This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zrYke7PCJd1OgjFZP6XYwEJIRSA.roa
File: zrYke7PCJd1OgjFZP6XYwEJIRSA.roa (raw, json)
Hash identifier: uD4HZqrmKJVSDIqlR1oLRTq7Ftc6Qs9dYopCDxPeGP0=
Subject key identifier: CE:B6:24:7B:B3:C2:25:DD:4E:82:31:59:3F:A5:D8:C0:42:48:45:20
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019B20CDB0B9252653CFE899D21D53C6C226
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zrYke7PCJd1OgjFZP6XYwEJIRSA.roa
Signing time: Mon 15 Dec 2025 06:58:29 +0000
ROA not before: Mon 15 Dec 2025 06:58:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 92.62.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:20:cd:b0:b9:25:26:53:cf:e8:99:d2:1d:53:c6:c2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Dec 15 06:58:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceb6247bb3c225dd4e8231593fa5d8c042484520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:12:aa:e2:23:42:35:2e:96:05:56:2d:7b:46:
e8:f1:f7:32:78:67:b2:30:22:c2:bd:09:1b:23:55:
e7:af:5a:af:52:c2:ee:ba:b2:c9:a6:cc:b6:11:f0:
cc:86:85:82:b5:24:dd:46:01:33:67:6e:e4:e1:bb:
ac:e8:00:40:5d:95:a7:6f:29:c6:7e:03:06:d9:12:
3d:3e:7d:11:0d:79:a2:47:a8:47:14:95:92:b8:86:
71:e9:21:7c:51:9e:72:69:21:6b:e0:e7:46:d4:1d:
ff:5c:24:b6:09:7b:6c:4e:5d:03:14:cb:70:4e:81:
81:84:00:56:57:5c:d6:30:85:92:6c:7e:04:1b:ad:
36:84:d6:16:d5:07:94:6e:22:bb:8f:5f:41:1c:bc:
31:4a:c0:33:a7:a7:48:7a:5f:4b:56:cf:4e:16:a1:
b5:70:1a:d1:e2:40:b0:b2:82:49:38:09:22:b2:e2:
c3:f1:a8:6b:97:d9:22:a7:0a:d5:3f:9f:0a:b2:10:
0f:a6:ea:34:df:97:44:f7:ad:64:13:65:16:8d:c9:
5e:06:05:4b:3c:16:76:5e:25:be:ab:2b:04:15:10:
60:b0:18:6a:f1:c5:e8:2e:cc:7d:a4:e8:46:37:94:
ac:b2:05:40:14:3a:12:96:40:47:cf:4d:57:50:8a:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:24:7B:B3:C2:25:DD:4E:82:31:59:3F:A5:D8:C0:42:48:45:20
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/zrYke7PCJd1OgjFZP6XYwEJIRSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.241.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5b:83:64:15:80:56:39:7c:7f:ed:e2:7c:91:00:e2:6b:f3:
99:cd:be:83:9e:e2:54:d5:6d:86:04:fb:b6:01:45:ce:af:c0:
c8:ea:94:97:eb:2c:14:c3:d0:c1:72:a3:ea:a6:a1:e1:1b:22:
25:d5:1d:41:8d:a7:09:ba:8d:c1:71:fa:63:92:e5:20:6e:73:
55:44:7b:8a:54:aa:ab:f3:c9:7b:7b:42:a2:3e:0c:c0:d5:9b:
9a:93:82:89:9e:04:7d:ec:c8:0e:33:78:b9:ea:39:40:f5:ce:
5b:e7:a4:a5:3d:09:08:d1:22:6b:b3:80:38:cb:ec:82:67:7c:
b3:96:10:3c:ac:2b:59:a9:00:29:8a:d4:6c:2a:3d:f4:1f:25:
db:0b:d8:f1:e9:52:d6:21:99:76:ed:85:be:4e:21:59:37:1f:
62:ca:5e:dc:1f:f9:41:a1:a0:7d:33:25:06:87:2b:e8:00:41:
f1:29:a9:8c:1e:75:ea:b4:dd:56:89:df:e6:be:ae:2a:46:90:
b9:f0:cd:9a:8f:60:bd:12:df:c8:97:58:56:e7:e9:c4:a1:79:
f8:cc:6d:fe:14:e9:45:0f:c9:ea:84:48:d1:06:d7:63:d3:42:
8b:ee:56:12:6d:80:c9:42:cf:50:49:86:fb:9e:45:13:29:4e:
fe:b5:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:20:39 2025 by rpki-client