This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/zDW63VDxhl9P505zOu3VSRjg2i8.roa File: zDW63VDxhl9P505zOu3VSRjg2i8.roa (raw, json) Hash identifier: EzqIt3I5mIkchtA/ykq/H3HkJ82nAlwDFFB+//7vPWc= Subject key identifier: CC:35:BA:DD:50:F1:86:5F:4F:E7:4E:73:3A:ED:D5:49:18:E0:DA:2F Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019AEEAAEB283BB3423D44DA86BB9318BA70 Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/zDW63VDxhl9P505zOu3VSRjg2i8.roa Signing time: Fri 05 Dec 2025 13:19:30 +0000 ROA not before: Fri 05 Dec 2025 13:19:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216167 IP address blocks: 62.223.8.0/24 maxlen: 24 62.223.10.0/24 maxlen: 24 62.223.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:aa:eb:28:3b:b3:42:3d:44:da:86:bb:93:18:ba:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Dec 5 13:19:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc35badd50f1865f4fe74e733aedd54918e0da2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:8a:ea:34:9b:f8:82:63:49:f7:53:c1:2b: 09:2b:c1:fb:26:9a:8a:d7:88:63:5b:c5:24:f3:8d: 41:df:c5:fc:e0:0f:b2:66:64:a0:0b:42:b1:78:7b: 57:e8:28:16:6d:ab:56:e6:17:95:f1:f3:52:c3:cd: 84:c7:11:31:ce:a8:c3:e6:56:f3:6a:4d:49:1c:e5: 99:60:75:d1:37:b7:85:3b:f5:e7:74:a4:5e:65:cf: fc:34:88:40:1f:53:45:a6:a9:69:78:81:c8:bf:f9: a9:b0:93:da:14:bf:b8:53:1a:c4:97:f8:ed:49:41: c0:a5:f6:0b:bf:e3:44:fd:db:c6:de:b3:7a:37:78: f5:0d:14:9c:ec:8d:92:c1:24:0b:97:f6:9e:cf:10: 39:e4:d9:cd:51:58:9d:72:e3:2d:5c:cd:a3:69:38: 0f:8f:bb:94:a1:e5:37:0a:15:97:1e:3d:bc:c9:45: f1:ef:ed:60:a9:fb:0a:d1:4b:b1:b4:25:07:50:e3: f4:c4:e0:3d:ef:f5:47:bb:1e:3d:c6:9a:13:9c:08: 17:38:44:60:4a:1e:fd:c4:d4:cc:97:8d:92:a8:52: 33:dd:30:b8:69:2e:fc:ce:35:08:92:ec:f6:cb:e0: 82:6d:c1:a7:f3:2b:74:af:9e:11:3a:d5:f3:c2:a4: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:35:BA:DD:50:F1:86:5F:4F:E7:4E:73:3A:ED:D5:49:18:E0:DA:2F X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/zDW63VDxhl9P505zOu3VSRjg2i8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.223.8.0/24 62.223.10.0/23 Signature Algorithm: sha256WithRSAEncryption 66:12:b2:53:03:6b:fb:2a:0a:f3:fb:22:54:6d:83:8c:b4:5d: 82:56:5d:9b:cd:4b:c3:00:d2:44:9a:29:b1:83:0d:27:01:4c: ef:35:23:8a:53:c9:cf:24:40:5f:6e:d7:74:6f:24:89:b3:dc: 0a:f3:77:e8:c3:61:18:9f:1c:ca:36:7a:5b:da:2b:2a:4e:be: 69:35:9c:17:af:be:98:a4:bc:c6:f0:dc:de:f9:b6:01:d4:7a: ab:8e:47:e0:c5:91:88:8a:cf:72:83:a3:c8:62:e6:bb:20:ac: 04:dd:fd:df:eb:17:d4:c3:ed:64:6b:88:89:47:cc:3a:79:aa: 17:49:4b:43:77:a0:3f:3b:c3:ff:b8:7c:9e:b2:82:d0:ed:78: d9:5b:fe:23:77:44:d0:c9:c7:9d:8e:04:aa:a7:5f:88:bb:16: 9c:53:53:b7:52:50:b1:64:2c:c6:cc:a2:6f:aa:4a:36:0a:46: ca:f0:75:8f:00:80:4b:2c:83:fd:a8:a4:5b:c1:de:21:23:b0: 4e:21:d1:99:9e:bc:53:b4:3a:36:3d:93:f9:a0:0d:f2:e6:79: 10:a4:9a:35:e9:71:39:b3:e2:05:6c:94:e6:e0:0c:f5:95:2f: 19:58:9e:17:89:b7:52:03:6d:20:42:12:27:92:29:12:c8:30: cd:2b:ae:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZruqusoO7NCPUTahruTGLpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjUxMjA1MTMxOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzM1YmFkZDUwZjE4NjVmNGZlNzRlNzMzYWVkZDU0OTE4ZTBkYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvymK6jSb+IJjSfdTwSsJK8H7JpqK 14hjW8Uk841B38X84A+yZmSgC0KxeHtX6CgWbatW5heV8fNSw82ExxExzqjD5lbz ak1JHOWZYHXRN7eFO/XndKReZc/8NIhAH1NFpqlpeIHIv/mpsJPaFL+4UxrEl/jt SUHApfYLv+NE/dvG3rN6N3j1DRSc7I2SwSQLl/aezxA55NnNUVidcuMtXM2jaTgP j7uUoeU3ChWXHj28yUXx7+1gqfsK0UuxtCUHUOP0xOA97/VHux49xpoTnAgXOERg Sh79xNTMl42SqFIz3TC4aS78zjUIkuz2y+CCbcGn8yt0r54ROtXzwqSGowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMw1ut1Q8YZfT+dOczrt1UkY4NovMB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEvekRXNjNWRHhobDlQNTA1ek91M1ZTUmpnMmk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPt8IAwQB Pt8KMA0GCSqGSIb3DQEBCwUAA4IBAQBmErJTA2v7Kgrz+yJUbYOMtF2CVl2bzUvD ANJEmimxgw0nAUzvNSOKU8nPJEBfbtd0bySJs9wK83fow2EYnxzKNnpb2isqTr5p NZwXr76YpLzG8Nze+bYB1HqrjkfgxZGIis9yg6PIYua7IKwE3f3f6xfUw+1ka4iJ R8w6eaoXSUtDd6A/O8P/uHyesoLQ7XjZW/4jd0TQycedjgSqp1+IuxacU1O3UlCx ZCzGzKJvqko2CkbK8HWPAIBLLIP9qKRbwd4hI7BOIdGZnrxTtDo2PZP5oA3y5nkQ pJo16XE5s+IFbJTm4Az1lS8ZWJ4XibdSA20gQhInkikSyDDNK64X -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:53 2025 by rpki-client