95:d0:9a: 27:f3:c6:83:88:be:7a:8c:74:3a:5c:14:a9:75:c8: 27:f2:de:df:11:4e:bc:85:9f:84:a3:f5:c7:be:b6: 6a:cb:59:88:bf:e8:f9:90:ff:72:10:a6:8e:94:d5: 0e:45:d6:68:7a:66:3d:5f:c0:8d:77:0a:c9:bc:91: 6c:3c:e1:fc:a0:7d:17:f8:10:b6:94:bc:87:f5:f8: b0:aa:00:c5:0e:11:0f:ff:42:dc:65:32:28:06:03: 08:50:37:17:d8:1e:0f:1a:4f:27:c5:fc:3b:c9:20: 5e:f9:c5:40:42:97:bc:3e:52:2f:43:74:5d:94:96: 4d:52:d4:d3:d6:3c:a3:46:ea:25:5e:89:3b:c4:1a: 21:64:71:29:a8:de:62:51:a3:f1:72:98:fd:15:bf: 9b:20:0b:00:0f:65:52:e6:60:be:d0:19:f6:f6:38: 2d:dd:b6:46:e7:16:c1:be:92:0f:61:e8:b9:88:03: 80:be:6e:f8:1c:fa:5d:9d:c7:04:db:11:9a:93:1f: a4:ad:38:a2:b3:b5:cd:2a:eb:dd:25:3c:13:a2:80: cd:f9:51:7b:33:b2:a0:9b:aa:d8:0a:50:60:f9:c4: 00:9d:a0:c5:b0:d1:29:a5:cc:c5:f6:22:a3:dd:0e: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B2:00:B0:5C:03:E5:E3:C9:74:CF:B0:C9:E7:5A:88:3B:9C:27:8B X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/zbIAsFwD5ePJdM-wyedaiDucJ4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:2847::/32 2a0e:67c5::/32 Signature Algorithm: sha256WithRSAEncryption 19:2c:7c:5e:76:d5:7e:6a:de:0d:cd:23:ff:ab:bc:02:b1:fb: 33:77:88:1d:08:ea:7a:09:e6:ac:8e:b2:d9:75:6f:4c:1a:97: be:09:ae:f2:e5:0c:51:48:ee:9e:be:eb:2a:70:a2:ad:33:1e: f9:d2:e6:62:49:27:93:d1:8e:12:e5:07:81:2a:08:21:db:8d: 52:db:6f:9a:8a:00:a8:28:48:4b:db:d2:69:28:31:86:d0:13: 19:1f:3c:b5:74:0c:25:4e:c0:18:1f:3e:5d:4b:02:57:88:80: 6f:93:86:82:3c:25:27:d6:f8:e6:a9:5e:b4:48:ef:c9:d8:3b: f2:cc:a8:f1:ed:8d:bc:70:11:9e:28:ad:90:a7:1f:e0:0d:24: 04:38:3d:a9:f5:05:fb:6d:ad:f2:6d:dd:aa:d5:f3:ef:29:ff: 0c:15:a1:3f:20:b2:08:dc:59:7d:45:e5:d6:03:db:9a:4e:43: 5e:32:68:54:d8:f4:c4:7d:7a:a9:70:ba:b7:d7:cf:cb:63:94: 81:5c:3d:8a:31:01:44:55:00:96:f2:75:0a:ef:3c:40:57:6c: 58:2a:8b:75:13:dd:a4:d1:d9:2d:74:e6:91:1b:5a:e7:0e:59: ec:4d:f3:55:82:33:c4:ea:42:9d:b4:02:1b:9d:ca:aa:0e:93: d9:14:e0:29 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZpzHH+42JvF7GcNTyRZvrKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGIyMDBiMDVjMDNlNWUzYzk3NGNmYjBjOWU3NWE4ODNiOWMyNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3acSRWswguUuKwGV0Jon88aDiL56 jHQ6XBSpdcgn8t7fEU68hZ+Eo/XHvrZqy1mIv+j5kP9yEKaOlNUORdZoemY9X8CN dwrJvJFsPOH8oH0X+BC2lLyH9fiwqgDFDhEP/0LcZTIoBgMIUDcX2B4PGk8nxfw7 ySBe+cVAQpe8PlIvQ3RdlJZNUtTT1jyjRuolXok7xBohZHEpqN5iUaPxcpj9Fb+b IAsAD2VS5mC+0Bn29jgt3bZG5xbBvpIPYei5iAOAvm74HPpdnccE2xGakx+krTii s7XNKuvdJTwTooDN+VF7M7Kgm6rYClBg+cQAnaDFsNEppczF9iKj3Q7z8QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM2yALBcA+XjyXTPsMnnWog7nCeLMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvemJJQXNGd0Q1ZVBKZE0td3llZGFpRHVjSjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgwoRwMF ACoOZ8UwDQYJKoZIhvcNAQELBQADggEBABksfF521X5q3g3NI/+rvAKx+zN3iB0I 6noJ5qyOstl1b0wal74JrvLlDFFI7p6+6ypwoq0zHvnS5mJJJ5PRjhLlB4EqCCHb jVLbb5qKAKgoSEvb0mkoMYbQExkfPLV0DCVOwBgfPl1LAleIgG+ThoI8JSfW+Oap XrRI78nYO/LMqPHtjbxwEZ4orZCnH+ANJAQ4Pan1BfttrfJt3arV8+8p/wwVoT8g sgjcWX1F5dYD25pOQ14yaFTY9MR9eqlwurfXz8tjlIFcPYoxAURVAJbydQrvPEBX bFgqi3UT3aTR2S105pEbWucOWexN81WCM8TqQp20AhudyqoOk9kU4Ck= -----END CERTIFICATE-----Generated at Sat Dec 6 16:18:41 2025 by rpki-client