This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZjAgigndberT5y4YXDLaDEa_YiE.roa File: ZjAgigndberT5y4YXDLaDEa_YiE.roa (raw, json) Hash identifier: dnrc3H+KTcvo3Yq0FxFzRDzXMrkis6gaoT7dsq0xFYQ= Subject key identifier: 66:30:20:8A:09:DD:6D:EA:D3:E7:2E:18:5C:32:DA:0C:46:BF:62:21 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F3890BC068CE22541C4C8827B8B8 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZjAgigndberT5y4YXDLaDEa_YiE.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208690 IP address blocks: 2a0c:9a40:8f40::/48 maxlen: 48 2a0c:9a40:d400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f3:89:0b:c0:68:ce:22:54:1c:4c:88:27:b8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6630208a09dd6dead3e72e185c32da0c46bf6221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:9b:11:45:67:0b:09:78:e4:9c:66:d8:77: 5b:60:9a:bc:3c:52:c4:d6:05:78:9d:32:d5:24:18: 86:a9:0c:2e:f9:a2:6d:0a:b3:60:a9:1a:ee:7c:aa: f7:62:ec:a2:78:40:42:b2:e1:5d:c2:72:84:b5:ee: 84:d3:74:15:a4:22:51:bb:b8:ad:f8:08:76:24:1c: a8:de:00:37:73:35:61:8e:50:7b:c5:b9:f2:c2:72: 77:da:b0:15:b7:90:55:10:69:eb:68:60:dd:3e:57: a9:40:ac:67:77:b3:8a:f1:95:76:c2:46:ee:4d:48: b9:f7:7a:4e:25:81:e8:a6:1c:8b:5f:ff:18:b3:0f: 14:8d:38:8e:c0:b0:b5:07:a1:07:7d:9a:5f:c5:e0: a2:b4:6e:b8:0f:19:f7:16:04:f2:33:d9:dc:ef:3b: a8:15:b7:be:5c:2c:55:0c:04:9a:7b:ba:56:d6:e4: 9b:ad:f4:6c:15:40:bd:3e:fe:be:53:40:99:ef:f4: f3:f4:9c:de:09:b7:bc:52:a5:7b:d5:ed:e6:71:e7: ed:dd:56:b5:cb:32:34:0f:c8:a6:11:e2:1e:95:f6: 44:57:2e:f1:c9:96:87:a4:4f:ed:22:7d:d0:50:56: 03:ca:01:60:19:6e:d8:41:8f:19:e9:39:8b:77:92: d8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:30:20:8A:09:DD:6D:EA:D3:E7:2E:18:5C:32:DA:0C:46:BF:62:21 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZjAgigndberT5y4YXDLaDEa_YiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8f40::/48 2a0c:9a40:d400::/40 Signature Algorithm: sha256WithRSAEncryption 6c:c8:a5:53:7f:cf:61:43:d0:5c:4b:78:2d:c9:98:2e:52:26: 07:0b:d7:64:ee:34:9e:1f:15:dd:7a:46:56:ef:da:49:41:ee: 27:85:d3:2e:02:c3:26:38:d1:7c:f3:ed:95:4f:c3:e0:99:21: 86:0e:2e:70:46:06:3b:a8:be:0e:82:31:4f:98:20:78:69:0a: 75:b8:c1:71:33:b9:06:81:18:54:9b:57:21:18:b1:60:86:38: 7f:ec:96:39:f5:5d:4c:3b:54:a6:47:73:71:ad:b6:c5:f5:45: a4:9f:a7:b2:85:ee:c0:9d:b7:19:ae:b9:04:37:b2:fc:88:be: e6:a7:41:fd:2a:65:a8:4d:30:16:be:1c:f9:5b:7a:b0:7d:ce: ef:99:14:3e:4d:1f:06:af:7a:b8:67:a2:de:c4:6f:cc:eb:54: 97:7f:88:c6:27:ed:eb:2e:3b:fd:a6:18:01:1e:92:e0:a5:14: 70:d0:c4:bc:02:ff:9a:d5:91:54:1f:a0:86:e0:90:36:60:26: 05:bd:b4:ca:34:c4:73:c6:2e:fe:4c:a4:8f:20:f4:6c:4c:8b: e1:40:aa:e9:d0:20:4d:93:d9:8a:b2:d3:b6:43:20:70:8d:94: 88:90:3d:4c:6c:04:5c:49:cc:3f:3f:80:bf:d4:de:19:43:5e: c2:15:80:0b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt+pvOJC8BoziJUHEyIJ7i4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjMwMjA4YTA5ZGQ2ZGVhZDNlNzJlMTg1YzMyZGEwYzQ2YmY2MjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKmbEUVnCwl45Jxm2HdbYJq8PFLE 1gV4nTLVJBiGqQwu+aJtCrNgqRrufKr3YuyieEBCsuFdwnKEte6E03QVpCJRu7it +Ah2JByo3gA3czVhjlB7xbnywnJ32rAVt5BVEGnraGDdPlepQKxnd7OK8ZV2wkbu TUi593pOJYHophyLX/8Ysw8UjTiOwLC1B6EHfZpfxeCitG64Dxn3FgTyM9nc7zuo Fbe+XCxVDASae7pW1uSbrfRsFUC9Pv6+U0CZ7/Tz9JzeCbe8UqV71e3mceft3Va1 yzI0D8imEeIelfZEVy7xyZaHpE/tIn3QUFYDygFgGW7YQY8Z6TmLd5LYkwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFGYwIIoJ3W3q0+cuGFwy2gxGv2IhMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWmpBZ2lnbmRiZXJUNXk0WVhETGFERWFfWWlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgyaQI9A AwYAKgyaQNQwDQYJKoZIhvcNAQELBQADggEBAGzIpVN/z2FD0FxLeC3JmC5SJgcL 12TuNJ4fFd16Rlbv2klB7ieF0y4CwyY40Xzz7ZVPw+CZIYYOLnBGBjuovg6CMU+Y IHhpCnW4wXEzuQaBGFSbVyEYsWCGOH/sljn1XUw7VKZHc3GttsX1RaSfp7KF7sCd txmuuQQ3svyIvuanQf0qZahNMBa+HPlberB9zu+ZFD5NHwaverhnot7Eb8zrVJd/ iMYn7esuO/2mGAEekuClFHDQxLwC/5rVkVQfoIbgkDZgJgW9tMo0xHPGLv5MpI8g 9GxMi+FAqunQIE2T2Yqy07ZDIHCNlIiQPUxsBFxJzD8/gL/U3hlDXsIVgAs= -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:12 2026 by rpki-client