This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zsGuFdJB3oj4JkTep7PEn3GiDUk.roa File: zsGuFdJB3oj4JkTep7PEn3GiDUk.roa (raw, json) Hash identifier: taSd0sIaRHE5ac8PhM/66h5qISyfvxUqWubhpTchzQk= Subject key identifier: CE:C1:AE:15:D2:41:DE:88:F8:26:44:DE:A7:B3:C4:9F:71:A2:0D:49 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D02F74E517E61634673F8941F61C1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zsGuFdJB3oj4JkTep7PEn3GiDUk.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205621 IP address blocks: 2a0e:97c0:3c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:02:f7:4e:51:7e:61:63:46:73:f8:94:1f:61:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cec1ae15d241de88f82644dea7b3c49f71a20d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:56:88:04:0d:41:bf:d6:c8:f9:b1:d7:f7: 48:84:03:56:6a:d0:61:5b:bd:13:0b:4d:f9:be:17: 49:ae:d3:e9:81:18:4b:6e:36:bd:73:38:89:8a:42: 9b:db:24:ed:b4:f3:45:fb:f0:c2:c6:f5:99:18:33: f2:9f:ea:e6:e2:d5:92:93:f3:6c:a4:99:2b:32:b7: c4:19:d4:ac:3d:62:be:aa:f2:bb:6c:6e:68:ae:eb: ee:9a:c5:01:db:99:52:61:f1:f5:d5:c2:60:32:41: a7:67:65:06:6b:b4:30:01:5a:e1:e4:29:4a:86:15: 33:7e:4a:c5:6d:fd:51:92:5e:6f:6c:c7:df:81:5d: a7:2f:50:25:e1:51:66:ab:dd:14:58:a0:26:8c:db: 2e:c3:58:b7:86:43:b8:30:5a:03:c1:66:e2:b8:43: 70:86:ce:27:82:a2:10:ef:9a:c4:ef:2c:84:2d:d9: 43:35:56:bb:44:ea:9d:66:8b:aa:91:ba:74:83:a3: b2:5a:50:82:c5:12:a5:6e:eb:63:cc:a3:b3:c2:fe: ac:7e:46:7d:cc:b9:b7:e6:89:3d:07:c0:d5:6f:1a: b1:d3:ea:cb:77:18:16:c7:4a:6b:c2:af:29:64:27: 8c:3a:2d:7e:96:84:63:a1:90:4c:02:46:54:3e:7c: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C1:AE:15:D2:41:DE:88:F8:26:44:DE:A7:B3:C4:9F:71:A2:0D:49 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zsGuFdJB3oj4JkTep7PEn3GiDUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:3c0::/44 Signature Algorithm: sha256WithRSAEncryption a4:af:ef:a2:d5:e5:79:a8:37:b0:69:b3:26:e6:4a:98:fb:11: 21:a1:09:ad:7f:45:b2:d6:dd:52:d6:28:32:7e:c0:f5:25:f5: 37:7f:16:27:a1:83:1e:98:b3:5b:aa:cb:01:06:4d:14:3a:18: 2a:82:ff:48:32:2e:76:20:50:8a:81:5d:6f:60:be:ac:07:54: 98:49:41:aa:c4:a8:9c:4f:64:fe:29:25:60:78:47:16:67:3f: 59:38:10:7a:e0:2f:19:93:e6:85:13:8a:4a:b6:93:be:13:11: dc:3c:46:84:7c:c1:70:23:b6:5b:09:03:54:20:38:80:ea:63: 74:79:6c:2d:06:42:ad:a3:9e:6f:0f:e2:f2:8b:87:da:64:a3: fd:ce:25:bc:c4:a1:0b:79:8a:33:35:8d:c5:8a:bd:f2:84:59: a8:9a:72:2a:e5:ae:42:81:52:5e:0d:6a:27:47:13:b7:bc:af: 10:4b:2c:3c:bc:3c:ef:97:62:90:4e:cb:d6:a2:ab:38:a9:e5: 05:bc:22:fb:66:3b:a4:2a:97:85:3d:b6:28:c0:dc:20:cd:0c: 42:bb:a1:bc:d5:ea:19:d8:7b:81:82:06:dd:31:61:cc:79:00: d3:60:fc:dc:bf:57:50:a3:5b:53:ce:31:54:02:0f:1d:a9:f3: 31:60:41:4e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQL3TlF+YWNGc/iUH2HBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWMxYWUxNWQyNDFkZTg4ZjgyNjQ0ZGVhN2IzYzQ5ZjcxYTIwZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvpWiAQNQb/WyPmx1/dIhANWatBh W70TC035vhdJrtPpgRhLbja9cziJikKb2yTttPNF+/DCxvWZGDPyn+rm4tWSk/Ns pJkrMrfEGdSsPWK+qvK7bG5oruvumsUB25lSYfH11cJgMkGnZ2UGa7QwAVrh5ClK hhUzfkrFbf1Rkl5vbMffgV2nL1Al4VFmq90UWKAmjNsuw1i3hkO4MFoDwWbiuENw hs4ngqIQ75rE7yyELdlDNVa7ROqdZouqkbp0g6OyWlCCxRKlbutjzKOzwv6sfkZ9 zLm35ok9B8DVbxqx0+rLdxgWx0prwq8pZCeMOi1+loRjoZBMAkZUPnyR4QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM7BrhXSQd6I+CZE3qezxJ9xog1JMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvenNHdUZkSkIzb2o0SmtUZXA3UEVuM0dpRFVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAPA MA0GCSqGSIb3DQEBCwUAA4IBAQCkr++i1eV5qDewabMm5kqY+xEhoQmtf0Wy1t1S 1igyfsD1JfU3fxYnoYMemLNbqssBBk0UOhgqgv9IMi52IFCKgV1vYL6sB1SYSUGq xKicT2T+KSVgeEcWZz9ZOBB64C8Zk+aFE4pKtpO+ExHcPEaEfMFwI7ZbCQNUIDiA 6mN0eWwtBkKto55vD+Lyi4faZKP9ziW8xKELeYozNY3Fir3yhFmomnIq5a5CgVJe DWonRxO3vK8QSyw8vDzvl2KQTsvWoqs4qeUFvCL7ZjukKpeFPbYowNwgzQxCu6G8 1eoZ2HuBggbdMWHMeQDTYPzcv1dQo1tTzjFUAg8dqfMxYEFO -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:53 2026 by rpki-client