This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/zHLIRVvP3DMXL_pxYZ-vISEw8PA.roa File: zHLIRVvP3DMXL_pxYZ-vISEw8PA.roa (raw, json) Hash identifier: rjexzqv/p+4z8m2gvPLKL3b1mTiDMdeytglSUbt0/vU= Subject key identifier: CC:72:C8:45:5B:CF:DC:33:17:2F:FA:71:61:9F:AF:21:21:30:F0:F0 Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Certificate serial: 019B2D226DD5BDA3243D241451123BD67B9C Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/zHLIRVvP3DMXL_pxYZ-vISEw8PA.roa Signing time: Wed 17 Dec 2025 16:26:29 +0000 ROA not before: Wed 17 Dec 2025 16:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44947 IP address blocks: 213.177.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:22:6d:d5:bd:a3:24:3d:24:14:51:12:3b:d6:7b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5 Validity Not Before: Dec 17 16:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc72c8455bcfdc33172ffa71619faf212130f0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:b8:b9:8e:67:e6:af:1d:9b:c8:df:ea:c6: 65:f6:37:31:fb:25:c4:3f:3c:a4:49:8d:fc:0b:f5: 4d:43:12:00:4a:ad:e1:11:fd:ea:b8:49:8c:41:18: d7:e9:13:0b:ed:d2:d0:ef:2d:42:5a:5c:3a:47:69: a9:2a:cc:f6:a5:78:03:ba:a6:42:f3:c7:2b:52:d1: c9:98:a9:d2:20:40:59:2f:f6:bc:14:a5:75:b6:01: fa:de:00:de:6f:63:a5:bf:98:11:18:88:cd:73:b4: 4b:4a:0c:19:bd:2b:17:7b:f6:5b:17:4b:e6:20:62: 7b:f4:fb:88:ee:a7:a6:15:b5:ab:82:d2:57:f0:72: bd:f3:5e:0c:02:47:81:8e:27:eb:e2:f8:b4:63:10: eb:40:2a:cb:b9:40:7a:4d:61:a1:dd:78:64:0c:de: ef:91:cc:a2:8b:20:18:20:32:ec:e1:90:8c:24:88: 41:e6:0d:c5:00:95:49:ff:62:50:58:22:ee:ea:cb: 36:39:7b:b1:4c:cc:b3:55:f1:d3:45:36:a4:55:f9: 61:b2:e2:8b:c6:8c:3a:c3:b9:19:b6:dc:14:d0:6f: db:ad:aa:39:4f:22:34:9a:a0:f8:02:3a:7c:73:c6: 7c:4e:9e:14:4c:2b:78:71:0f:ea:22:f6:8a:ce:94: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:72:C8:45:5B:CF:DC:33:17:2F:FA:71:61:9F:AF:21:21:30:F0:F0 X509v3 Authority Key Identifier: keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/zHLIRVvP3DMXL_pxYZ-vISEw8PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.179.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:84:f3:28:e4:d7:17:05:7f:41:c1:0b:7b:96:bf:89:a0:42: 7c:25:b0:41:39:70:79:22:ec:e5:da:d6:4e:e4:d4:7c:04:17: 90:73:86:74:9c:1c:06:9d:01:ae:5f:d3:14:85:a1:97:66:df: 90:20:8a:38:aa:9d:5d:11:e2:d6:d7:94:3a:a3:70:34:4a:c2: 68:13:55:08:ea:e7:54:fd:7a:e2:0a:ab:09:69:87:1e:98:bf: 19:23:63:85:1d:6b:52:7a:a4:5f:8a:1c:33:59:58:46:95:d0: b4:47:fa:55:b3:98:d2:51:f9:0e:10:fa:b7:4e:85:a6:e4:c1: e0:3e:42:88:6c:c5:ab:8b:c6:66:a3:06:94:6d:14:de:35:19: 08:dd:91:f5:03:89:1a:cd:2f:47:71:fe:c2:d1:26:56:73:98: 3b:b5:f6:f6:e3:6a:b3:66:a3:82:39:b9:8b:3e:18:01:e1:49: c3:48:b0:44:29:58:09:53:d2:69:fb:07:56:bd:8a:c4:e1:01: df:9e:a0:87:9c:01:52:74:1b:8f:77:9a:22:6d:1b:93:e9:69: 62:1c:4c:62:de:3e:a4:74:97:da:5c:7c:ab:68:68:18:c0:b9: 1f:77:e2:55:84:a9:bd:4b:ed:6e:96:1f:38:00:02:b8:53:8c: 36:89:c8:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZstIm3VvaMkPSQUURI71nucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OTRkNTY0MzYwYTUyMWRiNTk4YWVlNmU2YTJmOGQ2Njky MWI2YzUwHhcNMjUxMjE3MTYyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzcyYzg0NTViY2ZkYzMzMTcyZmZhNzE2MTlmYWYyMTIxMzBmMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbi4uY5n5q8dm8jf6sZl9jcx+yXE PzykSY38C/VNQxIASq3hEf3quEmMQRjX6RML7dLQ7y1CWlw6R2mpKsz2pXgDuqZC 88crUtHJmKnSIEBZL/a8FKV1tgH63gDeb2Olv5gRGIjNc7RLSgwZvSsXe/ZbF0vm IGJ79PuI7qemFbWrgtJX8HK9814MAkeBjifr4vi0YxDrQCrLuUB6TWGh3XhkDN7v kcyiiyAYIDLs4ZCMJIhB5g3FAJVJ/2JQWCLu6ss2OXuxTMyzVfHTRTakVflhsuKL xow6w7kZttwU0G/brao5TyI0mqD4Ajp8c8Z8Tp4UTCt4cQ/qIvaKzpTriQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxyyEVbz9wzFy/6cWGfryEhMPDwMB8GA1UdIwQY MBaAFIeU1WQ2ClIdtZiu5uai+NZpIbbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDct NWFmZTBjNDJjZjc3LzEvekhMSVJWdlAzRE1YTF9weFlaLXZJU0V3OFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDctNWFmZTBjNDJjZjc3 LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bGzMA0G CSqGSIb3DQEBCwUAA4IBAQBLhPMo5NcXBX9BwQt7lr+JoEJ8JbBBOXB5Iuzl2tZO 5NR8BBeQc4Z0nBwGnQGuX9MUhaGXZt+QIIo4qp1dEeLW15Q6o3A0SsJoE1UI6udU /XriCqsJaYcemL8ZI2OFHWtSeqRfihwzWVhGldC0R/pVs5jSUfkOEPq3ToWm5MHg PkKIbMWri8ZmowaUbRTeNRkI3ZH1A4kazS9Hcf7C0SZWc5g7tfb242qzZqOCObmL PhgB4UnDSLBEKVgJU9Jp+wdWvYrE4QHfnqCHnAFSdBuPd5oibRuT6WliHExi3j6k dJfaXHyraGgYwLkfd+JVhKm9S+1ulh84AAK4U4w2icii -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:17 2025 by rpki-client