This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/4zOxTq2oMyWiJCiCIMIU-0Ua58Y.roa File: 4zOxTq2oMyWiJCiCIMIU-0Ua58Y.roa (raw, json) Hash identifier: 2GMrPmfPXHRO6HMiDvps0qC1Qdw5U6PIWAf0zs/6xb4= Subject key identifier: E3:33:B1:4E:AD:A8:33:25:A2:24:28:82:20:C2:14:FB:45:1A:E7:C6 Certificate issuer: /CN=cce50cabb6f73862160ef1f9f5054f490a89dff8 Certificate serial: 019B371CC03E83197123946E2637C6C32660 Authority key identifier: CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/4zOxTq2oMyWiJCiCIMIU-0Ua58Y.roa Signing time: Fri 19 Dec 2025 14:56:29 +0000 ROA not before: Fri 19 Dec 2025 14:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21171 IP address blocks: 80.91.32.0/20 maxlen: 20 185.227.124.0/22 maxlen: 22 2a01:9900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:1c:c0:3e:83:19:71:23:94:6e:26:37:c6:c3:26:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce50cabb6f73862160ef1f9f5054f490a89dff8 Validity Not Before: Dec 19 14:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e333b14eada83325a224288220c214fb451ae7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:d8:52:0d:04:f5:1a:27:b5:40:8e:c8:27: a2:0c:d0:74:04:cb:cc:1c:22:ac:1c:e6:30:13:9e: 1b:08:02:8c:24:71:e6:2c:fd:9c:74:a7:dd:39:8a: dd:a2:da:91:67:ce:c9:37:a9:ab:7a:76:91:24:ac: c2:65:84:f9:b3:19:c2:bd:e4:aa:c5:8f:56:30:ae: 2f:be:ed:75:d1:2d:44:b9:fc:0b:fd:63:3a:7c:8d: 87:3f:b8:3e:c0:2f:b1:0c:1f:9e:d2:c5:23:83:98: 27:25:7b:8b:2f:05:db:d6:11:c0:40:56:85:f8:82: b0:b3:08:38:e3:86:0f:8b:5c:20:4e:d8:55:79:a4: 30:29:1f:db:b4:25:ed:3e:c2:ee:0b:6c:ca:b4:bf: d6:e3:05:53:2a:09:f6:b5:58:dd:2a:bc:ed:c1:51: f3:10:a6:21:10:86:3b:ce:3f:8f:10:04:9d:e8:fb: 45:4e:35:87:c0:fb:ac:88:f6:b0:ae:cd:ba:b0:84: 04:b2:e4:b2:e4:ce:87:33:b3:6b:37:b2:0e:9d:eb: b5:0a:41:ef:e6:5d:97:04:4d:ac:72:52:15:36:15: a1:eb:53:50:13:e6:0e:e1:5e:2c:46:73:b3:50:44: ff:db:56:38:0e:e9:ca:01:7f:31:ff:4f:cd:c1:bc: 73:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:33:B1:4E:AD:A8:33:25:A2:24:28:82:20:C2:14:FB:45:1A:E7:C6 X509v3 Authority Key Identifier: keyid:CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/4zOxTq2oMyWiJCiCIMIU-0Ua58Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.32.0/20 185.227.124.0/22 IPv6: 2a01:9900::/32 Signature Algorithm: sha256WithRSAEncryption 49:87:f8:35:40:ac:0e:50:18:fe:77:39:0b:6b:a3:4e:14:50: 37:a1:15:11:3f:ae:37:4a:16:48:6f:82:8a:a2:ad:9a:70:a1: 