This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/ZL6u0lt8luh-HpDXiPpT0bFGVhg.roa File: ZL6u0lt8luh-HpDXiPpT0bFGVhg.roa (raw, json) Hash identifier: IHYYygZIFZcrdO0BJNXMBnkNRaemns60cAeVsiOtyzw= Subject key identifier: 64:BE:AE:D2:5B:7C:96:E8:7E:1E:90:D7:88:FA:53:D1:B1:46:56:18 Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a Certificate serial: 019B2C5F6C0F4EE5372CB9FDD347A4E2A002 Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/ZL6u0lt8luh-HpDXiPpT0bFGVhg.roa Signing time: Wed 17 Dec 2025 12:53:29 +0000 ROA not before: Wed 17 Dec 2025 12:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35107 IP address blocks: 87.247.136.0/24 maxlen: 24 87.247.137.0/24 maxlen: 24 87.247.138.0/24 maxlen: 24 87.247.139.0/24 maxlen: 24 89.124.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:5f:6c:0f:4e:e5:37:2c:b9:fd:d3:47:a4:e2:a0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a Validity Not Before: Dec 17 12:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=64beaed25b7c96e87e1e90d788fa53d1b1465618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:2b:42:97:9a:1d:5a:83:f6:ba:ae:79:44: 53:17:b1:5c:c0:89:58:de:2f:66:93:14:09:cb:4c: 19:70:56:94:8b:40:61:11:8e:17:65:af:3c:3c:6c: 4a:df:86:11:1d:00:ed:66:19:a4:ac:ec:1c:78:05: 3f:c9:82:8e:d5:06:60:4c:e3:9f:97:04:0a:20:c5: 7a:07:06:66:1c:b2:21:08:c0:35:87:84:ad:7d:ac: 47:9f:8e:c2:9d:5b:db:2e:7a:51:8a:02:57:b6:9d: 92:b3:59:3b:9a:41:f8:92:4a:f9:66:98:2b:b2:f4: ab:66:25:8d:ac:f7:6a:5a:84:a6:1b:75:0b:1b:f9: 02:0b:58:90:f6:7f:f9:d7:94:ca:d1:a2:a4:b4:8e: 03:9a:e5:2e:b1:fa:74:6e:10:c2:79:e4:09:95:53: d6:6e:06:20:67:47:00:dd:57:6d:48:ed:68:61:0c: ab:5f:5c:cd:6e:fd:39:cc:cd:ec:4f:ef:51:57:bb: 43:8b:4f:a6:f9:bc:c7:91:19:28:a6:60:31:04:92: de:74:b9:78:2b:08:13:cb:de:97:7a:7b:71:05:52: 29:1e:a8:38:2b:22:f1:db:97:77:61:2e:25:8e:a8: 0d:23:85:ec:eb:1b:17:b5:01:3a:c5:d7:70:39:fb: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BE:AE:D2:5B:7C:96:E8:7E:1E:90:D7:88:FA:53:D1:B1:46:56:18 X509v3 Authority Key Identifier: keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/ZL6u0lt8luh-HpDXiPpT0bFGVhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.247.136.0/22 89.124.12.0/22 Signature Algorithm: sha256WithRSAEncryption cd:5c:33:ca:17:14:e4:d4:a6:82:cc:5a:31:60:b1:56:ec:73: 55:05:aa:0e:d7:56:30:7c:3b:bb:46:3a:a8:a2:e7:e4:f9:a8: af:6c:81:fd:05:e6:41:31:91:7f:9e:b3:be:c8:a2:5e:35:26: 35:1c:b2:d3:c3:e6:38:02:c5:ef:a0:c5:af:e1:ce:37:f7:27: 93:b6:78:2f:f9:50:04:ca:7e:bf:3d:f7:b4:f8:bc:13:70:b5: 9b:3f:b2:f2:5b:58:1c:a8:cd:39:7b:f8:99:92:f9:eb:96:9b: e4:6c:a6:99:0e:6b:d6:4d:a9:33:39:4c:19:38:37:fd:8a:9e: 04:ac:ef:b8:62:fc:de:62:9d:d8:a0:85:69:c9:95:27:1c:fd: ce:74:95:8a:2e:11:e0:08:d2:4c:ec:4b:f1:b9:b3:e8:67:44: 37:93:cd:20:6f:76:e5:d4:31:f5:3d:2e:91:64:be:ec:1b:36: f4:e6:dc:ff:ca:5f:86:08:f1:a4:9b:7b:2a:fb:f8:05:56:50: c0:51:80:e1:fe:99:b7:67:0e:36:f1:6e:4d:4f:61:6f:08:db: a9:54:2c:51:72:79:eb:2e:8a:9f:07:69:6a:3c:37:bb:1c:f4: a6:f3:c6:9c:ef:c7:b6:b0:3d:70:bd:4f:ba:6e:cc:f1:d1:28: 19:23:4a:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZssX2wPTuU3LLn900ek4qACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0N2QwMzM3N2NjMTA4ZjQ0MDkxMjZiOWEwYzIwMTYzMjQy MWM2NGEwHhcNMjUxMjE3MTI1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGJlYWVkMjViN2M5NmU4N2UxZTkwZDc4OGZhNTNkMWIxNDY1NjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKwrQpeaHVqD9rqueURTF7FcwIlY 3i9mkxQJy0wZcFaUi0BhEY4XZa88PGxK34YRHQDtZhmkrOwceAU/yYKO1QZgTOOf lwQKIMV6BwZmHLIhCMA1h4StfaxHn47CnVvbLnpRigJXtp2Ss1k7mkH4kkr5Zpgr svSrZiWNrPdqWoSmG3ULG/kCC1iQ9n/515TK0aKktI4DmuUusfp0bhDCeeQJlVPW bgYgZ0cA3VdtSO1oYQyrX1zNbv05zM3sT+9RV7tDi0+m+bzHkRkopmAxBJLedLl4 KwgTy96XentxBVIpHqg4KyLx25d3YS4ljqgNI4Xs6xsXtQE6xddwOfuj9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGS+rtJbfJbofh6Q14j6U9GxRlYYMB8GA1UdIwQY MBaAFPR9Azd8wQj0QJEmuaDCAWMkIcZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgt ZTFkMGZkZDViZmY1LzEvWkw2dTBsdDhsdWgtSHBEWGlQcFQwYkZHVmhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgtZTFkMGZkZDViZmY1 LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCV/eIAwQC WXwMMA0GCSqGSIb3DQEBCwUAA4IBAQDNXDPKFxTk1KaCzFoxYLFW7HNVBaoO11Yw fDu7Rjqooufk+aivbIH9BeZBMZF/nrO+yKJeNSY1HLLTw+Y4AsXvoMWv4c439yeT tngv+VAEyn6/Pfe0+LwTcLWbP7LyW1gcqM05e/iZkvnrlpvkbKaZDmvWTakzOUwZ ODf9ip4ErO+4YvzeYp3YoIVpyZUnHP3OdJWKLhHgCNJM7EvxubPoZ0Q3k80gb3bl 1DH1PS6RZL7sGzb05tz/yl+GCPGkm3sq+/gFVlDAUYDh/pm3Zw428W5NT2FvCNup VCxRcnnrLoqfB2lqPDe7HPSm88ac78e2sD1wvU+6bszx0SgZI0p4 -----END CERTIFICATE-----Generated at Thu Dec 18 23:14:21 2025 by rpki-client