This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/zbkzWMlO1Ta0rxMfLrsnYTB9G1w.roa File: zbkzWMlO1Ta0rxMfLrsnYTB9G1w.roa (raw, json) Hash identifier: IhofrVx4J0U+sIOoPMcn9KDgN1QB90+EVdLkMUV1d1g= Subject key identifier: CD:B9:33:58:C9:4E:D5:36:B4:AF:13:1F:2E:BB:27:61:30:7D:1B:5C Certificate issuer: /CN=b262bf21de51385859416c4c608001e2025a5d25 Certificate serial: 019B1D225BFFF8FEAA43A5ADE4FB7B516550 Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/zbkzWMlO1Ta0rxMfLrsnYTB9G1w.roa Signing time: Sun 14 Dec 2025 13:52:29 +0000 ROA not before: Sun 14 Dec 2025 13:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57793 IP address blocks: 130.193.78.0/24 maxlen: 24 185.19.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:22:5b:ff:f8:fe:aa:43:a5:ad:e4:fb:7b:51:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25 Validity Not Before: Dec 14 13:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cdb93358c94ed536b4af131f2ebb2761307d1b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:00:92:e0:5b:45:98:3d:ff:64:fa:b8:79: 2a:70:32:22:fe:92:b0:3c:4d:02:46:62:fe:61:14: e2:d6:57:c7:ef:cf:d3:c1:43:ce:da:a6:45:06:70: 0a:96:c5:b0:31:fe:80:45:83:0e:1e:fe:92:99:18: 81:81:0a:71:ff:08:c5:2e:6d:51:68:f3:d1:ae:88: 54:7f:55:84:dd:a4:52:d9:8b:d8:8e:91:de:c3:3b: 83:9b:fe:79:10:56:4b:a9:c3:d4:0b:a7:73:9e:42: 7f:fc:5a:b5:50:36:dc:11:78:99:f7:0b:83:b5:9f: 8d:73:95:7b:fd:6b:82:f8:d7:7f:22:ad:e1:b4:e9: f7:df:fe:e2:c3:7b:d3:54:b6:aa:9e:4a:85:0c:6d: d4:70:a3:c6:81:d5:ff:b6:a7:21:f3:60:3b:e3:20: a2:ff:e0:5c:d0:45:68:dd:b7:0f:dd:c9:1a:a7:e3: f6:c8:90:77:11:d1:9a:0c:35:04:7b:11:22:82:94: 8d:b2:b9:0e:b3:3f:9a:29:32:97:3c:35:2f:3b:ef: 8f:ea:34:82:d9:de:50:44:3a:fc:5c:44:fa:76:a7: 21:70:09:42:b0:05:7c:ee:2a:6f:ca:4f:82:01:03: b1:ad:22:c5:de:fd:4e:26:96:bb:50:78:fd:08:1c: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B9:33:58:C9:4E:D5:36:B4:AF:13:1F:2E:BB:27:61:30:7D:1B:5C X509v3 Authority Key Identifier: keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/zbkzWMlO1Ta0rxMfLrsnYTB9G1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.78.0/24 185.19.150.0/24 Signature Algorithm: sha256WithRSAEncryption 92:d8:f8:c9:36:d9:9f:a0:68:8b:a3:fc:63:2a:7f:47:a7:15: c8:1e:dc:51:80:ef:fc:33:7b:aa:d6:79:16:30:ba:95:56:32: e3:f8:26:58:35:36:ad:44:19:45:22:c3:ba:b6:89:41:9d:0f: 9c:ea:98:1e:42:d1:1c:e7:c2:0e:c4:df:48:94:ae:29:d6:37: bf:93:b8:91:69:fe:a9:17:bf:38:22:d3:76:26:62:f2:a8:19: d6:2a:28:28:08:b6:ed:f0:5f:dd:42:4a:dc:21:f7:96:31:5b: 19:9c:87:62:4e:33:bd:69:15:96:93:73:ad:dd:d0:db:3b:10: 12:2c:fb:55:f8:ed:b0:03:23:22:6c:dd:d0:33:18:03:a6:9d: d8:89:4a:d6:16:e9:40:5d:4e:2d:c2:43:ff:50:4f:be:7f:d9: 90:fc:60:b1:98:95:c1:26:e5:e1:cb:6d:8f:1d:43:9d:52:c3: 8b:26:c0:d1:5b:5f:44:f8:9d:1c:b5:00:de:68:d3:7e:9f:bd: b3:2e:01:19:6c:34:94:7d:47:01:c9:04:7b:6a:a1:63:13:96: 0f:2b:2c:3d:b0:71:b1:ba:47:dd:2b:b9:60:c5:8c:57:5a:3d: 26:4b:38:f9:96:44:de:1c:bc:55:4c:16:df:57:4d:aa:5e:8f: 22:17:b4:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsdIlv/+P6qQ6Wt5Pt7UWVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNjJiZjIxZGU1MTM4NTg1OTQxNmM0YzYwODAwMWUyMDI1 YTVkMjUwHhcNMjUxMjE0MTM1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGI5MzM1OGM5NGVkNTM2YjRhZjEzMWYyZWJiMjc2MTMwN2QxYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+4AkuBbRZg9/2T6uHkqcDIi/pKw PE0CRmL+YRTi1lfH78/TwUPO2qZFBnAKlsWwMf6ARYMOHv6SmRiBgQpx/wjFLm1R aPPRrohUf1WE3aRS2YvYjpHewzuDm/55EFZLqcPUC6dznkJ//Fq1UDbcEXiZ9wuD tZ+Nc5V7/WuC+Nd/Iq3htOn33/7iw3vTVLaqnkqFDG3UcKPGgdX/tqch82A74yCi /+Bc0EVo3bcP3ckap+P2yJB3EdGaDDUEexEigpSNsrkOsz+aKTKXPDUvO++P6jSC 2d5QRDr8XET6dqchcAlCsAV87ipvyk+CAQOxrSLF3v1OJpa7UHj9CBylcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM25M1jJTtU2tK8THy67J2EwfRtcMB8GA1UdIwQY MBaAFLJivyHeUThYWUFsTGCAAeICWl0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEt MTRjNmM1MDU1Zjg4LzEvemJreldNbE8xVGEwcnhNZkxyc25ZVEI5RzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEtMTRjNmM1MDU1Zjg4 LzEvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgsFOAwQA uROWMA0GCSqGSIb3DQEBCwUAA4IBAQCS2PjJNtmfoGiLo/xjKn9HpxXIHtxRgO/8 M3uq1nkWMLqVVjLj+CZYNTatRBlFIsO6tolBnQ+c6pgeQtEc58IOxN9IlK4p1je/ k7iRaf6pF784ItN2JmLyqBnWKigoCLbt8F/dQkrcIfeWMVsZnIdiTjO9aRWWk3Ot 3dDbOxASLPtV+O2wAyMibN3QMxgDpp3YiUrWFulAXU4twkP/UE++f9mQ/GCxmJXB JuXhy22PHUOdUsOLJsDRW19E+J0ctQDeaNN+n72zLgEZbDSUfUcByQR7aqFjE5YP Kyw9sHGxukfdK7lgxYxXWj0mSzj5lkTeHLxVTBbfV02qXo8iF7QH -----END CERTIFICATE-----Generated at Wed Dec 17 23:27:24 2025 by rpki-client