This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/_zmUqQhCVciJwGk7uZChaGPJs4M.roa File: _zmUqQhCVciJwGk7uZChaGPJs4M.roa (raw, json) Hash identifier: 1D+JouwGdlvm3r0Q34pUv/dTvVTrr/w7V35Cp7TClDQ= Subject key identifier: FF:39:94:A9:08:42:55:C8:89:C0:69:3B:B9:90:A1:68:63:C9:B3:83 Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924 Certificate serial: 019B142DE116C7794B255C33D5080C26FED8 Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/_zmUqQhCVciJwGk7uZChaGPJs4M.roa Signing time: Fri 12 Dec 2025 20:08:29 +0000 ROA not before: Fri 12 Dec 2025 20:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35179 IP address blocks: 79.110.192.0/20 maxlen: 24 83.168.64.0/22 maxlen: 22 83.168.71.0/24 maxlen: 24 83.168.72.0/21 maxlen: 24 83.168.80.0/21 maxlen: 21 83.168.88.0/22 maxlen: 22 83.168.100.0/22 maxlen: 24 83.168.104.0/24 maxlen: 24 83.168.108.0/23 maxlen: 23 83.168.111.0/24 maxlen: 24 83.168.114.0/23 maxlen: 23 83.168.116.0/23 maxlen: 23 83.168.120.0/23 maxlen: 23 83.168.126.0/23 maxlen: 23 185.5.216.0/22 maxlen: 24 185.49.29.0/24 maxlen: 24 185.49.30.0/23 maxlen: 23 193.239.56.0/22 maxlen: 24 2a01:96e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:2d:e1:16:c7:79:4b:25:5c:33:d5:08:0c:26:fe:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924 Validity Not Before: Dec 12 20:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff3994a9084255c889c0693bb990a16863c9b383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:58:e7:5a:a5:fc:f1:f1:fd:a7:29:5e:09: 2e:fa:86:7d:27:a9:d3:25:6d:ed:2e:6b:7e:a2:d6: 81:af:28:22:45:29:67:f4:6c:66:a0:91:d3:cc:7b: 6e:3f:e1:86:eb:f2:92:ec:e1:15:49:6b:04:fc:77: a9:95:31:aa:7d:dd:f5:07:93:04:31:79:b9:d3:4e: 69:00:a9:7f:42:7c:1f:c6:12:08:73:6f:09:f2:b8: e3:73:87:9e:f7:d5:4b:76:7e:0a:af:1b:47:63:6f: b4:5a:09:44:87:0d:44:92:2a:3d:c7:15:82:ab:c0: 99:a6:9b:f8:a0:52:a6:ab:25:89:cf:1f:28:0b:70: db:9c:0c:ed:a5:96:5f:b8:06:b2:1d:06:f3:ef:0a: 46:59:e9:92:32:8a:f3:13:4a:f0:d3:b7:e7:26:ed: 69:8e:db:68:dd:6c:a3:dd:e0:00:2e:02:98:9b:33: 56:fd:db:10:5c:2b:c4:85:8d:86:1f:88:81:3d:e3: 5c:c2:8e:10:f4:36:a9:f8:01:e5:21:2d:e0:5d:7c: 4f:08:29:f3:ed:c0:2c:48:84:28:9c:d4:8c:17:14: 80:7d:73:6d:e7:e9:c3:39:8b:da:f5:00:56:f5:56: f7:ac:bb:24:7d:21:67:a1:cf:f6:bc:38:cd:29:31: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:94:A9:08:42:55:C8:89:C0:69:3B:B9:90:A1:68:63:C9:B3:83 X509v3 Authority Key Identifier: keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/_zmUqQhCVciJwGk7uZChaGPJs4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.192.0/20 83.168.64.0/22 83.168.71.0-83.168.91.255 