This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/zoYwT4mO3Jfzg0CuPsfcP46uqqE.roa File: zoYwT4mO3Jfzg0CuPsfcP46uqqE.roa (raw, json) Hash identifier: LFEVLbgti4cOxT1G94pEcuPvtHvv2cqrbTH6FxyvPD4= Subject key identifier: CE:86:30:4F:89:8E:DC:97:F3:83:40:AE:3E:C7:DC:3F:8E:AE:AA:A1 Certificate issuer: /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Certificate serial: 019B40037F1EA642E521AFDE50CB1C2183B8 Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/zoYwT4mO3Jfzg0CuPsfcP46uqqE.roa Signing time: Sun 21 Dec 2025 08:25:29 +0000 ROA not before: Sun 21 Dec 2025 08:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208472 IP address blocks: 37.186.31.0/24 maxlen: 24 194.11.247.0/24 maxlen: 24 2a12:7dc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:03:7f:1e:a6:42:e5:21:af:de:50:cb:1c:21:83:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b Validity Not Before: Dec 21 08:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ce86304f898edc97f38340ae3ec7dc3f8eaeaaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:24:5f:01:77:df:ef:ce:f0:9b:ad:73:2d: 30:79:23:9b:c2:52:9b:84:1c:ab:64:55:4a:e7:cf: e2:c3:dc:1b:5f:f0:85:cd:94:61:ac:9d:5c:d4:6b: bf:06:71:8b:6b:2e:0b:25:d0:ff:55:7d:e4:a7:92: 06:eb:06:f5:78:ec:6c:6d:b2:8e:25:67:57:a7:85: 6c:54:61:ff:57:68:78:b4:64:b4:a0:f9:17:e9:fe: e4:b1:0d:27:e5:dd:58:53:48:7a:cc:e3:ff:2d:9c: e6:1d:f0:75:23:f5:29:99:59:b0:ec:05:cd:54:9d: a6:bf:47:b9:fb:b1:ea:5d:de:cd:83:ec:d5:64:1b: 67:6d:af:83:69:e0:5c:aa:8a:14:69:7c:57:c1:38: a5:82:a0:4c:e6:5a:ca:bd:c2:dc:9f:23:23:b0:38: bb:73:a1:01:7c:84:46:fd:93:6e:0d:82:28:00:7f: ea:65:cf:59:6b:01:a1:09:a9:11:1c:d7:15:f2:7f: 8e:5a:56:f8:fd:17:f7:ba:ff:a2:e4:23:51:36:50: b3:6d:27:1c:29:93:92:71:60:d2:a2:8c:74:e5:83: ae:a5:cd:cd:5f:d1:57:0e:a8:63:63:82:ff:ad:76: c0:db:a7:34:20:b2:c5:8f:ba:d2:bc:ac:7a:90:42: de:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:86:30:4F:89:8E:DC:97:F3:83:40:AE:3E:C7:DC:3F:8E:AE:AA:A1 X509v3 Authority Key Identifier: keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/zoYwT4mO3Jfzg0CuPsfcP46uqqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.186.31.0/24 194.11.247.0/24 IPv6: 2a12:7dc0::/29 Signature Algorithm: sha256WithRSAEncryption 09:ab:02:89:80:5e:31:8e:70:f1:ba:d4:82:81:2d:d3:e1:94: 42:3f:ad:93:b1:13:f1:b0:bb:97:78:76:02:21:1f:46:55:33: e9:22:ef:66:63:d7:e3:7a:92:22:6a:57:bb:a7:e1:3d:4c:e2: 4b:ff:c3:f9:7e:cc:59:e0:3b:13:90:28:a6:18:c0:73:d8:28: 92:ec:de:71:43:78:65:3a:5f:60:81:4f:25:8a:ed:b4:a8:e9: 78:98:43:1f:b0:0a:0d:64:77:84:6a:a6:10:9b:11:ee:c8:fc: 1a:c2:12:3f:c3:09:09:07:02:12:c1:51:7d:f9:f1:a9:60:4a: 9c:3e:f2:ce:be:16:19:6d:3d:84:43:69:03:25:e4:3d:71:ff: a3:29:1e:d9:eb:d1:ed:e4:13:0a:9c:92:82:c1:f4:92:05:0a: 88:18:46:b2:8a:1e:00:fc:28:a1:43:75:99:39:75:dd:ff:ee: 54:b8:d1:be:c8:e2:d0:e8:5f:04:80:da:0e:f0:e4:39:af:97: e2:c6:18:14:94:0c:4f:9c:58:6f:be:77:83:d4:2d:b5:d6:8e: 23:51:54:61:77:ba:a6:29:ff:03:6d:b5:f7:9f:8d:60:6a:d8: cb:f1:45:94:e4:1f:01:a0:42:f4:a7:78:42:e0:f6:30:13:d1: 1d:48:c7:79 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZtAA38epkLlIa/eUMscIYO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ODNiMDJlMTBjYTgyMWJmZTFiZTZlNzUxZDkyY2Y3M2Q2 ZDRjMGIwHhcNMjUxMjIxMDgyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTg2MzA0Zjg5OGVkYzk3ZjM4MzQwYWUzZWM3ZGMzZjhlYWVhYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUIkXwF33+/O8Jutcy0weSObwlKb hByrZFVK58/iw9wbX/CFzZRhrJ1c1Gu/BnGLay4LJdD/VX3kp5IG6wb1eOxsbbKO JWdXp4VsVGH/V2h4tGS0oPkX6f7ksQ0n5d1YU0h6zOP/LZzmHfB1I/UpmVmw7AXN VJ2mv0e5+7HqXd7Ng+zVZBtnba+DaeBcqooUaXxXwTilgqBM5lrKvcLcnyMjsDi7 c6EBfIRG/ZNuDYIoAH/qZc9ZawGhCakRHNcV8n+OWlb4/Rf3uv+i5CNRNlCzbScc KZOScWDSoox05YOupc3NX9FXDqhjY4L/rXbA26c0ILLFj7rSvKx6kELeawIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFM6GME+JjtyX84NArj7H3D+OrqqhMB8GA1UdIwQY MBaAFBmDsC4QyoIb/hvm51HZLPc9bUwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEt Y2RhMzYyNTYyOTZjLzEvem9Zd1Q0bU8zSmZ6ZzBDdVBzZmNQNDZ1cXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTZjMTctZGQ4My00MDU4LTgyZTEtY2RhMzYyNTYyOTZj LzEvR1lPd0xoREtnaHYtRy1iblVka3M5ejF0VEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAJbofAwQA wgv3MA0EAgACMAcDBQMqEn3AMA0GCSqGSIb3DQEBCwUAA4IBAQAJqwKJgF4xjnDx utSCgS3T4ZRCP62TsRPxsLuXeHYCIR9GVTPpIu9mY9fjepIiale7p+E9TOJL/8P5 fsxZ4DsTkCimGMBz2CiS7N5xQ3hlOl9ggU8liu20qOl4mEMfsAoNZHeEaqYQmxHu yPwawhI/wwkJBwISwVF9+fGpYEqcPvLOvhYZbT2EQ2kDJeQ9cf+jKR7Z69Ht5BMK nJKCwfSSBQqIGEayih4A/CihQ3WZOXXd/+5UuNG+yOLQ6F8EgNoO8OQ5r5fixhgU lAxPnFhvvneD1C211o4jUVRhd7qmKf8DbbX3n41gatjL8UWU5B8BoEL0p3hC4PYw E9EdSMd5 -----END CERTIFICATE-----Generated at Tue Dec 23 00:41:23 2025 by rpki-client