This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/zWe-2uJNImubwzG3IlmtCAkjQSs.roa File: zWe-2uJNImubwzG3IlmtCAkjQSs.roa (raw, json) Hash identifier: uUjVrchrie7sAD2HJ9tEPZTxYEkaoLKxeE56PKgx3So= Subject key identifier: CD:67:BE:DA:E2:4D:22:6B:9B:C3:31:B7:22:59:AD:08:09:23:41:2B Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Certificate serial: 019B31C6C8151A9608BADC63BC7B38319FA7 Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/zWe-2uJNImubwzG3IlmtCAkjQSs.roa Signing time: Thu 18 Dec 2025 14:04:29 +0000 ROA not before: Thu 18 Dec 2025 14:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57797 IP address blocks: 81.27.84.0/24 maxlen: 24 209.131.64.0/21 maxlen: 21 2a12:8ac0::/29 maxlen: 48 2a12:8ac0::/40 maxlen: 48 2a12:8ac1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c6:c8:15:1a:96:08:ba:dc:63:bc:7b:38:31:9f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e Validity Not Before: Dec 18 14:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd67bedae24d226b9bc331b72259ad080923412b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:84:e0:3b:44:78:55:97:9a:9f:72:ac:d2: 49:c0:aa:e4:ae:b3:f8:9f:66:eb:71:cb:93:d4:f1: a7:32:a6:95:0c:b5:1b:02:d3:9b:04:28:61:d0:58: f0:59:a5:52:66:11:29:09:30:f3:c5:0c:cb:a0:69: 5f:76:2f:5f:94:24:f6:74:b5:aa:6f:dd:79:b7:0c: 74:d9:c6:4f:f9:61:b8:05:6c:ea:3f:d3:a3:f6:20: d6:f7:60:11:9f:76:4a:3a:7a:a1:d2:d4:ba:be:d1: da:18:05:2d:73:ab:e2:62:86:9c:0f:19:98:86:7b: 3a:7a:0a:e8:6e:8f:4d:bc:b0:2e:cc:42:1e:c1:a5: 64:4b:1a:e7:a1:de:2f:5d:68:23:3d:b4:8d:4c:89: 21:6c:88:31:9b:55:c7:35:6b:9a:46:39:a1:20:fd: 19:8b:de:8c:68:c7:66:d5:b2:f0:3d:b5:78:72:21: 55:b2:e5:9d:77:8f:11:6f:29:86:18:64:a2:be:2e: 90:2b:3d:38:f4:6d:9f:93:a3:57:ab:7b:05:09:a3: 8c:46:6e:e2:75:cd:e6:75:b8:b4:18:53:3f:1d:fe: 94:4c:e7:5f:68:fb:c8:b2:8f:34:54:26:24:d3:5a: f6:f5:fe:8c:f9:ab:79:1a:3f:c8:20:77:58:38:28: e2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:67:BE:DA:E2:4D:22:6B:9B:C3:31:B7:22:59:AD:08:09:23:41:2B X509v3 Authority Key Identifier: keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/zWe-2uJNImubwzG3IlmtCAkjQSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.27.84.0/24 209.131.64.0/21 IPv6: 2a12:8ac0::/29 Signature Algorithm: sha256WithRSAEncryption 5e:24:6e:c8:cd:67:35:62:f0:c6:48:86:67:e1:6c:50:f9:fb: 4a:62:0a:7e:e7:99:7f:b7:47:88:52:c2:92:b8:3a:30:34:df: f6:c2:33:0d:c7:7b:8b:d5:df:91:12:fc:6c:3f:72:8e:38:21: e2:7f:25:03:21:dd:fb:f9:c3:c9:aa:fe:ee:37:40:de:0d:5d: 6c:12:3a:a2:06:20:fc:2f:3c:53:38:c8:f4:bb:4d:2a:81:44: 9a:61:e0:4f:05:24:25:e4:d0:ad:0a:81:05:dc:c8:cf:58:55: 45:94:a6:bb:20:d5:9a:f4:31:78:66:a9:93:a4:ab:3a:fd:27: 52:21:02:c2:c2:5b:77:db:80:84:25:f8:a6:8e:fc:b3:e7:0a: 6c:45:47:ee:26:4c:ed:2c:ad:88:79:fd:b7:ce:b9:16:9c:34: 5a:69:94:51:e8:30:24:e2:f3:0e:b5:b4:b6:aa:63:c1:40:24: a0:58:22:52:56:c7:2c:db:d8:10:36:7b:fa:bf:47:2f:ef:7e: f2:4c:cb:b6:b3:39:85:f0:f5:57:a2:b9:7f:ba:49:56:ab:c3: 5f:64:59:3f:34:f9:6a:0f:23:35:3f:b8:0a:af:2a:71:ab:a7: 23:98:68:03:79:3e:5c:68:4a:b6:ac:7e:d0:16:e2:60:3d:e8: 7c:51:08:3a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsxxsgVGpYIutxjvHs4MZ+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm MTlmN2UwHhcNMjUxMjE4MTQwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDY3YmVkYWUyNGQyMjZiOWJjMzMxYjcyMjU5YWQwODA5MjM0MTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAWE4DtEeFWXmp9yrNJJwKrkrrP4 n2brccuT1PGnMqaVDLUbAtObBChh0FjwWaVSZhEpCTDzxQzLoGlfdi9flCT2dLWq b915twx02cZP+WG4BWzqP9Oj9iDW92ARn3ZKOnqh0tS6vtHaGAUtc6viYoacDxmY hns6egrobo9NvLAuzEIewaVkSxrnod4vXWgjPbSNTIkhbIgxm1XHNWuaRjmhIP0Z i96MaMdm1bLwPbV4ciFVsuWdd48RbymGGGSivi6QKz049G2fk6NXq3sFCaOMRm7i dc3mdbi0GFM/Hf6UTOdfaPvIso80VCYk01r29f6M+at5Gj/IIHdYOCji+QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFM1nvtriTSJrm8MxtyJZrQgJI0ErMB8GA1UdIwQY MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt ZGE0NTM4MDIyYWM3LzEveldlLTJ1Sk5JbXVid3pHM0lsbXRDQWtqUVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3 LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAURtUAwQD 0YNAMA0EAgACMAcDBQMqEorAMA0GCSqGSIb3DQEBCwUAA4IBAQBeJG7IzWc1YvDG SIZn4WxQ+ftKYgp+55l/t0eIUsKSuDowNN/2wjMNx3uL1d+REvxsP3KOOCHifyUD Id37+cPJqv7uN0DeDV1sEjqiBiD8LzxTOMj0u00qgUSaYeBPBSQl5NCtCoEF3MjP WFVFlKa7INWa9DF4ZqmTpKs6/SdSIQLCwlt324CEJfimjvyz5wpsRUfuJkztLK2I ef23zrkWnDRaaZRR6DAk4vMOtbS2qmPBQCSgWCJSVscs29gQNnv6v0cv737yTMu2 szmF8PVXorl/uklWq8NfZFk/NPlqDyM1P7gKrypxq6cjmGgDeT5caEq2rH7QFuJg Peh8UQg6 -----END CERTIFICATE-----Generated at Sat Dec 20 07:57:49 2025 by rpki-client