9e:68:95:da:2a:72:3d:4d:3c:fa:3e:72:35:c3:aa:0d:44:03: b3:db:ef:86:5d:33:58:21:8a:ec:07:40:94:a8:c8:88:85:a6: 3d:23:0c:38:54:3c:56:ab:72:bb:7a:82:e4:fb:91:62:20:bb: 28:9c:e0:0f:12:08:f8:68:aa:b8:76:1c:57:c2:11:51:37:10: 5f:1f:68:42:4e:a1:3c:6a:a5:18:dc:d7:59:c9:54:f8:27:21: 29:dc:5a:d4:8a:03:4f:a2:56:22:9f:1e:71:d9:69:ee:79:fc: 72:bc:43:25:68:97:91:a3:e3:2e:81:0b:ec:00:9e:eb:2c:de: 8b:43:c5:87:96:f2:4e:3e:e9:43:f3:0d:63:b6:f2:7c:68:53: 3c:25:24:54:ab:24:2e:e3:69:1b:ec:8a:06:1d:4e:00:6b:58: 7e:ac:65:5e:a6:d6:cf:cc:5f:9b:1a:29:28:9a:91:fd:9c:d7: 47:c5:dd:49:28:be:3b:ee:c3:4b:dd:cf:10:84:39:29:84:5b: 84:f0:c9:63:e8:88:a0:b3:e9:94:3e:21:ec:c2:35:a7:6c:4c: 02:a3:d0:bc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZs3HMA+gxlxI5RuJjfGwyZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZTUwY2FiYjZmNzM4NjIxNjBlZjFmOWY1MDU0ZjQ5MGE4 OWRmZjgwHhcNMjUxMjE5MTQ1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzMzYjE0ZWFkYTgzMzI1YTIyNDI4ODIyMGMyMTRmYjQ1MWFlN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAvYUg0E9RontUCOyCeiDNB0BMvM HCKsHOYwE54bCAKMJHHmLP2cdKfdOYrdotqRZ87JN6mrenaRJKzCZYT5sxnCveSq xY9WMK4vvu110S1EufwL/WM6fI2HP7g+wC+xDB+e0sUjg5gnJXuLLwXb1hHAQFaF +IKwswg444YPi1wgTthVeaQwKR/btCXtPsLuC2zKtL/W4wVTKgn2tVjdKrztwVHz EKYhEIY7zj+PEASd6PtFTjWHwPusiPawrs26sIQEsuSy5M6HM7NrN7IOneu1CkHv 5l2XBE2sclIVNhWh61NQE+YO4V4sRnOzUET/21Y4DunKAX8x/0/NwbxzowIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOMzsU6tqDMloiQogiDCFPtFGufGMB8GA1UdIwQY MBaAFMzlDKu29zhiFg7x+fUFT0kKid/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9VTXE3YjNPR0lXRHZINTlRVlBTUXFKM19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84MzdlNjQtYzc0NC00NWQ1LThhZDgt ZTUyNDAwNzM5MDliLzEvNHpPeFRxMm9NeVdpSkNpQ0lNSVUtMFVhNThZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84MzdlNjQtYzc0NC00NWQ1LThhZDgtZTUyNDAwNzM5MDli LzEvek9VTXE3YjNPR0lXRHZINTlRVlBTUXFKM19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFsgAwQC ueN8MA0EAgACMAcDBQAqAZkAMA0GCSqGSIb3DQEBCwUAA4IBAQBJh/g1QKwOUBj+ dzkLa6NOFFA3oRURP643ShZIb4KKoq2acKGeaJXaKnI9TTz6PnI1w6oNRAOz2++G XTNYIYrsB0CUqMiIhaY9Iww4VDxWq3K7eoLk+5FiILsonOAPEgj4aKq4dhxXwhFR NxBfH2hCTqE8aqUY3NdZyVT4JyEp3FrUigNPolYinx5x2WnuefxyvEMlaJeRo+Mu gQvsAJ7rLN6LQ8WHlvJOPulD8w1jtvJ8aFM8JSRUqyQu42kb7IoGHU4Aa1h+rGVe ptbPzF+bGikompH9nNdHxd1JKL477sNL3c8QhDkphFuE8Mlj6Iigs+mUPiHswjWn bEwCo9C8 -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:42 2025 by rpki-client