This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/zEHHIdG3vc4H4MQ18ECQEGpabUA.roa File: zEHHIdG3vc4H4MQ18ECQEGpabUA.roa (raw, json) Hash identifier: lqID/O1hFyq6iFk/ohsI5EgJyiARLpIUr7bXj4riy1o= Subject key identifier: CC:41:C7:21:D1:B7:BD:CE:07:E0:C4:35:F0:40:90:10:6A:5A:6D:40 Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019B2601C8942FDE3B0E92E0CA7A0A629F7C Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/zEHHIdG3vc4H4MQ18ECQEGpabUA.roa Signing time: Tue 16 Dec 2025 07:13:29 +0000 ROA not before: Tue 16 Dec 2025 07:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 146.19.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:01:c8:94:2f:de:3b:0e:92:e0:ca:7a:0a:62:9f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Dec 16 07:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc41c721d1b7bdce07e0c435f04090106a5a6d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bb:3f:5f:f4:7d:f6:e6:1d:07:c8:17:48:90: f9:ea:6c:24:5e:27:9f:54:07:9d:2c:2e:db:b5:96: 10:54:34:aa:3b:a2:e4:ff:9d:40:c4:96:d5:b0:d2: 44:b9:55:5a:30:b1:9e:38:82:c1:02:58:ff:11:e8: 22:33:02:4d:b1:af:f2:60:81:85:04:eb:8e:10:e2: f4:b0:01:03:c3:6e:46:6d:d4:bd:0a:c5:4e:53:b2: 13:4f:0f:d8:bd:8f:eb:98:c6:b0:69:ee:4a:61:3b: f2:aa:14:83:d0:36:0f:2e:dd:04:47:36:a9:b2:43: 2b:d0:94:51:8a:b0:7a:66:e5:d7:98:7e:59:9a:d1: ab:43:b6:12:b5:83:2f:6b:d9:51:cf:77:0b:ce:f2: 6d:4c:72:84:74:f1:a6:27:26:aa:94:48:f3:ff:51: f2:ca:eb:67:99:03:95:86:00:8e:b8:f5:7b:47:03: fc:c5:50:f2:c4:82:06:31:96:e5:5d:da:55:95:3e: 1e:1a:aa:80:11:38:ae:a8:8d:72:fc:38:01:24:94: b6:13:44:4a:51:9c:64:e2:56:1c:d1:33:08:81:ba: 53:7e:76:95:24:0d:72:17:55:4a:6e:e5:d0:64:9d: 5b:09:c1:c0:a5:be:68:b6:ff:64:9e:77:bb:00:0a: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:41:C7:21:D1:B7:BD:CE:07:E0:C4:35:F0:40:90:10:6A:5A:6D:40 X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/zEHHIdG3vc4H4MQ18ECQEGpabUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.48.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:24:f2:ff:05:26:ee:73:1a:ff:6e:b4:b9:04:36:1a:31:2a: 0d:87:13:ad:42:ce:25:68:25:5a:64:eb:2e:86:56:af:69:b1: 54:52:22:f0:55:07:63:74:7f:85:70:30:a1:f0:f5:05:66:ad: 2b:a1:13:a6:77:72:71:80:ad:74:22:af:d5:97:42:e9:1f:33: 59:04:43:a3:88:19:6a:38:b5:f9:90:13:45:4f:c3:d4:75:03: 80:ec:77:48:63:63:36:33:d3:15:0a:27:bc:4d:76:88:f0:b8: f3:0f:05:73:fe:64:7b:c6:9c:ff:c3:16:06:9e:bb:8a:80:a5: 3f:71:32:ae:56:b8:77:7e:e5:0c:67:26:d5:44:e2:d1:e5:0f: c3:31:b1:db:c5:e8:fc:18:49:37:ab:0c:eb:16:bb:3f:33:94: b6:03:35:5c:66:3a:e6:d1:38:1b:4c:3c:b3:b1:f0:f5:51:97: ef:e9:7a:6b:f1:6b:9e:90:ad:9f:a9:f9:6f:5a:43:a3:9a:4d: 9e:34:7d:d0:a8:79:0c:a9:1f:4a:b0:55:83:c9:f5:5e:67:10: 9b:e8:ca:15:86:9d:b2:9d:3a:f5:56:27:ca:d0:12:16:02:3b: 06:77:40:96:12:8a:8f:1d:c5:b3:48:e9:88:73:f8:d2:31:bd: 24:f9:28:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsmAciUL947DpLgynoKYp98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjUxMjE2MDcxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzQxYzcyMWQxYjdiZGNlMDdlMGM0MzVmMDQwOTAxMDZhNWE2ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rs/X/R99uYdB8gXSJD56mwkXief VAedLC7btZYQVDSqO6Lk/51AxJbVsNJEuVVaMLGeOILBAlj/EegiMwJNsa/yYIGF BOuOEOL0sAEDw25GbdS9CsVOU7ITTw/YvY/rmMawae5KYTvyqhSD0DYPLt0ERzap skMr0JRRirB6ZuXXmH5ZmtGrQ7YStYMva9lRz3cLzvJtTHKEdPGmJyaqlEjz/1Hy yutnmQOVhgCOuPV7RwP8xVDyxIIGMZblXdpVlT4eGqqAETiuqI1y/DgBJJS2E0RK UZxk4lYc0TMIgbpTfnaVJA1yF1VKbuXQZJ1bCcHApb5otv9knne7AAqsKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxBxyHRt73OB+DENfBAkBBqWm1AMB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvekVISElkRzN2YzRINE1RMThFQ1FFR3BhYlVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMwMA0G CSqGSIb3DQEBCwUAA4IBAQA7JPL/BSbucxr/brS5BDYaMSoNhxOtQs4laCVaZOsu hlavabFUUiLwVQdjdH+FcDCh8PUFZq0roROmd3JxgK10Iq/Vl0LpHzNZBEOjiBlq OLX5kBNFT8PUdQOA7HdIY2M2M9MVCie8TXaI8LjzDwVz/mR7xpz/wxYGnruKgKU/ cTKuVrh3fuUMZybVROLR5Q/DMbHbxej8GEk3qwzrFrs/M5S2AzVcZjrm0TgbTDyz sfD1UZfv6Xpr8WuekK2fqflvWkOjmk2eNH3QqHkMqR9KsFWDyfVeZxCb6MoVhp2y nTr1VifK0BIWAjsGd0CWEoqPHcWzSOmIc/jSMb0k+SgT -----END CERTIFICATE-----Generated at Sat Dec 20 06:16:41 2025 by rpki-client