This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zbwpPZO7WgDswNHXq00jJaJCOQY.roa File: zbwpPZO7WgDswNHXq00jJaJCOQY.roa (raw, json) Hash identifier: yfiRrKo+RUDOZnwnuCEIxHZ4Bv6wZHUcidvLKGdvf0U= Subject key identifier: CD:BC:29:3D:93:BB:5A:00:EC:C0:D1:D7:AB:4D:23:25:A2:42:39:06 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B31C065BAC9C4E0FE3FB90E6238327D93 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zbwpPZO7WgDswNHXq00jJaJCOQY.roa Signing time: Thu 18 Dec 2025 13:57:31 +0000 ROA not before: Thu 18 Dec 2025 13:57:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 37.139.128.0/24 maxlen: 24 45.128.234.0/24 maxlen: 24 83.219.98.0/24 maxlen: 24 85.31.44.0/24 maxlen: 24 109.206.240.0/24 maxlen: 24 185.246.221.0/24 maxlen: 24 193.47.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c0:65:ba:c9:c4:e0:fe:3f:b9:0e:62:38:32:7d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 18 13:57:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cdbc293d93bb5a00ecc0d1d7ab4d2325a2423906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:e3:7c:8a:21:4d:be:4d:49:74:63:80:0e: b3:0a:04:57:0f:d8:54:8d:9f:99:3a:1e:d3:48:48: ea:71:bd:80:be:f1:f5:00:de:f9:14:4e:0a:d2:10: 90:24:f3:81:26:d7:f6:f6:82:4b:a4:5e:d0:1a:a8: 06:a5:41:98:cf:6a:27:ad:1d:4a:15:9f:b0:42:91: 5d:29:d7:e8:82:72:26:1a:8e:f6:75:7f:53:15:53: a6:85:53:74:d6:42:9d:2c:fc:04:83:63:90:ed:e6: 76:9b:4e:02:33:c3:2c:b9:0e:25:d0:94:54:f8:25: cd:60:9d:12:6e:9e:e6:dc:a3:f4:37:a8:0f:6c:01: dd:2f:1f:e3:82:2b:20:35:18:2b:31:78:e0:de:1c: fd:12:75:81:81:03:43:f4:31:35:9f:03:2b:c5:43: 2d:b2:65:af:00:f6:8c:15:0a:2a:08:60:68:06:7c: b0:2d:0c:d9:13:fb:53:c1:2e:f7:3a:d8:d9:75:5c: 8f:39:d5:db:00:32:26:4b:bf:83:37:51:c8:b6:c5: 21:ad:4e:1b:26:9a:e6:9a:18:bf:69:b5:1f:70:00: 42:1c:bf:22:d2:b1:8a:10:45:ca:5d:09:f9:6b:07: 17:9f:be:01:96:2e:65:51:93:28:c7:d4:b4:a8:1a: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BC:29:3D:93:BB:5A:00:EC:C0:D1:D7:AB:4D:23:25:A2:42:39:06 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zbwpPZO7WgDswNHXq00jJaJCOQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.128.0/24 45.128.234.0/24 83.219.98.0/24 85.31.44.0/24 109.206.240.0/24 185.246.221.0/24 193.47.61.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:fb:64:cf:a4:95:9d:48:ca:ad:a2:b3:a3:31:2b:3f:d7:93: ef:2d:4b:b3:29:8e:85:1f:29:02:26:d8:2e:b4:d6:19:14:12: d4:a4:a5:41:0a:8b:7e:a5:00:6e:a5:e8:84:ba:6b:aa:51:5f: 18:00:1a:6f:94:7e:1c:89:45:43:c8:a5:0f:30:8b:92:d6:08: 98:13:e1:c5:82:0d:30:b6:c9:48:cf:d8:ee:ba:5c:8f:4b:98: 36:46:d6:ba:76:d2:2a:c0:a5:75:8b:b1:2b:5f:b7:d6:c9:75: 00:ad:bf:1e:25:96:b8:ae:a4:21:c7:e5:93:5c:ef:57:67:a4: 90:b7:68:b5:a3:80:6c:91:2a:22:4d:fe:d4:88:87:2f:3e:68: b7:37:a2:dc:9d:e7:60:88:ef:ba:c7:16:66:75:56:57:ef:eb: 50:60:89:80:4d:be:85:9c:95:68:01:36:8b:af:79:fb:a6:4a: f0:08:ad:ad:c5:34:eb:22:25:dc:6c:04:96:49:1f:c6:32:50: bb:58:0b:e4:d1:0b:64:47:11:7e:f7:59:f5:1e:64:a4:51:fe: 8f:db:6f:5e:f7:29:16:7e:8e:ec:7e:d5:ae:df:c6:67:a1:1a: 9f:41:3a:b9:22:ca:f3:62:e1:a5:94:0d:63:ac:db:fb:93:a9: 4e:bf:62:63 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsxwGW6ycTg/j+5DmI4Mn2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE4MTM1NzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGJjMjkzZDkzYmI1YTAwZWNjMGQxZDdhYjRkMjMyNWEyNDIzOTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfHjfIohTb5NSXRjgA6zCgRXD9hU jZ+ZOh7TSEjqcb2AvvH1AN75FE4K0hCQJPOBJtf29oJLpF7QGqgGpUGYz2onrR1K FZ+wQpFdKdfognImGo72dX9TFVOmhVN01kKdLPwEg2OQ7eZ2m04CM8MsuQ4l0JRU +CXNYJ0Sbp7m3KP0N6gPbAHdLx/jgisgNRgrMXjg3hz9EnWBgQND9DE1nwMrxUMt smWvAPaMFQoqCGBoBnywLQzZE/tTwS73OtjZdVyPOdXbADImS7+DN1HItsUhrU4b Jprmmhi/abUfcABCHL8i0rGKEEXKXQn5awcXn74Bli5lUZMox9S0qBpiaQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFM28KT2Tu1oA7MDR16tNIyWiQjkGMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvemJ3cFBaTzdXZ0Rzd05IWHEwMGpKYUpDT1FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAJYuAAwQA LYDqAwQAU9tiAwQAVR8sAwQAbc7wAwQAufbdAwQAwS89MA0GCSqGSIb3DQEBCwUA A4IBAQBs+2TPpJWdSMqtorOjMSs/15PvLUuzKY6FHykCJtgutNYZFBLUpKVBCot+ pQBupeiEumuqUV8YABpvlH4ciUVDyKUPMIuS1giYE+HFgg0wtslIz9juulyPS5g2 Rta6dtIqwKV1i7ErX7fWyXUArb8eJZa4rqQhx+WTXO9XZ6SQt2i1o4BskSoiTf7U iIcvPmi3N6LcnedgiO+6xxZmdVZX7+tQYImATb6FnJVoATaLr3n7pkrwCK2txTTr IiXcbASWSR/GMlC7WAvk0QtkRxF+91n1HmSkUf6P229e9ykWfo7sftWu38ZnoRqf QTq5IsrzYuGllA1jrNv7k6lOv2Jj -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:33 2025 by rpki-client