This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZHQIdcr87GnkRLL-0Yk4XDNV9kI.roa File: ZHQIdcr87GnkRLL-0Yk4XDNV9kI.roa (raw, json) Hash identifier: 6q7QWuTyDrfjAtjtE1nDG/Fm8EpP8VT/fUj6iS7oXx4= Subject key identifier: 64:74:08:75:CA:FC:EC:69:E4:44:B2:FE:D1:89:38:5C:33:55:F6:42 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF19FD9999F577FCA7A0772D6970D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZHQIdcr87GnkRLL-0Yk4XDNV9kI.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202929 IP address blocks: 2a0e:97c0:510::/47 maxlen: 48 2a0e:97c0:512::/48 maxlen: 48 2a0e:97c0:513::/48 maxlen: 48 2a0e:97c0:514::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f1:9f:d9:99:9f:57:7f:ca:7a:07:72:d6:97:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64740875cafcec69e444b2fed189385c3355f642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2a:6d:bb:85:74:ce:d7:12:27:42:35:d6:11: 85:2a:c1:ed:c2:b4:cc:78:a6:93:59:6f:44:e3:a0: 90:a5:9a:87:9b:0e:57:f3:82:2c:5d:7a:bb:1c:9b: 43:7f:47:88:58:56:a5:59:91:04:0d:f3:26:61:82: 7f:5e:d9:8e:79:b2:8f:bb:ba:81:3c:0b:3e:a1:25: af:aa:18:42:0f:48:bf:4e:84:86:17:84:a3:fe:d5: 78:f3:8a:50:23:19:05:0d:d7:f5:9d:c4:cb:dc:c5: d2:49:41:03:6d:a3:0c:6b:2d:b6:37:31:0d:cb:ae: 67:76:b5:6d:22:da:ec:3c:30:30:ab:77:7e:f1:ce: 87:56:d1:7c:76:96:fe:d4:f8:f0:ba:8e:23:9c:c7: 9f:b5:cd:5c:5d:aa:a6:62:70:c1:ec:bb:4e:0a:d7: 23:63:2c:94:97:af:ef:08:b1:d2:5b:b2:cf:40:22: fb:14:a7:3e:e7:fd:82:02:b9:78:a8:55:10:2e:1b: 94:b4:59:f6:16:d0:9a:fb:b3:00:d3:ca:df:ed:a0: c2:01:6a:7b:4a:01:35:eb:56:93:0a:2b:75:6d:04: 0d:8e:e5:68:e4:8d:01:b4:bf:56:c2:5c:e2:4a:c2: f7:ad:48:79:f2:08:fb:e6:04:27:0b:8b:aa:12:d1: 13:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:74:08:75:CA:FC:EC:69:E4:44:B2:FE:D1:89:38:5C:33:55:F6:42 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZHQIdcr87GnkRLL-0Yk4XDNV9kI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:510::-2a0e:97c0:515:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 08:ba:b5:3e:08:09:da:20:70:ba:d5:3a:38:e4:f6:0c:d0:75: c4:93:9a:b0:2c:21:3b:8f:85:25:b1:61:34:12:85:0d:e9:e6: 54:09:d9:8c:6f:d8:3f:bb:d0:d2:95:ad:84:f8:ac:ec:b1:1a: 9a:68:ea:64:ba:5e:e5:38:ad:18:23:cf:26:c6:05:11:53:98: 6a:8b:38:42:94:fa:ee:76:75:0d:c5:c0:1b:29:00:71:4a:90: 0c:5a:fb:47:97:35:c1:27:0f:51:2c:1e:c0:3b:e8:53:91:f8: 06:fa:64:8f:92:2a:d2:ba:8e:67:29:b3:dc:5c:ae:2d:5c:72: d3:c7:06:ba:57:ae:3e:b5:01:c8:f2:7f:32:ca:18:65:f8:7b: 8b:7b:9a:51:1e:cb:b8:df:2f:b9:36:84:cc:21:48:92:11:03: 51:e7:6e:30:d7:7d:22:8c:0c:25:da:6c:5c:eb:e5:78:82:5f: 3e:dd:c9:55:e4:cd:7d:46:a9:a2:86:c1:ee:3f:40:6f:f2:4e: 73:e3:c8:1d:56:0d:3f:ff:99:64:c4:af:1f:0c:78:6a:09:ce: 97:65:4b:cf:9f:9d:71:72:09:ab:74:2c:f7:fc:bb:5f:b3:dc: 8c:20:d2:4f:95:4d:75:cf:e1:42:c9:21:81:21:21:b4:9d:3a: 79:cd:4b:a0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XPGf2ZmfV3/Kegdy1pcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDc0MDg3NWNhZmNlYzY5ZTQ0NGIyZmVkMTg5Mzg1YzMzNTVmNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyptu4V0ztcSJ0I11hGFKsHtwrTM eKaTWW9E46CQpZqHmw5X84IsXXq7HJtDf0eIWFalWZEEDfMmYYJ/XtmOebKPu7qB PAs+oSWvqhhCD0i/ToSGF4Sj/tV484pQIxkFDdf1ncTL3MXSSUEDbaMMay22NzEN y65ndrVtItrsPDAwq3d+8c6HVtF8dpb+1Pjwuo4jnMeftc1cXaqmYnDB7LtOCtcj YyyUl6/vCLHSW7LPQCL7FKc+5/2CArl4qFUQLhuUtFn2FtCa+7MA08rf7aDCAWp7 SgE161aTCit1bQQNjuVo5I0BtL9WwlziSsL3rUh58gj75gQnC4uqEtETBwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGR0CHXK/Oxp5ESy/tGJOFwzVfZCMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWkhRSWRjcjg3R25rUkxMLTBZazRYRE5WOWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDpfA BRADBwEqDpfABRQwDQYJKoZIhvcNAQELBQADggEBAAi6tT4ICdogcLrVOjjk9gzQ dcSTmrAsITuPhSWxYTQShQ3p5lQJ2Yxv2D+70NKVrYT4rOyxGppo6mS6XuU4rRgj zybGBRFTmGqLOEKU+u52dQ3FwBspAHFKkAxa+0eXNcEnD1EsHsA76FOR+Ab6ZI+S KtK6jmcps9xcri1cctPHBrpXrj61AcjyfzLKGGX4e4t7mlEey7jfL7k2hMwhSJIR A1HnbjDXfSKMDCXabFzr5XiCXz7dyVXkzX1GqaKGwe4/QG/yTnPjyB1WDT//mWTE rx8MeGoJzpdlS8+fnXFyCat0LPf8u1+z3Iwg0k+VTXXP4ULJIYEhIbSdOnnNS6A= -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:38 2026 by rpki-client