This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/z2qHkp8Ova3H-EIkw2NTnRO7gkI.roa File: z2qHkp8Ova3H-EIkw2NTnRO7gkI.roa (raw, json) Hash identifier: Fn5hALb1mtYFrLnSFaezik3eBlSVyODyp/ngNt1Q1jU= Subject key identifier: CF:6A:87:92:9F:0E:BD:AD:C7:F8:42:24:C3:63:53:9D:13:BB:82:42 Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Certificate serial: 019B33CFB89A134AC0FCE698050D353FF0DD Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/z2qHkp8Ova3H-EIkw2NTnRO7gkI.roa Signing time: Thu 18 Dec 2025 23:33:29 +0000 ROA not before: Thu 18 Dec 2025 23:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215759 IP address blocks: 176.116.126.0/24 maxlen: 24 193.105.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:cf:b8:9a:13:4a:c0:fc:e6:98:05:0d:35:3f:f0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Validity Not Before: Dec 18 23:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf6a87929f0ebdadc7f84224c363539d13bb8242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:69:5d:e2:3a:a7:d1:4f:9e:05:e9:bb:9d:c6: 1d:69:d4:bc:da:5e:0c:5f:28:ab:29:9a:54:d0:f3: b1:08:64:7e:d3:c1:df:18:66:4a:27:a4:54:31:48: c8:74:87:b5:c0:a5:38:d8:db:13:2f:95:d9:08:b0: 0d:99:4b:ec:60:2a:1e:4b:61:30:c7:70:cb:31:7a: 3a:62:77:94:16:5a:76:55:dd:a8:91:55:ab:4e:98: 2f:43:03:a0:de:c6:a6:9e:38:fc:bf:cb:ea:31:c1: 87:03:20:2f:c8:6b:9d:36:9a:42:7d:99:b0:f3:bc: 10:6d:2d:69:31:6a:8d:a7:4c:d1:49:0f:2f:b2:e9: bb:63:af:e5:cd:f4:35:d1:3a:9d:4e:12:04:51:32: 29:6a:49:de:4b:7a:fe:26:2a:c7:ac:10:de:b8:6b: 70:67:cc:d0:48:2f:87:61:09:5c:ea:e8:00:cf:2b: 0e:bd:7e:70:89:c1:24:40:63:1a:c4:27:ef:70:55: 2e:d5:5c:30:79:43:c7:64:6f:fc:8d:b9:82:39:7c: 33:9e:64:d6:ec:82:f2:2c:af:53:24:26:7a:15:fb: 55:1a:6b:e5:d5:72:3b:26:d4:06:4d:5b:36:71:0a: ad:d4:e7:e9:09:33:dd:3b:03:d0:10:fa:aa:18:6a: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6A:87:92:9F:0E:BD:AD:C7:F8:42:24:C3:63:53:9D:13:BB:82:42 X509v3 Authority Key Identifier: keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/z2qHkp8Ova3H-EIkw2NTnRO7gkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.126.0/24 193.105.184.0/24 Signature Algorithm: sha256WithRSAEncryption c1:97:94:c4:14:51:b0:a3:13:6e:c1:ce:f8:c3:10:fb:18:5b: be:3f:68:f3:b8:57:8e:d1:cc:01:d0:28:96:8a:c9:b6:4d:20: 27:ac:3c:72:c5:1b:ca:a2:81:4b:8d:d8:8b:62:b7:b8:58:a8: fe:89:29:21:d4:69:c5:35:90:c8:df:ef:c3:7c:6a:3b:4b:ed: 32:cc:ce:be:61:ff:bb:42:71:83:c9:91:88:fd:be:04:04:79: 1b:b2:29:72:cf:f2:21:4c:94:cd:13:47:7e:56:bd:fc:ac:21: 2b:09:22:51:bf:00:eb:d4:3a:b2:de:11:66:bc:1b:60:98:d6: b3:41:05:75:ed:a4:ef:79:6f:df:a5:b7:16:4e:05:61:bb:ff: 5a:dc:ed:b8:23:16:f8:46:63:0e:a8:40:60:ac:e0:a8:1d:ec: 59:e4:0b:d9:69:22:91:87:f3:a0:c6:02:cb:a4:db:64:20:23: f5:18:89:17:2b:29:05:03:60:8d:98:71:ca:b2:6b:2d:a5:e5: a0:d0:ae:b7:9d:7a:5c:a3:3f:1d:14:b3:e2:f9:42:aa:bc:90: dd:36:f9:e5:bc:28:b6:a5:f5:85:cf:68:f6:ba:92:e3:11:a2: 6a:a5:19:18:99:73:c3:55:1c:88:1b:cd:24:0a:26:a4:81:c1: 96:d9:4d:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZszz7iaE0rA/OaYBQ01P/DdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5 ZmYzMjQwHhcNMjUxMjE4MjMzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjZhODc5MjlmMGViZGFkYzdmODQyMjRjMzYzNTM5ZDEzYmI4MjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62ld4jqn0U+eBem7ncYdadS82l4M XyirKZpU0POxCGR+08HfGGZKJ6RUMUjIdIe1wKU42NsTL5XZCLANmUvsYCoeS2Ew x3DLMXo6YneUFlp2Vd2okVWrTpgvQwOg3samnjj8v8vqMcGHAyAvyGudNppCfZmw 87wQbS1pMWqNp0zRSQ8vsum7Y6/lzfQ10TqdThIEUTIpakneS3r+JirHrBDeuGtw Z8zQSC+HYQlc6ugAzysOvX5wicEkQGMaxCfvcFUu1VwweUPHZG/8jbmCOXwznmTW 7ILyLK9TJCZ6FftVGmvl1XI7JtQGTVs2cQqt1OfpCTPdOwPQEPqqGGqC8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM9qh5KfDr2tx/hCJMNjU50Tu4JCMB8GA1UdIwQY MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt ZjRiN2IzOThjNjM0LzEvejJxSGtwOE92YTNILUVJa3cyTlRuUk83Z2tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0 LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsHR+AwQA wWm4MA0GCSqGSIb3DQEBCwUAA4IBAQDBl5TEFFGwoxNuwc74wxD7GFu+P2jzuFeO 0cwB0CiWism2TSAnrDxyxRvKooFLjdiLYre4WKj+iSkh1GnFNZDI3+/DfGo7S+0y zM6+Yf+7QnGDyZGI/b4EBHkbsilyz/IhTJTNE0d+Vr38rCErCSJRvwDr1Dqy3hFm vBtgmNazQQV17aTveW/fpbcWTgVhu/9a3O24Ixb4RmMOqEBgrOCoHexZ5AvZaSKR h/OgxgLLpNtkICP1GIkXKykFA2CNmHHKsmstpeWg0K63nXpcoz8dFLPi+UKqvJDd NvnlvCi2pfWFz2j2upLjEaJqpRkYmXPDVRyIG80kCiakgcGW2U1u -----END CERTIFICATE-----Generated at Sat Dec 20 19:52:01 2025 by rpki-client