83.168.100.0-83.168.104.255 83.168.108.0/23 83.168.111.0/24 83.168.114.0-83.168.117.255 83.168.120.0/23 83.168.126.0/23 185.5.216.0/22 185.49.29.0-185.49.31.255 193.239.56.0/22 IPv6: 2a01:96e0::/32 Signature Algorithm: sha256WithRSAEncryption 87:4b:3a:f7:16:1b:72:bc:e5:b0:96:4f:3e:44:22:36:68:52: b9:58:a7:94:8c:87:fb:3b:61:a9:9b:39:62:3d:58:e7:29:19: 54:71:01:a0:9e:07:58:25:3a:42:62:d3:1b:2c:09:68:ba:5f: b0:bf:60:c6:a5:ac:b7:d0:68:8f:e2:f9:01:bc:51:d4:46:af: 2c:da:84:d9:2b:fa:7c:93:3c:3b:22:8f:e0:2b:ce:a8:44:9a: a3:9b:2d:3c:8b:12:2b:52:03:83:38:67:e4:90:20:71:80:cc: e7:f4:14:06:7b:33:9d:e3:9e:dd:79:b0:9b:22:e2:69:a9:81: a8:ae:46:5e:68:f4:b2:03:cc:38:f3:9f:f8:41:49:3d:91:a3: 61:2a:c7:55:a1:fb:0c:e9:3e:ac:c2:8e:13:65:91:b5:7c:55: d2:f2:98:25:23:fd:5a:14:6d:e1:05:8c:d0:12:05:9c:24:3a: bd:1a:8f:77:ff:b2:60:8d:d3:ab:cd:3d:72:df:bc:b7:28:f2: 39:4a:49:50:4c:91:1d:cc:45:1f:e7:1f:06:34:ad:0d:1d:70: 38:f1:ff:8b:00:98:50:4d:35:e5:1b:24:6e:51:a3:46:00:73: 0f:b1:3a:41:79:c7:ea:f0:2d:dc:34:23:68:9f:3f:36:c1:cc: d5:ff:5e:b3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZsULeEWx3lLJVwz1QgMJv7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi M2Q5MjQwHhcNMjUxMjEyMjAwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjM5OTRhOTA4NDI1NWM4ODljMDY5M2JiOTkwYTE2ODYzYzliMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhNY51ql/PHx/acpXgku+oZ9J6nT JW3tLmt+otaBrygiRSln9GxmoJHTzHtuP+GG6/KS7OEVSWsE/HeplTGqfd31B5ME MXm5005pAKl/QnwfxhIIc28J8rjjc4ee99VLdn4KrxtHY2+0WglEhw1Ekio9xxWC q8CZppv4oFKmqyWJzx8oC3DbnAztpZZfuAayHQbz7wpGWemSMorzE0rw07fnJu1p jtto3Wyj3eAALgKYmzNW/dsQXCvEhY2GH4iBPeNcwo4Q9Dap+AHlIS3gXXxPCCnz 7cAsSIQonNSMFxSAfXNt5+nDOYva9QBW9Vb3rLskfSFnoc/2vDjNKTEcLQIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFP85lKkIQlXIicBpO7mQoWhjybODMB8GA1UdIwQY MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt ODI0NTFmMzNmNGNhLzEvX3ptVXFRaENWY2lKd0drN3VaQ2hhR1BKczRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBARPbsAD BAJTqEAwDAMEAFOoRwMEAlOoWDAMAwQCU6hkAwQAU6hoAwQBU6hsAwQAU6hvMAwD BAFTqHIDBAFTqHQDBAFTqHgDBAFTqH4DBAK5BdgwDAMEALkxHQMEBbkxAAMEAsHv ODANBAIAAjAHAwUAKgGW4DANBgkqhkiG9w0BAQsFAAOCAQEAh0s69xYbcrzlsJZP PkQiNmhSuVinlIyH+zthqZs5Yj1Y5ykZVHEBoJ4HWCU6QmLTGywJaLpfsL9gxqWs t9Boj+L5AbxR1EavLNqE2Sv6fJM8OyKP4CvOqESao5stPIsSK1IDgzhn5JAgcYDM 5/QUBnszneOe3XmwmyLiaamBqK5GXmj0sgPMOPOf+EFJPZGjYSrHVaH7DOk+rMKO E2WRtXxV0vKYJSP9WhRt4QWM0BIFnCQ6vRqPd/+yYI3Tq809ct+8tyjyOUpJUEyR HcxFH+cfBjStDR1wOPH/iwCYUE015RskblGjRgBzD7E6QXnH6vAt3DQjaJ8/NsHM 1f9esw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:30:04 2025 by rpki-client