This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ZF7hOmhYR1fn4ZYXkR49rskV2pI.roa File: ZF7hOmhYR1fn4ZYXkR49rskV2pI.roa (raw, json) Hash identifier: mpzvhb4zXG8kDkRlZRViVkyq7QjZbW7JERwXznl7htk= Subject key identifier: 64:5E:E1:3A:68:58:47:57:E7:E1:96:17:91:1E:3D:AE:C9:15:DA:92 Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f Certificate serial: 019AB2419AC0B412A9F05E79C3EA5E40F80F Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ZF7hOmhYR1fn4ZYXkR49rskV2pI.roa Signing time: Sun 23 Nov 2025 19:47:15 +0000 ROA not before: Sun 23 Nov 2025 19:47:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5398 IP address blocks: 31.44.32.0/20 maxlen: 20 31.44.44.0/23 maxlen: 23 31.44.46.0/23 maxlen: 23 46.21.22.0/24 maxlen: 24 46.21.29.0/24 maxlen: 24 185.155.176.0/22 maxlen: 22 185.155.184.0/23 maxlen: 23 193.222.104.0/23 maxlen: 23 193.222.105.0/24 maxlen: 24 2a04:1580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b2:41:9a:c0:b4:12:a9:f0:5e:79:c3:ea:5e:40:f8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f Validity Not Before: Nov 23 19:47:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=645ee13a68584757e7e19617911e3daec915da92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4a:47:a7:92:f5:9d:36:97:f5:8f:f0:a5:9e: 46:30:e2:3b:67:8e:47:dc:17:19:f0:6e:a3:56:7f: b4:ba:e8:0a:5f:ec:e0:4d:7b:2b:09:78:d1:e6:f3: 3b:ec:d0:98:fe:a0:f5:13:91:d0:cd:0d:eb:26:eb: 61:24:cc:53:a5:43:97:ca:a5:9a:b4:4e:2e:bb:6d: 53:61:a0:e7:21:12:45:f8:ba:6e:9e:9a:12:a5:4e: 83:7e:d6:2f:97:b7:f3:66:28:a8:14:9d:81:12:ed: 9c:5e:c1:77:ef:0a:6c:b8:3f:8f:20:49:1f:19:8f: c6:0a:51:6d:40:15:ff:80:26:26:0d:00:d7:d0:8d: dc:4c:d6:3c:90:75:6f:f1:63:1f:bd:a2:97:5b:49: 10:88:e4:64:f0:9f:2d:78:68:4d:89:36:7a:13:85: e1:cf:cb:e9:d1:68:1c:18:8a:29:e1:1b:ec:c2:02: d4:3b:b6:7a:69:c7:9c:94:6c:a7:ab:fe:42:30:ab: 00:29:d7:6e:ef:0b:d6:a2:26:55:47:79:41:d6:ee: 37:bd:1e:45:ca:b2:87:84:4e:ff:0d:e8:ea:d9:51: 8c:9d:44:cf:32:46:a9:6b:e7:b0:2b:c0:9e:be:22: 6e:64:d5:6b:8a:c6:46:60:77:20:24:72:39:e4:13: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5E:E1:3A:68:58:47:57:E7:E1:96:17:91:1E:3D:AE:C9:15:DA:92 X509v3 Authority Key Identifier: keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ZF7hOmhYR1fn4ZYXkR49rskV2pI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.32.0/20 46.21.22.0/24 46.21.29.0/24 185.155.176.0/22 185.155.184.0/23 193.222.104.0/23 IPv6: 2a04:1580::/29 Signature Algorithm: sha256WithRSAEncryption 7e:ef:52:6b:5d:ea:f9:2c:a2:bd:e3:a5:60:08:46:e9:c1:84: df:40:09:1f:a7:8b:59:45:7a:9f:8e:99:87:d8:d9:8e:a2:79: cf:77:09:dd:d2:ff:06:d1:18:bf:26:7b:0e:69:53:5a:5d:eb: 93:04:db:91:be:19:9a:a7:f6:8a:bd:eb:26:fd:41:f9:c9:57: 8f:c8:4b:21:ed:b6:65:40:90:fc:e3:2a:29:13:4d:aa:e9:a3: 2a:77:47:14:6f:ae:9e:89:dd:16:f9:77:1f:25:48:84:b1:f9: 7c:ff:b0:30:67:d5:d5:d8:ae:37:fb:01:40:27:1e:96:cc:8e: de:ec:f0:61:e9:c9:60:49:07:83:a6:a6:c9:a7:34:61:0e:b4: 1e:d3:6d:c9:dd:c6:0b:50:6f:b5:f4:0b:d6:c4:35:a5:b5:63: 43:b6:d8:b5:87:00:91:42:80:7c:83:ea:39:2a:84:d5:07:87: 0b:fd:f5:ac:1f:c8:b2:19:69:4d:1b:dd:ac:79:03:d7:50:52: 3c:bf:0f:cb:66:7e:7d:ef:3c:b1:70:dd:02:8a:35:a3:3c:9c: 6a:f8:95:cb:6f:b7:6b:16:bb:7f:4b:83:af:cb:be:77:ff:11: 71:21:51:63:9a:22:b3:7a:53:7d:71:e4:11:8d:93:6a:ff:3a: a9:e9:89:03 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZqyQZrAtBKp8F55w+peQPgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0 YmI0MWYwHhcNMjUxMTIzMTk0NzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDVlZTEzYTY4NTg0NzU3ZTdlMTk2MTc5MTFlM2RhZWM5MTVkYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkpHp5L1nTaX9Y/wpZ5GMOI7Z45H 3BcZ8G6jVn+0uugKX+zgTXsrCXjR5vM77NCY/qD1E5HQzQ3rJuthJMxTpUOXyqWa tE4uu21TYaDnIRJF+LpunpoSpU6DftYvl7fzZiioFJ2BEu2cXsF37wpsuD+PIEkf GY/GClFtQBX/gCYmDQDX0I3cTNY8kHVv8WMfvaKXW0kQiORk8J8teGhNiTZ6E4Xh z8vp0WgcGIop4RvswgLUO7Z6aceclGynq/5CMKsAKddu7wvWoiZVR3lB1u43vR5F yrKHhE7/Dejq2VGMnUTPMkapa+ewK8CeviJuZNVrisZGYHcgJHI55BNcmQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFGRe4TpoWEdX5+GWF5EePa7JFdqSMB8GA1UdIwQY MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt OWIyNmNhYjc5NDUxLzEvWkY3aE9taFlSMWZuNFpZWGtSNDlyc2tWMnBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEHywgAwQA LhUWAwQALhUdAwQCuZuwAwQBuZu4AwQBwd5oMA0EAgACMAcDBQMqBBWAMA0GCSqG SIb3DQEBCwUAA4IBAQB+71JrXer5LKK946VgCEbpwYTfQAkfp4tZRXqfjpmH2NmO onnPdwnd0v8G0Ri/JnsOaVNaXeuTBNuRvhmap/aKvesm/UH5yVePyEsh7bZlQJD8 4yopE02q6aMqd0cUb66eid0W+XcfJUiEsfl8/7AwZ9XV2K43+wFAJx6WzI7e7PBh 6clgSQeDpqbJpzRhDrQe023J3cYLUG+19AvWxDWltWNDtti1hwCRQoB8g+o5KoTV B4cL/fWsH8iyGWlNG92seQPXUFI8vw/LZn597zyxcN0CijWjPJxq+JXLb7drFrt/ S4Ovy753/xFxIVFjmiKzelN9ceQRjZNq/zqp6YkD -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:49 2025 by rpki-client