This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/zXpX2tNMkJc7SPlmVyvpO1TvqNE.roa File: zXpX2tNMkJc7SPlmVyvpO1TvqNE.roa (raw, json) Hash identifier: ztMM/7opSwFG8FGp8MNqecksJgZ+lJ5PwZvH3f2XH3I= Subject key identifier: CD:7A:57:DA:D3:4C:90:97:3B:48:F9:66:57:2B:E9:3B:54:EF:A8:D1 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B0C6A4562845F1947B00E4CFF7DFB5E5B Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/zXpX2tNMkJc7SPlmVyvpO1TvqNE.roa Signing time: Thu 11 Dec 2025 07:57:29 +0000 ROA not before: Thu 11 Dec 2025 07:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3218 IP address blocks: 193.232.2.0/24 maxlen: 24 193.232.3.0/24 maxlen: 24 193.232.4.0/24 maxlen: 24 193.232.6.0/24 maxlen: 24 193.232.9.0/24 maxlen: 24 193.232.10.0/24 maxlen: 24 193.232.12.0/24 maxlen: 24 193.232.28.0/24 maxlen: 24 193.232.31.0/24 maxlen: 24 193.232.192.0/22 maxlen: 24 193.232.196.0/23 maxlen: 24 193.232.207.0/24 maxlen: 24 193.232.212.0/24 maxlen: 24 193.232.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:6a:45:62:84:5f:19:47:b0:0e:4c:ff:7d:fb:5e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Dec 11 07:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd7a57dad34c90973b48f966572be93b54efa8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e2:43:75:d0:cd:98:17:17:d4:c1:d8:29:b7: 00:1e:4f:d4:39:a4:94:57:5c:07:5e:aa:7b:dc:2b: 4c:cf:ef:49:0a:93:77:c4:a4:d3:00:9a:1a:24:13: 95:26:21:46:21:53:a0:81:9b:93:4e:3d:63:ad:b0: 11:bc:f2:06:e9:ec:84:f1:e3:70:24:15:3c:62:66: a9:45:f5:83:2d:b6:a9:35:02:19:90:3e:5f:e2:9d: 8f:f0:f1:fd:9a:42:22:59:18:07:26:06:bb:76:83: 03:83:d7:7c:a5:57:4e:3b:7b:9c:38:d2:fd:74:5a: f1:6f:9b:e2:62:c0:90:9d:0c:8e:9d:f8:6d:1a:9f: cf:2e:9f:39:19:42:cb:04:6b:ff:4c:ce:e2:e2:31: 75:00:5e:7d:eb:1e:b4:5b:05:af:4f:00:25:10:8b: 51:f4:8c:60:4e:39:90:b6:8f:e4:8c:0b:35:b4:08: 9a:12:db:43:08:a7:47:5d:78:bf:4c:a9:1b:af:c6: 59:6d:c6:d9:2d:1e:b5:34:39:de:54:05:72:73:e8: 5d:dc:5d:f8:fa:96:3e:2a:cf:8f:c2:90:da:d4:df: e3:fc:0f:c4:61:b4:77:e2:a4:e8:f7:ff:4d:aa:f1: d8:5d:ba:1e:19:df:ee:76:c7:2b:d9:2c:ae:8e:1a: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7A:57:DA:D3:4C:90:97:3B:48:F9:66:57:2B:E9:3B:54:EF:A8:D1 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/zXpX2tNMkJc7SPlmVyvpO1TvqNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.2.0-193.232.4.255 193.232.6.0/24 193.232.9.0-193.232.10.255 193.232.12.0/24 