This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa File: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (raw, json) Hash identifier: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M= Subject key identifier: 65:1C:41:23:AF:BE:DD:67:03:3F:AC:B4:5A:83:9F:FE:F0:1D:D8:D1 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12F7E553586EDF3B1CDA81DC4111C6 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202313 IP address blocks: 2a0d:1a40:fa0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f7:e5:53:58:6e:df:3b:1c:da:81:dc:41:11:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=651c4123afbedd67033facb45a839ffef01dd8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:46:04:1b:71:5b:d0:64:30:bc:ce:33:84:dc: c3:4f:5a:60:da:aa:38:2c:01:94:9e:a9:fd:1e:e0: ff:5e:a7:5a:04:6b:21:73:ed:d0:31:3e:b8:b8:d6: 17:f1:a7:ec:72:65:9f:1d:08:df:06:e2:de:cd:a6: 4c:99:9f:bf:0a:25:b9:99:5e:d1:52:3f:73:37:4a: 86:09:35:34:47:90:ef:e3:ee:ee:00:ab:e5:8d:e6: 7f:12:6f:3e:d7:41:cd:1d:08:ee:b9:e9:e3:81:92: 20:33:ee:69:b2:ab:df:0d:41:26:48:cd:dc:a2:10: 80:89:2a:68:0f:3e:3a:1b:d1:97:15:5d:6e:43:6a: 46:c6:85:12:ce:8b:01:1b:29:2c:8f:b9:32:ca:31: 2f:00:1a:06:7c:a3:f2:a5:da:4e:f8:f3:d5:61:80: 11:ae:50:df:de:78:c1:54:26:4a:3f:21:5c:cb:0e: 64:61:0b:10:9b:d0:04:2a:3c:e1:c4:1d:54:9f:93: 10:42:55:a0:5b:0b:27:7b:bb:32:89:47:27:83:e3: b3:f9:78:81:b5:7d:a2:b6:dc:f5:03:0d:2f:69:46: 98:79:bb:fb:c9:9f:fe:45:77:fd:ae:a8:7d:51:b5: c8:23:2e:ac:c9:88:41:e9:6b:46:a2:d7:be:87:5c: d5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:41:23:AF:BE:DD:67:03:3F:AC:B4:5A:83:9F:FE:F0:1D:D8:D1 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1a40:fa0::/44 Signature Algorithm: sha256WithRSAEncryption 7d:f6:4e:16:7d:de:ab:49:e2:5c:3c:26:62:8c:15:9c:20:6a: bf:c4:c6:30:93:b5:02:21:d9:d0:63:17:66:24:2f:c7:07:ef: da:30:12:28:d6:6f:8b:e0:b5:57:9a:75:55:2e:8b:54:f2:21: 65:b0:2b:4f:77:3c:f7:2b:21:38:78:26:7d:9e:22:72:ad:f5: 9b:4a:b8:ec:a6:90:91:4e:7a:26:67:7d:c7:37:c3:00:e1:49: 95:c7:f5:58:f4:bd:22:04:95:73:3a:78:98:23:c1:26:da:57: 5b:ac:d7:e8:64:96:29:17:1e:6e:30:7b:e1:46:5d:03:dc:cb: 0e:19:7c:1b:50:5c:4b:23:00:6a:24:8f:2e:53:33:4d:42:3b: d5:1f:4d:aa:63:fb:40:f5:e9:fb:cc:43:dd:44:8f:17:75:d4: 26:97:d0:29:8b:fb:1c:40:23:a3:ac:92:7b:e4:87:d7:ba:01: 4d:c5:e8:03:74:88:15:01:84:f1:21:54:47:4c:42:90:58:91: cb:5a:f6:94:1e:da:a2:45:7f:7b:8a:88:b8:5b:22:a4:71:4a: e4:02:c0:88:e2:c9:17:6c:5e:5b:5a:f9:59:62:78:18:e2:14: fc:40:fb:6a:4f:94:7b:11:91:3b:4a:bb:c3:33:e3:e5:7e:de: 97:73:68:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EvflU1hu3zsc2oHcQRHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTFjNDEyM2FmYmVkZDY3MDMzZmFjYjQ1YTgzOWZmZWYwMWRkOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkYEG3Fb0GQwvM4zhNzDT1pg2qo4 LAGUnqn9HuD/XqdaBGshc+3QMT64uNYX8afscmWfHQjfBuLezaZMmZ+/CiW5mV7R Uj9zN0qGCTU0R5Dv4+7uAKvljeZ/Em8+10HNHQjuuenjgZIgM+5psqvfDUEmSM3c ohCAiSpoDz46G9GXFV1uQ2pGxoUSzosBGyksj7kyyjEvABoGfKPypdpO+PPVYYAR rlDf3njBVCZKPyFcyw5kYQsQm9AEKjzhxB1Un5MQQlWgWwsne7syiUcng+Oz+XiB tX2ittz1Aw0vaUaYebv7yZ/+RXf9rqh9UbXIIy6syYhB6WtGote+h1zVHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGUcQSOvvt1nAz+stFqDn/7wHdjRMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvWlJ4Qkk2LS0zV2NEUDZ5MFdvT2ZfdkFkMk5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0aQA+g MA0GCSqGSIb3DQEBCwUAA4IBAQB99k4Wfd6rSeJcPCZijBWcIGq/xMYwk7UCIdnQ YxdmJC/HB+/aMBIo1m+L4LVXmnVVLotU8iFlsCtPdzz3KyE4eCZ9niJyrfWbSrjs ppCRTnomZ33HN8MA4UmVx/VY9L0iBJVzOniYI8Em2ldbrNfoZJYpFx5uMHvhRl0D 3MsOGXwbUFxLIwBqJI8uUzNNQjvVH02qY/tA9en7zEPdRI8XddQml9Api/scQCOj rJJ75IfXugFNxegDdIgVAYTxIVRHTEKQWJHLWvaUHtqiRX97ioi4WyKkcUrkAsCI 4skXbF5bWvlZYngY4hT8QPtqT5R7EZE7SrvDM+Plft6Xc2iK -----END CERTIFICATE-----Generated at Wed Jan 7 15:55:54 2026 by rpki-client