This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/zQOZPp0VUdzZwmvDdBIkolKBo5Y.roa File: zQOZPp0VUdzZwmvDdBIkolKBo5Y.roa (raw, json) Hash identifier: aMsmujrcjfYF2sjeUamuDdpHxMQCONRXkGStSS53lTQ= Subject key identifier: CD:03:99:3E:9D:15:51:DC:D9:C2:6B:C3:74:12:24:A2:52:81:A3:96 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019B698B83DAEA5412E6CF2DD1536268F399 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/zQOZPp0VUdzZwmvDdBIkolKBo5Y.roa Signing time: Mon 29 Dec 2025 09:58:29 +0000 ROA not before: Mon 29 Dec 2025 09:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36680 IP address blocks: 176.65.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8b:83:da:ea:54:12:e6:cf:2d:d1:53:62:68:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Dec 29 09:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd03993e9d1551dcd9c26bc3741224a25281a396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:65:67:64:d5:d7:86:ca:92:62:ba:aa:2d: e1:95:b2:69:9a:b6:99:aa:0f:a5:76:0e:bc:ca:3c: 0f:2a:f0:fd:72:31:7b:3a:c5:0e:27:2c:ef:0d:9b: 6c:67:ce:b7:f1:a3:78:09:fe:95:2e:0a:d8:79:73: 1a:2a:7f:37:09:af:31:fd:00:cf:69:5a:25:7b:dd: 36:72:c9:17:ae:cd:d6:b5:f8:08:a2:1e:53:c3:3f: 5c:4e:42:22:9c:82:22:28:62:2e:36:8e:51:70:a7: 59:29:ae:58:c6:6d:0e:f5:03:51:0f:ad:af:40:1d: 68:a0:94:14:45:1b:32:ef:c7:07:6b:88:e0:67:7d: ca:d7:43:7e:5c:13:06:9c:9f:16:a3:a9:d2:31:8a: 49:d2:db:21:1a:15:8d:08:e9:9b:ef:07:3f:8f:c7: 88:3e:e4:a4:a2:54:4b:bc:14:e2:e6:61:47:8b:cd: c8:7e:ec:88:7a:36:7f:b9:67:0e:cd:d4:d7:3e:2e: 3c:01:c4:04:9f:26:c3:f2:62:13:5c:9b:f8:18:fc: fc:de:df:2a:45:99:09:b1:62:c6:1c:ba:a5:f6:d0: 73:88:26:c7:0a:13:42:03:74:8b:f4:64:12:9f:02: ac:60:b6:f7:71:1a:a5:00:ab:99:2e:31:d3:80:00: e0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:03:99:3E:9D:15:51:DC:D9:C2:6B:C3:74:12:24:A2:52:81:A3:96 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/zQOZPp0VUdzZwmvDdBIkolKBo5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.65.134.0/24 Signature Algorithm: sha256WithRSAEncryption 29:34:71:5d:63:74:4b:9d:08:89:61:b4:82:a0:f9:0e:cc:15: 83:3e:ab:9a:5e:95:0a:f8:97:41:ad:ca:26:b0:5b:38:9a:78: 78:52:30:9f:28:90:a6:2f:66:b6:8f:66:72:fe:30:93:30:99: c5:da:73:dc:6b:77:62:09:5a:fd:fd:3d:93:13:4e:88:43:d6: 90:83:8d:54:5b:73:c0:50:08:fb:5f:0d:b7:33:34:29:fa:1b: 52:98:5d:7f:d8:50:95:26:6d:8a:a3:2d:ba:dd:76:34:ed:25: 9c:76:a2:2d:a6:1c:c9:e0:52:31:6c:59:10:ae:60:5b:80:0b: a6:50:9d:ca:2d:1f:e4:dc:b9:7a:d8:92:69:98:90:a7:a3:39: 70:f1:fc:76:95:3c:eb:f2:08:0c:61:53:38:07:00:a2:07:6f: ee:d6:85:c9:eb:b2:0a:aa:0c:b0:4e:af:6e:c6:14:d2:bd:55: f9:3f:a9:53:38:87:40:e8:e0:55:7b:34:52:c6:25:5f:44:86: a3:7a:9e:2e:22:98:a8:b2:b3:7d:a2:b9:4e:3b:bb:4f:cf:40: 29:b4:90:ab:4a:5c:ce:38:fd:35:e0:45:cc:4c:c5:4e:23:71: 80:13:bf:14:57:59:e7:67:e6:ff:77:73:8c:e5:f1:5c:ca:64: ac:60:44:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtpi4Pa6lQS5s8t0VNiaPOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjUxMjI5MDk1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDAzOTkzZTlkMTU1MWRjZDljMjZiYzM3NDEyMjRhMjUyODFhMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV9lZ2TV14bKkmK6qi3hlbJpmraZ qg+ldg68yjwPKvD9cjF7OsUOJyzvDZtsZ8638aN4Cf6VLgrYeXMaKn83Ca8x/QDP aVole902cskXrs3WtfgIoh5Twz9cTkIinIIiKGIuNo5RcKdZKa5Yxm0O9QNRD62v QB1ooJQURRsy78cHa4jgZ33K10N+XBMGnJ8Wo6nSMYpJ0tshGhWNCOmb7wc/j8eI PuSkolRLvBTi5mFHi83IfuyIejZ/uWcOzdTXPi48AcQEnybD8mITXJv4GPz83t8q RZkJsWLGHLql9tBziCbHChNCA3SL9GQSnwKsYLb3cRqlAKuZLjHTgADgZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM0DmT6dFVHc2cJrw3QSJKJSgaOWMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvelFPWlBwMFZVZHpad212RGRCSWtvbEtCbzVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsEGGMA0G CSqGSIb3DQEBCwUAA4IBAQApNHFdY3RLnQiJYbSCoPkOzBWDPquaXpUK+JdBrcom sFs4mnh4UjCfKJCmL2a2j2Zy/jCTMJnF2nPca3diCVr9/T2TE06IQ9aQg41UW3PA UAj7Xw23MzQp+htSmF1/2FCVJm2Koy263XY07SWcdqItphzJ4FIxbFkQrmBbgAum UJ3KLR/k3Ll62JJpmJCnozlw8fx2lTzr8ggMYVM4BwCiB2/u1oXJ67IKqgywTq9u xhTSvVX5P6lTOIdA6OBVezRSxiVfRIajep4uIpiosrN9orlOO7tPz0AptJCrSlzO OP014EXMTMVOI3GAE78UV1nnZ+b/d3OM5fFcymSsYERB -----END CERTIFICATE-----Generated at Tue Dec 30 10:30:25 2025 by rpki-client