This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0zMZ8SOlpUUnZ-oANbPoFPAsoeo.roa File: 0zMZ8SOlpUUnZ-oANbPoFPAsoeo.roa (raw, json) Hash identifier: zgBPWtd8z92Sglk9HpDyK2WxJ8evuKp1/GAGaMlRCOw= Subject key identifier: D3:33:19:F1:23:A5:A5:45:27:67:EA:00:35:B3:E8:14:F0:2C:A1:EA Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B29B4703BD424FC5DB997F378B3B0ADA1 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0zMZ8SOlpUUnZ-oANbPoFPAsoeo.roa Signing time: Wed 17 Dec 2025 00:27:29 +0000 ROA not before: Wed 17 Dec 2025 00:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 262287 IP address blocks: 149.126.12.0/24 maxlen: 24 2a0a:8f40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:b4:70:3b:d4:24:fc:5d:b9:97:f3:78:b3:b0:ad:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Dec 17 00:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d33319f123a5a5452767ea0035b3e814f02ca1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:19:fb:5b:a6:6b:3a:b6:f1:61:af:40:68: 21:01:75:0e:1b:e2:f4:45:9c:12:8f:46:4c:b6:a3: c5:ba:2e:b6:e3:11:dc:ab:bf:1e:33:22:6e:60:dc: 2c:7f:00:17:5e:93:b1:5d:30:c1:da:e7:1e:f3:8f: 05:74:7e:4e:68:90:d6:03:53:d9:0e:67:02:cf:76: 8e:5f:c0:ab:1d:86:bb:8b:24:b1:63:fd:35:d3:59: 30:18:1e:5d:6f:0f:ad:b2:19:aa:89:06:10:63:ea: 0b:eb:70:e7:0a:8f:89:6d:11:fe:c2:a6:2e:0d:6c: 27:bd:d1:d5:69:5d:72:a0:ff:a5:97:21:14:b6:43: 58:b6:cf:06:00:8b:64:b0:d7:d4:2f:69:09:5e:3e: 63:db:32:49:d8:12:23:b9:e5:e1:5c:6a:ef:f9:49: 67:0d:88:e7:c4:69:66:5e:a4:5a:a5:da:53:bb:02: 58:46:25:35:c3:95:6a:8d:b6:24:1c:1e:bf:15:d5: ac:45:ef:72:42:a5:01:e7:78:41:9d:66:32:ac:60: 8c:14:c0:9c:2e:cd:fc:de:3e:30:9d:0f:48:bb:85: e7:6a:79:0b:31:36:d2:c5:e4:36:b9:f7:ce:b7:d6: 12:30:ce:db:cb:4e:0d:90:60:e7:b9:08:fb:49:06: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:33:19:F1:23:A5:A5:45:27:67:EA:00:35:B3:E8:14:F0:2C:A1:EA X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/0zMZ8SOlpUUnZ-oANbPoFPAsoeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.126.12.0/24 IPv6: 2a0a:8f40:5::/48 Signature Algorithm: sha256WithRSAEncryption 35:11:2d:e5:e5:d4:95:9d:e3:ab:fd:38:f8:45:ab:cf:73:03: e9:77:e6:59:9b:d8:61:05:b9:19:ea:4b:ba:67:29:42:4c:6d: 7b:dc:04:d3:5b:c3:be:2f:93:12:16:af:df:64:c3:93:0a:53: cb:45:06:ea:c9:58:07:ca:28:ec:3a:4f:9c:27:dc:cb:f5:a4: d7:c6:49:a4:ec:1c:9b:35:ec:df:f5:8a:87:df:9c:43:37:bf: 60:10:93:01:69:a9:f0:b7:cb:1c:c9:ee:07:de:3b:95:e9:b9: 0b:ff:4a:41:f2:f7:b4:91:10:ca:87:77:f6:04:1a:d0:f5:fa: e3:90:6a:58:55:bb:8e:0a:3a:f2:42:03:df:e6:e8:ba:85:04: 7b:4b:be:6c:f0:ef:7f:db:18:f5:f7:26:d4:28:38:19:92:f0: ff:1d:bf:a2:79:e9:c1:44:95:50:b9:68:99:b8:8a:dc:d0:e4: 42:54:90:ed:55:aa:a7:22:e9:2c:1f:fb:46:0d:e5:4c:aa:b4: 80:c2:4b:e3:5c:01:6f:b2:32:c6:ef:4d:2e:ae:1f:67:dc:63: 01:e4:0e:99:27:4c:07:8d:ba:c4:e1:8c:f5:b0:16:e3:8e:39: 38:a8:16:69:41:34:75:68:79:bb:02:fb:f8:17:a6:1d:90:e6: b4:05:d4:76 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZsptHA71CT8XbmX83izsK2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUxMjE3MDAyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzMzMTlmMTIzYTVhNTQ1Mjc2N2VhMDAzNWIzZTgxNGYwMmNhMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu34Z+1umazq28WGvQGghAXUOG+L0 RZwSj0ZMtqPFui624xHcq78eMyJuYNwsfwAXXpOxXTDB2uce848FdH5OaJDWA1PZ DmcCz3aOX8CrHYa7iySxY/0101kwGB5dbw+tshmqiQYQY+oL63DnCo+JbRH+wqYu DWwnvdHVaV1yoP+llyEUtkNYts8GAItksNfUL2kJXj5j2zJJ2BIjueXhXGrv+Uln DYjnxGlmXqRapdpTuwJYRiU1w5VqjbYkHB6/FdWsRe9yQqUB53hBnWYyrGCMFMCc Ls383j4wnQ9Iu4XnankLMTbSxeQ2uffOt9YSMM7by04NkGDnuQj7SQaMxwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNMzGfEjpaVFJ2fqADWz6BTwLKHqMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvMHpNWjhTT2xwVVVuWi1vQU5iUG9GUEFzb2VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlX4MMA8E AgACMAkDBwAqCo9AAAUwDQYJKoZIhvcNAQELBQADggEBADURLeXl1JWd46v9OPhF q89zA+l35lmb2GEFuRnqS7pnKUJMbXvcBNNbw74vkxIWr99kw5MKU8tFBurJWAfK KOw6T5wn3Mv1pNfGSaTsHJs17N/1ioffnEM3v2AQkwFpqfC3yxzJ7gfeO5XpuQv/ SkHy97SREMqHd/YEGtD1+uOQalhVu44KOvJCA9/m6LqFBHtLvmzw73/bGPX3JtQo OBmS8P8dv6J56cFElVC5aJm4itzQ5EJUkO1Vqqci6Swf+0YN5UyqtIDCS+NcAW+y MsbvTS6uH2fcYwHkDpknTAeNusThjPWwFuOOOTioFmlBNHVoebsC+/gXph2Q5rQF 1HY= -----END CERTIFICATE-----Generated at Thu Dec 18 21:52:40 2025 by rpki-client