This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/Z7wvN9rsMLOoa1Bg9yTdxH6zuKw.roa File: Z7wvN9rsMLOoa1Bg9yTdxH6zuKw.roa (raw, json) Hash identifier: yuBTcbFOavPo8wZ9TYtxhcOXRCfelMXNi6bhiA5gPyo= Subject key identifier: 67:BC:2F:37:DA:EC:30:B3:A8:6B:50:60:F7:24:DD:C4:7E:B3:B8:AC Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b Certificate serial: 019B124B64EFF6B0DEC8A21CA059FD5FBC16 Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/Z7wvN9rsMLOoa1Bg9yTdxH6zuKw.roa Signing time: Fri 12 Dec 2025 11:21:29 +0000 ROA not before: Fri 12 Dec 2025 11:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34599 IP address blocks: 185.37.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:4b:64:ef:f6:b0:de:c8:a2:1c:a0:59:fd:5f:bc:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b Validity Not Before: Dec 12 11:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67bc2f37daec30b3a86b5060f724ddc47eb3b8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:a2:3c:ae:4f:ca:bb:96:2c:a4:a7:b2:16: ad:0a:ac:25:e7:13:b1:77:6f:1e:3a:88:94:b1:0d: 93:60:80:5f:5c:c5:2a:04:76:d6:fb:89:d0:29:ac: 0d:6a:86:fd:3e:49:5e:54:0b:6e:6a:fe:2d:e8:11: 7d:9d:c8:ae:fb:8d:41:96:a9:6b:b9:4e:14:ab:84: 90:00:76:f4:73:9c:62:c8:05:f1:07:03:fc:26:82: 31:38:4a:95:36:9c:b1:d9:b7:89:da:ae:c0:fa:88: 7f:cc:ab:51:7c:df:f9:5d:56:94:03:31:a4:52:7e: 72:c3:f2:89:4e:87:9a:24:24:ec:25:9c:29:46:03: 20:c5:c8:9c:d2:be:50:37:62:4e:12:84:0c:11:96: 83:74:2e:46:20:18:f9:78:c1:ac:ae:55:5e:b7:1f: 46:d6:80:dd:8d:3b:f3:3e:bb:e6:33:b3:68:59:6d: 20:da:76:ae:7a:41:63:6f:17:c5:30:8d:75:d2:f1: b4:51:1e:45:86:0c:e8:81:b2:92:33:01:3a:d3:8a: 27:64:0b:c9:7b:35:75:af:40:70:a3:3f:ab:85:11: 71:4b:d6:fd:2f:b0:d4:2a:e5:41:5a:e5:c7:c3:71: e4:ea:56:b5:1f:d3:91:cb:60:d8:c8:76:65:6d:3a: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BC:2F:37:DA:EC:30:B3:A8:6B:50:60:F7:24:DD:C4:7E:B3:B8:AC X509v3 Authority Key Identifier: keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/Z7wvN9rsMLOoa1Bg9yTdxH6zuKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.116.0/23 Signature Algorithm: sha256WithRSAEncryption a0:0d:dd:62:eb:0e:07:ee:b9:83:63:90:41:e0:70:d9:08:f2: 22:6e:89:fc:12:ef:61:35:a7:58:9f:da:82:a3:31:ff:ef:4b: 2e:ff:c9:6b:10:d3:b6:68:5a:7a:71:ee:5b:1a:4c:59:9c:a0: 5c:a6:72:f2:40:33:b4:25:6b:af:aa:ec:3b:45:a6:05:f1:a7: 41:6b:f6:88:97:e9:35:ee:66:ca:ec:c3:b9:69:e3:98:b9:ea: 69:a8:13:65:e1:b6:46:6a:41:16:ea:8e:f2:c2:c3:aa:ac:c5: 05:99:c0:bc:b1:17:d2:e8:5d:6d:08:90:99:d2:76:95:46:76: e8:fd:44:3f:e4:2b:f8:85:95:3a:54:63:fc:f4:37:0d:bb:3d: 0d:3f:b5:c8:4a:f1:fa:b9:bb:4b:74:81:5b:39:c2:f2:ee:ed: c6:18:a9:a3:b9:35:ff:7a:99:95:ec:32:48:a9:8a:0e:17:1e: b3:32:26:74:80:da:f8:4b:ec:81:5b:90:a7:8d:95:53:42:05: 76:db:89:5e:41:61:55:6c:16:1d:40:b9:83:6d:24:06:b5:75: 84:9a:9e:46:7f:fb:3b:92:be:0b:01:12:d0:70:4f:f7:2a:7d: 9a:64:e2:ff:6f:51:23:0b:bd:4b:25:b0:ac:e9:94:09:ca:92: cc:18:2b:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSS2Tv9rDeyKIcoFn9X7wWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2ZmFhMGQyZjVkZWMwMjAxZjU1ZTQwOTc5YzE5MDliNmRi NzdjM2IwHhcNMjUxMjEyMTEyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2JjMmYzN2RhZWMzMGIzYTg2YjUwNjBmNzI0ZGRjNDdlYjNiOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkOiPK5PyruWLKSnshatCqwl5xOx d28eOoiUsQ2TYIBfXMUqBHbW+4nQKawNaob9PkleVAtuav4t6BF9nciu+41Blqlr uU4Uq4SQAHb0c5xiyAXxBwP8JoIxOEqVNpyx2beJ2q7A+oh/zKtRfN/5XVaUAzGk Un5yw/KJToeaJCTsJZwpRgMgxcic0r5QN2JOEoQMEZaDdC5GIBj5eMGsrlVetx9G 1oDdjTvzPrvmM7NoWW0g2nauekFjbxfFMI110vG0UR5FhgzogbKSMwE604onZAvJ ezV1r0Bwoz+rhRFxS9b9L7DUKuVBWuXHw3Hk6la1H9ORy2DYyHZlbTotgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGe8Lzfa7DCzqGtQYPck3cR+s7isMB8GA1UdIwQY MBaAFOb6oNL13sAgH1XkCXnBkJttt3w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmIt OGM4ZDEwZThlYWJjLzEvWjd3dk45cnNNTE9vYTFCZzl5VGR4SDZ6dUt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmItOGM4ZDEwZThlYWJj LzEvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSV0MA0G CSqGSIb3DQEBCwUAA4IBAQCgDd1i6w4H7rmDY5BB4HDZCPIibon8Eu9hNadYn9qC ozH/70su/8lrENO2aFp6ce5bGkxZnKBcpnLyQDO0JWuvquw7RaYF8adBa/aIl+k1 7mbK7MO5aeOYueppqBNl4bZGakEW6o7ywsOqrMUFmcC8sRfS6F1tCJCZ0naVRnbo /UQ/5Cv4hZU6VGP89DcNuz0NP7XISvH6ubtLdIFbOcLy7u3GGKmjuTX/epmV7DJI qYoOFx6zMiZ0gNr4S+yBW5CnjZVTQgV224leQWFVbBYdQLmDbSQGtXWEmp5Gf/s7 kr4LARLQcE/3Kn2aZOL/b1EjC71LJbCs6ZQJypLMGCtl -----END CERTIFICATE-----Generated at Sun Dec 21 06:26:16 2025 by rpki-client