This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZVI5Rjc8-2VSz9bFOsX5HOZwFbw.roa File: ZVI5Rjc8-2VSz9bFOsX5HOZwFbw.roa (raw, json) Hash identifier: UmNLAIG56vf6lrLhwm/iEu4j1C1Bqa8wtbUkvQmLlJg= Subject key identifier: 65:52:39:46:37:3C:FB:65:52:CF:D6:C5:3A:C5:F9:1C:E6:70:15:BC Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B6AD402616DF619665020CD25814F6EE6 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZVI5Rjc8-2VSz9bFOsX5HOZwFbw.roa Signing time: Mon 29 Dec 2025 15:57:17 +0000 ROA not before: Mon 29 Dec 2025 15:57:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139205 IP address blocks: 185.65.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d4:02:61:6d:f6:19:66:50:20:cd:25:81:4f:6e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Dec 29 15:57:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65523946373cfb6552cfd6c53ac5f91ce67015bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:52:18:f0:ac:c6:55:a7:e9:37:73:b8:01: 6c:c5:64:fe:ed:fe:08:bc:52:48:a0:c4:0a:f0:35: 11:b8:91:85:29:cf:79:f7:fa:a1:7d:b5:35:9e:b2: 88:61:df:f3:43:b4:a3:96:68:a5:a8:ec:cb:f8:a2: f1:92:3a:5e:92:6c:14:f2:08:13:cf:db:8c:ac:13: ce:0f:a2:4f:3c:e0:3a:b4:b1:18:33:6a:f4:31:a5: 19:f3:f8:0e:1f:a5:07:d4:c5:f8:ac:bb:2e:08:da: a1:3e:bb:f3:83:1e:6a:58:43:89:54:23:fb:5d:ff: 40:0c:ef:4e:66:f5:30:3c:51:f9:b4:bc:6c:ec:92: 98:c5:2e:a3:e8:42:5f:d3:4d:56:31:2c:ee:90:0f: 41:55:e2:6b:ab:3c:d3:19:62:74:aa:e1:08:27:2c: fe:d7:53:c3:30:fa:46:b6:2f:82:2f:83:d3:46:6e: 67:11:76:22:d7:31:77:2d:43:3e:67:d8:47:4c:36: 84:f6:01:60:fe:29:74:a0:59:75:33:69:62:e8:cc: c7:85:c1:d8:c1:08:f3:72:5d:67:2f:4d:7e:96:af: 32:cf:5d:34:56:c1:18:f5:2e:21:84:03:26:9b:b4: 64:7f:21:c6:77:c1:52:7f:34:56:5b:d4:58:5d:4b: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:52:39:46:37:3C:FB:65:52:CF:D6:C5:3A:C5:F9:1C:E6:70:15:BC X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/ZVI5Rjc8-2VSz9bFOsX5HOZwFbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.203.0/24 Signature Algorithm: sha256WithRSAEncryption 14:6f:41:fa:14:f8:f9:2a:ea:2b:19:bc:d3:a5:42:40:7f:ac: 78:9a:17:19:78:d9:ce:a2:52:40:ef:64:58:ee:f0:a8:71:90: b2:2c:7a:4f:06:c5:69:55:44:94:bb:b2:33:09:9a:bb:ca:24: 9f:5c:56:7c:88:82:ab:6f:6c:62:7b:c5:6c:5a:95:08:68:dd: c2:2a:8c:37:a3:1f:07:1b:df:35:a0:da:d5:ac:51:3a:4b:59: b6:90:ea:ba:8a:ea:af:57:0b:4c:75:d0:f5:ef:31:55:af:8d: 84:d1:b9:0f:77:e3:aa:2f:b0:85:3d:19:e9:ac:43:60:3d:7c: cc:ae:bc:c9:b2:a5:be:5e:20:01:39:ff:ce:0f:97:f3:b7:6c: a6:62:1d:d8:18:58:8d:91:fb:d2:fe:c7:43:15:83:21:5e:f9: fa:05:6f:71:2e:12:6a:cf:fb:c4:dd:68:ac:60:0c:c3:48:ec: d5:9d:c6:48:6b:f6:51:2f:05:a0:d0:06:cc:a6:d7:e4:fb:57: bd:e7:7a:bd:81:08:6a:17:ca:6b:91:2a:b3:f0:8e:45:c7:20: 7a:38:c5:3e:e3:f6:59:ce:5e:2c:c0:c4:5f:a2:13:22:b5:c5: b0:cf:c7:24:8b:be:50:ec:aa:be:e5:db:ce:2d:c2:92:5e:92: 52:16:81:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtq1AJhbfYZZlAgzSWBT27mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUxMjI5MTU1NzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTUyMzk0NjM3M2NmYjY1NTJjZmQ2YzUzYWM1ZjkxY2U2NzAxNWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo41SGPCsxlWn6TdzuAFsxWT+7f4I vFJIoMQK8DURuJGFKc959/qhfbU1nrKIYd/zQ7SjlmilqOzL+KLxkjpekmwU8ggT z9uMrBPOD6JPPOA6tLEYM2r0MaUZ8/gOH6UH1MX4rLsuCNqhPrvzgx5qWEOJVCP7 Xf9ADO9OZvUwPFH5tLxs7JKYxS6j6EJf001WMSzukA9BVeJrqzzTGWJ0quEIJyz+ 11PDMPpGti+CL4PTRm5nEXYi1zF3LUM+Z9hHTDaE9gFg/il0oFl1M2li6MzHhcHY wQjzcl1nL01+lq8yz100VsEY9S4hhAMmm7RkfyHGd8FSfzRWW9RYXUt+wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGVSOUY3PPtlUs/WxTrF+RzmcBW8MB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvWlZJNVJqYzgtMlZTejliRk9zWDVIT1p3RmJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUHLMA0G CSqGSIb3DQEBCwUAA4IBAQAUb0H6FPj5KuorGbzTpUJAf6x4mhcZeNnOolJA72RY 7vCocZCyLHpPBsVpVUSUu7IzCZq7yiSfXFZ8iIKrb2xie8VsWpUIaN3CKow3ox8H G981oNrVrFE6S1m2kOq6iuqvVwtMddD17zFVr42E0bkPd+OqL7CFPRnprENgPXzM rrzJsqW+XiABOf/OD5fzt2ymYh3YGFiNkfvS/sdDFYMhXvn6BW9xLhJqz/vE3Wis YAzDSOzVncZIa/ZRLwWg0AbMptfk+1e953q9gQhqF8prkSqz8I5FxyB6OMU+4/ZZ zl4swMRfohMitcWwz8cki75Q7Kq+5dvOLcKSXpJSFoEx -----END CERTIFICATE-----Generated at Wed Dec 31 05:15:37 2025 by rpki-client