This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZTpvi94-mHUzADmi7erZojBj_8w.roa File: ZTpvi94-mHUzADmi7erZojBj_8w.roa (raw, json) Hash identifier: v8ZTuyX4R36RO91b6Xgqx6NEVvueT0VJyHPIrfoSD2o= Subject key identifier: 65:3A:6F:8B:DE:3E:98:75:33:00:39:A2:ED:EA:D9:A2:30:63:FF:CC Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8B5E013E96830E8975AAA66E14ED Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZTpvi94-mHUzADmi7erZojBj_8w.roa Signing time: Fri 02 Jan 2026 06:20:41 +0000 ROA not before: Fri 02 Jan 2026 06:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216375 IP address blocks: 2a0e:b107:27e8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8b:5e:01:3e:96:83:0e:89:75:aa:a6:6e:14:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=653a6f8bde3e9875330039a2edead9a23063ffcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:8c:1a:47:38:12:7d:1e:67:9f:1c:4e:51: cf:e8:c7:7b:aa:ab:9b:66:be:a7:7f:d8:ab:a4:3e: d9:96:c4:ad:bf:a1:af:4c:d6:2d:7c:0d:63:22:e3: e9:21:fa:dc:b4:6f:6a:c7:1c:8f:2f:d1:8e:9f:50: b5:f5:0a:e7:c2:1e:67:2d:e0:9a:64:fc:f5:09:cb: ad:a9:76:01:e7:87:06:a8:a2:68:77:e3:db:05:79: 47:45:96:b1:4a:33:c1:95:5a:5d:6a:7b:09:bf:28: 60:ba:c3:95:31:8f:ac:7c:c7:c4:f2:b8:15:48:e4: 2e:26:8a:00:1f:96:3a:7b:6d:b4:55:10:04:06:69: 46:06:6f:bd:59:ba:9e:1e:bf:72:77:d8:0a:04:ce: 08:d0:e3:f2:9d:04:02:e8:81:53:58:93:d2:9c:94: 1c:51:d8:41:c2:44:23:0e:f8:70:0c:4f:50:0c:c7: 6c:3c:31:7d:8a:78:3d:3c:af:15:13:a5:b4:b0:c8: d8:12:f1:51:d7:40:8c:d5:f6:0d:ac:bc:d5:24:22: 19:37:e9:57:96:5a:b0:d0:ee:17:bf:bf:01:e4:94: 7a:f8:67:99:e7:fd:9d:c9:82:ea:54:ff:60:85:7f: c0:da:0f:74:46:e0:da:c4:7e:cf:ed:d0:dc:10:48: 3d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3A:6F:8B:DE:3E:98:75:33:00:39:A2:ED:EA:D9:A2:30:63:FF:CC X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZTpvi94-mHUzADmi7erZojBj_8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:27e8::/45 Signature Algorithm: sha256WithRSAEncryption 05:6d:22:5d:cb:99:32:87:80:cf:2f:03:81:71:79:d0:c3:a5: 7c:93:d3:98:24:c1:1e:a7:24:90:30:25:ed:cc:19:fa:49:9a: 4c:31:5d:2e:c4:a6:1c:72:dd:65:8b:3e:84:0c:01:c2:95:ac: 66:c3:05:dc:b6:b2:16:22:a0:db:34:ca:3e:e1:9a:7d:bb:1d: 5f:0a:d6:78:96:3c:36:c4:dc:09:58:62:71:63:31:c3:86:d1: f0:c6:d1:89:e7:22:18:18:d7:ff:27:6b:5b:2b:a4:ec:8a:14: be:69:2e:b7:30:84:57:90:17:62:09:2f:87:22:2b:5c:39:c2: f9:59:87:83:a6:ee:53:9e:5c:b3:53:6e:e8:8c:5a:2b:2b:98: ef:1c:1d:8d:35:8d:9d:c6:cb:cc:24:00:10:fa:97:f3:95:29: 65:80:b3:37:82:2a:cf:03:74:5d:bd:5e:e9:af:3b:6e:16:e4: a7:15:96:bd:23:a3:3c:94:90:f1:da:fb:1d:9c:ff:09:58:28: dd:28:82:15:b3:ad:08:e1:86:b1:17:62:3e:68:c4:93:5f:8b: fa:00:f4:2d:02:c3:d9:49:84:60:be:6e:2d:3f:e9:8f:d5:93: 0d:ba:4f:80:7a:26:bd:2b:d1:7d:04:f1:71:61:5b:ec:11:88: 10:bd:1b:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYteAT6Wgw6JdaqmbhTtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTNhNmY4YmRlM2U5ODc1MzMwMDM5YTJlZGVhZDlhMjMwNjNmZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP+MGkc4En0eZ58cTlHP6Md7qqub Zr6nf9irpD7ZlsStv6GvTNYtfA1jIuPpIfrctG9qxxyPL9GOn1C19Qrnwh5nLeCa ZPz1CcutqXYB54cGqKJod+PbBXlHRZaxSjPBlVpdansJvyhgusOVMY+sfMfE8rgV SOQuJooAH5Y6e220VRAEBmlGBm+9WbqeHr9yd9gKBM4I0OPynQQC6IFTWJPSnJQc UdhBwkQjDvhwDE9QDMdsPDF9ing9PK8VE6W0sMjYEvFR10CM1fYNrLzVJCIZN+lX llqw0O4Xv78B5JR6+GeZ5/2dyYLqVP9ghX/A2g90RuDaxH7P7dDcEEg90QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGU6b4vePph1MwA5ou3q2aIwY//MMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWlRwdmk5NC1tSFV6QURtaTdlclpvakJqXzh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKg6xByfo MA0GCSqGSIb3DQEBCwUAA4IBAQAFbSJdy5kyh4DPLwOBcXnQw6V8k9OYJMEepySQ MCXtzBn6SZpMMV0uxKYcct1liz6EDAHClaxmwwXctrIWIqDbNMo+4Zp9ux1fCtZ4 ljw2xNwJWGJxYzHDhtHwxtGJ5yIYGNf/J2tbK6TsihS+aS63MIRXkBdiCS+HIitc OcL5WYeDpu5TnlyzU27ojForK5jvHB2NNY2dxsvMJAAQ+pfzlSllgLM3girPA3Rd vV7prztuFuSnFZa9I6M8lJDx2vsdnP8JWCjdKIIVs60I4YaxF2I+aMSTX4v6APQt AsPZSYRgvm4tP+mP1ZMNuk+Aeia9K9F9BPFxYVvsEYgQvRtP -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:29 2026 by rpki-client