This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZX9ny3seDGVx59_Uy4aTQIlKhXc.roa File: ZX9ny3seDGVx59_Uy4aTQIlKhXc.roa (raw, json) Hash identifier: B7DMWt4kcBjpqjisfXNG7vVR4EaS/zucN3Ad1Nf6O5s= Subject key identifier: 65:7F:67:CB:7B:1E:0C:65:71:E7:DF:D4:CB:86:93:40:89:4A:85:77 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA7013EAC269EA7DC3C7A1A085F9076 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZX9ny3seDGVx59_Uy4aTQIlKhXc.roa Signing time: Fri 02 Jan 2026 12:20:32 +0000 ROA not before: Fri 02 Jan 2026 12:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212997 IP address blocks: 2a0c:9a40:8f20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:01:3e:ac:26:9e:a7:dc:3c:7a:1a:08:5f:90:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=657f67cb7b1e0c6571e7dfd4cb869340894a8577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:42:47:43:94:22:5e:09:31:cf:c1:27:63:55: 76:20:75:12:c8:a3:f8:89:72:bb:6b:c3:ec:8c:ad: b6:66:55:6f:70:34:5e:be:00:bf:37:14:b0:9d:ad: 2b:ed:c0:dd:f2:98:a5:47:5f:5c:b6:6c:41:9e:60: b0:37:1a:f6:8b:a3:12:3e:a4:3b:a8:36:6c:9a:d1: f1:21:3b:ed:9e:33:24:4b:2e:0b:24:47:0d:42:a1: 51:32:54:92:6c:20:e9:ae:e4:40:6a:a1:ef:80:96: 99:83:1e:40:b8:dc:4d:d9:6e:87:0c:13:65:40:01: 87:e5:9b:89:37:3e:2b:14:83:79:25:73:f2:0e:db: 67:87:97:27:e2:c9:75:80:49:e1:b2:05:a5:85:43: 05:ab:ec:e4:86:59:de:99:68:35:e1:e1:2d:99:35: ea:1c:1b:e8:3b:70:ad:92:b8:13:58:b2:46:f9:7b: ac:55:1c:36:38:60:3f:c8:dd:d5:90:f7:b2:1e:dd: d6:fe:4d:27:43:91:08:e8:1f:87:1f:4f:ec:e8:28: bf:8a:4e:51:a2:87:0f:a9:fc:e0:13:96:60:66:67: f4:85:64:f3:b0:35:81:5d:6b:a5:26:bc:6d:24:d6: 5d:81:76:c0:a7:c4:db:f4:99:db:e5:bf:82:d7:1d: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7F:67:CB:7B:1E:0C:65:71:E7:DF:D4:CB:86:93:40:89:4A:85:77 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZX9ny3seDGVx59_Uy4aTQIlKhXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8f20::/48 Signature Algorithm: sha256WithRSAEncryption b4:80:68:11:99:06:5d:d0:b6:32:a8:5a:ab:f1:84:22:e3:1f: 1b:4e:9b:30:45:67:d4:37:47:2f:03:e3:24:0b:0c:9f:d3:ce: 67:a2:19:63:9b:8d:2f:2e:8c:ca:89:bd:46:fc:c4:4a:b8:d5: 51:4b:05:5f:25:76:e0:7c:7a:80:80:a6:15:4e:67:d3:26:9c: 75:ff:cd:f6:0d:d8:5a:de:69:e8:54:dc:bf:50:03:dc:91:87: 28:37:cc:de:03:36:b7:45:d6:5a:51:31:70:d7:ad:f1:12:50: c4:7b:4e:4a:29:ec:35:54:c1:8a:33:43:41:a4:0b:d4:e2:68: cd:22:4c:6c:fc:2f:40:62:58:7b:58:dc:c7:c7:ac:bd:15:6f: 27:a1:a0:4d:91:fd:5f:b7:e6:cf:a2:d7:a9:71:68:1b:90:e1: eb:df:48:79:ce:be:19:a0:9d:b0:1d:2c:fa:00:6c:20:05:d5: 48:43:9b:0d:ce:b6:79:7b:04:70:4c:75:a9:2f:b3:9e:32:f6: 20:45:3b:54:20:db:60:e8:99:cf:b6:0a:01:52:6a:04:1a:4c: c0:e3:e5:d6:7e:16:dd:14:07:a0:79:7d:04:40:fd:c5:4a:2b: 3e:ce:f1:c9:89:bd:d4:ec:09:ad:0c:2a:77:2e:53:2f:f3:3b: 10:6d:0b:df -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwE+rCaep9w8ehoIX5B2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTdmNjdjYjdiMWUwYzY1NzFlN2RmZDRjYjg2OTM0MDg5NGE4NTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEJHQ5QiXgkxz8EnY1V2IHUSyKP4 iXK7a8PsjK22ZlVvcDRevgC/NxSwna0r7cDd8pilR19ctmxBnmCwNxr2i6MSPqQ7 qDZsmtHxITvtnjMkSy4LJEcNQqFRMlSSbCDpruRAaqHvgJaZgx5AuNxN2W6HDBNl QAGH5ZuJNz4rFIN5JXPyDttnh5cn4sl1gEnhsgWlhUMFq+zkhlnemWg14eEtmTXq HBvoO3CtkrgTWLJG+XusVRw2OGA/yN3VkPeyHt3W/k0nQ5EI6B+HH0/s6Ci/ik5R oocPqfzgE5ZgZmf0hWTzsDWBXWulJrxtJNZdgXbAp8Tb9Jnb5b+C1x34QwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGV/Z8t7Hgxlceff1MuGk0CJSoV3MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWlg5bnkzc2VER1Z4NTlfVXk0YVRRSWxLaFhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI8g MA0GCSqGSIb3DQEBCwUAA4IBAQC0gGgRmQZd0LYyqFqr8YQi4x8bTpswRWfUN0cv A+MkCwyf085nohljm40vLozKib1G/MRKuNVRSwVfJXbgfHqAgKYVTmfTJpx1/832 Ddha3mnoVNy/UAPckYcoN8zeAza3RdZaUTFw163xElDEe05KKew1VMGKM0NBpAvU 4mjNIkxs/C9AYlh7WNzHx6y9FW8noaBNkf1ft+bPotepcWgbkOHr30h5zr4ZoJ2w HSz6AGwgBdVIQ5sNzrZ5ewRwTHWpL7OeMvYgRTtUINtg6JnPtgoBUmoEGkzA4+XW fhbdFAegeX0EQP3FSis+zvHJib3U7AmtDCp3LlMv8zsQbQvf -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:53 2026 by rpki-client