193.232.28.0/24 193.232.31.0/24 193.232.192.0-193.232.197.255 193.232.207.0/24 193.232.212.0/24 193.232.218.0/23 Signature Algorithm: sha256WithRSAEncryption 28:2c:fe:d4:1d:ca:2b:85:4b:f0:99:c7:b6:c5:2b:98:04:7b: e0:50:a1:31:6c:c2:c0:aa:f8:51:73:26:55:3d:8a:d2:80:05: 83:9a:97:d0:59:9d:80:b7:1d:9b:dd:b4:8a:e3:cb:1d:b8:67: 2a:7f:45:6b:4c:57:93:e3:a7:55:c0:5f:5f:52:b1:5f:fd:15: a3:f5:57:07:54:dd:34:69:68:7b:81:26:7d:07:5f:a4:a3:9e: 37:2f:4a:fa:90:e7:29:23:c3:dd:18:81:75:36:bd:91:b1:14: bd:33:6f:7c:11:b3:4f:aa:eb:a2:51:af:72:1b:b7:2c:74:3a: 18:ac:a2:5d:2e:48:a4:d2:aa:84:73:05:a8:9f:31:e3:c5:06: 8a:47:13:7d:bf:2f:ed:12:d4:62:02:5f:76:7f:3c:02:de:70: 97:f4:65:e5:97:75:a3:0f:b9:3c:f3:f6:76:20:72:03:c5:9f: d2:a5:d6:bd:2a:38:81:12:80:ef:09:f7:3f:25:d4:3e:d0:30: 8e:db:c8:d7:03:2f:0e:86:ee:b7:5b:1f:3d:91:b8:4e:1f:45: 96:c5:84:19:40:63:ce:6f:17:f6:e6:a1:c6:5e:3b:30:82:c2: a5:9f:14:20:88:57:a1:8b:28:c0:d7:46:a1:19:58:20:0f:13: d4:e5:19:e6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZsMakVihF8ZR7AOTP99+15bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjUxMjExMDc1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDdhNTdkYWQzNGM5MDk3M2I0OGY5NjY1NzJiZTkzYjU0ZWZhOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleJDddDNmBcX1MHYKbcAHk/UOaSU V1wHXqp73CtMz+9JCpN3xKTTAJoaJBOVJiFGIVOggZuTTj1jrbARvPIG6eyE8eNw JBU8YmapRfWDLbapNQIZkD5f4p2P8PH9mkIiWRgHJga7doMDg9d8pVdOO3ucONL9 dFrxb5viYsCQnQyOnfhtGp/PLp85GULLBGv/TM7i4jF1AF596x60WwWvTwAlEItR 9IxgTjmQto/kjAs1tAiaEttDCKdHXXi/TKkbr8ZZbcbZLR61NDneVAVyc+hd3F34 +pY+Ks+PwpDa1N/j/A/EYbR34qTo9/9NqvHYXboeGd/udscr2SyujhpY5QIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFM16V9rTTJCXO0j5Zlcr6TtU76jRMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvelhwWDJ0Tk1rSmM3U1BsbVZ5dnBPMVR2cU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUMAwDBAHB6AID BADB6AQDBADB6AYwDAMEAMHoCQMEAMHoCgMEAMHoDAMEAMHoHAMEAMHoHzAMAwQG wejAAwQBwejEAwQAwejPAwQAwejUAwQBwejaMA0GCSqGSIb3DQEBCwUAA4IBAQAo LP7UHcorhUvwmce2xSuYBHvgUKExbMLAqvhRcyZVPYrSgAWDmpfQWZ2Atx2b3bSK 48sduGcqf0VrTFeT46dVwF9fUrFf/RWj9VcHVN00aWh7gSZ9B1+ko543L0r6kOcp I8PdGIF1Nr2RsRS9M298EbNPquuiUa9yG7csdDoYrKJdLkik0qqEcwWonzHjxQaK RxN9vy/tEtRiAl92fzwC3nCX9GXll3WjD7k88/Z2IHIDxZ/Spda9KjiBEoDvCfc/ JdQ+0DCO28jXAy8Ohu63Wx89kbhOH0WWxYQZQGPObxf25qHGXjswgsKlnxQgiFeh iyjA10ahGVggDxPU5Rnm -----END CERTIFICATE-----Generated at Wed Dec 17 15:10:38 2025 by rpki-client