This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zteii76CxsuObamOHj7gkkHiqIM.roa File: zteii76CxsuObamOHj7gkkHiqIM.roa (raw, json) Hash identifier: R2gURLxMWvorzvskEdi5XH+djZDePiBwEm67PxKG3n4= Subject key identifier: CE:D7:A2:8B:BE:82:C6:CB:8E:6D:A9:8E:1E:3E:E0:92:41:E2:A8:83 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1B7E6F6911B4574CB696AD50173FF Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zteii76CxsuObamOHj7gkkHiqIM.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199586 IP address blocks: 2a03:5840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b7:e6:f6:91:1b:45:74:cb:69:6a:d5:01:73:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ced7a28bbe82c6cb8e6da98e1e3ee09241e2a883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:40:06:c7:c4:ba:27:3b:9b:45:e9:4c:42: ba:9f:21:79:14:e4:49:ca:ee:4b:08:9c:ed:3c:47: 47:0a:4a:17:c6:45:66:3c:8b:18:57:82:58:c8:99: 28:4b:7f:00:23:21:1f:0a:e2:8d:ff:ba:1b:18:54: 8b:45:54:39:10:ed:97:20:c2:94:13:02:d5:fc:24: c7:ba:10:f9:81:ef:06:3b:9b:a2:80:bd:31:92:ef: 8d:ad:54:75:06:c3:b6:f5:ba:5b:04:fe:77:3d:1c: 5e:66:45:f6:e5:35:32:70:1d:38:7e:cb:35:8e:d2: 1b:73:80:7d:4c:d2:d1:0a:67:9c:cf:81:3a:e0:47: 6c:b9:0c:f0:83:40:80:42:b5:62:06:84:5b:f1:36: f4:7b:a9:53:3b:d8:0c:d2:b2:51:e7:e2:f6:f9:e2: d0:66:a9:73:3c:29:2f:4d:43:5b:de:b4:65:de:22: 37:76:58:bf:a9:b7:4a:2d:b9:69:d6:1b:46:b5:0e: 2c:82:27:f5:a1:2c:6c:d7:07:58:25:bf:9b:e4:d0: 3f:06:b2:34:f6:71:b3:0e:03:bb:c1:67:ca:b0:fd: 83:7b:7d:a5:57:f8:30:10:00:f5:c5:a0:27:e3:a7: 64:a8:e0:cf:b6:76:0e:f9:1c:8c:29:b3:df:9e:fe: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D7:A2:8B:BE:82:C6:CB:8E:6D:A9:8E:1E:3E:E0:92:41:E2:A8:83 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/zteii76CxsuObamOHj7gkkHiqIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840::/48 Signature Algorithm: sha256WithRSAEncryption 22:61:53:c3:80:15:ad:cb:08:ae:b8:61:ef:7f:9c:09:e8:dd: 17:45:f3:ca:a6:00:dc:8a:82:40:3a:88:1e:f0:73:d0:a3:a7: cb:67:03:f7:78:e2:ab:4f:2b:df:8c:73:69:e1:6a:d0:e9:3f: 9d:fb:77:c6:0d:1b:f1:e8:66:01:99:c0:31:da:16:e1:b6:ca: 87:e3:e4:d7:bd:bd:00:68:2e:d9:7d:21:66:cd:8c:1d:8f:c2: fb:ad:bb:c9:b7:26:04:8f:46:17:e1:20:19:c3:78:2c:35:9c: e1:92:79:06:a5:9c:02:a4:cb:8d:93:a9:36:f8:92:21:eb:19: aa:aa:b5:4e:cc:49:0a:8a:85:c1:f2:65:8d:ef:5c:56:36:7b: a1:33:27:57:47:ce:b1:86:be:cd:c7:f0:f0:06:e8:ea:7b:8f: 30:bd:56:3b:16:42:28:b0:29:c9:26:5f:18:23:6b:5c:25:6e: b5:c7:01:85:91:ab:da:2c:51:47:4a:1c:5b:0e:71:f1:3b:52: a3:f6:99:99:4f:49:c3:21:42:b6:17:6f:49:8d:e9:fc:ca:49: ac:50:c3:8a:5f:33:9a:cb:da:98:71:39:57:2c:10:b6:d1:12: 29:af:ef:39:2c:c3:ab:2c:26:6d:3f:47:12:1f:6d:d7:4c:78: d7:40:0e:94 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8bfm9pEbRXTLaWrVAXP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWQ3YTI4YmJlODJjNmNiOGU2ZGE5OGUxZTNlZTA5MjQxZTJhODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPNABsfEuic7m0XpTEK6nyF5FORJ yu5LCJztPEdHCkoXxkVmPIsYV4JYyJkoS38AIyEfCuKN/7obGFSLRVQ5EO2XIMKU EwLV/CTHuhD5ge8GO5uigL0xku+NrVR1BsO29bpbBP53PRxeZkX25TUycB04fss1 jtIbc4B9TNLRCmecz4E64EdsuQzwg0CAQrViBoRb8Tb0e6lTO9gM0rJR5+L2+eLQ ZqlzPCkvTUNb3rRl3iI3dli/qbdKLblp1htGtQ4sgif1oSxs1wdYJb+b5NA/BrI0 9nGzDgO7wWfKsP2De32lV/gwEAD1xaAn46dkqODPtnYO+RyMKbPfnv6ejwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM7Xoou+gsbLjm2pjh4+4JJB4qiDMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvenRlaWk3NkN4c3VPYmFtT0hqN2dra0hpcUlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAAA MA0GCSqGSIb3DQEBCwUAA4IBAQAiYVPDgBWtywiuuGHvf5wJ6N0XRfPKpgDcioJA Ooge8HPQo6fLZwP3eOKrTyvfjHNp4WrQ6T+d+3fGDRvx6GYBmcAx2hbhtsqH4+TX vb0AaC7ZfSFmzYwdj8L7rbvJtyYEj0YX4SAZw3gsNZzhknkGpZwCpMuNk6k2+JIh 6xmqqrVOzEkKioXB8mWN71xWNnuhMydXR86xhr7Nx/DwBujqe48wvVY7FkIosCnJ Jl8YI2tcJW61xwGFkavaLFFHShxbDnHxO1Kj9pmZT0nDIUK2F29Jjen8ykmsUMOK XzOay9qYcTlXLBC20RIpr+85LMOrLCZtP0cSH23XTHjXQA6U -----END CERTIFICATE-----Generated at Fri Jan 23 15:22:44 2026 by rpki-client