This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Zyj8NXNVFkP8s-HG0c00OE-49QA.roa File: Zyj8NXNVFkP8s-HG0c00OE-49QA.roa (raw, json) Hash identifier: HTA9vjiG4ItpULL880R8L4gPxGXdi9axAXRjf+ILI1I= Subject key identifier: 67:28:FC:35:73:55:16:43:FC:B3:E1:C6:D1:CD:34:38:4F:B8:F5:00 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA71122C8B5FD85F679E9F31A1DA4EA Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Zyj8NXNVFkP8s-HG0c00OE-49QA.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215363 IP address blocks: 2a0c:9a40:8450::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:11:22:c8:b5:fd:85:f6:79:e9:f3:1a:1d:a4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6728fc3573551643fcb3e1c6d1cd34384fb8f500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6d:52:1e:e3:26:6e:dd:48:9c:10:24:4a:14: b6:6b:03:42:66:ac:9b:90:fe:58:66:8b:4f:16:34: 52:2a:1f:f5:80:d7:63:da:d7:0f:dc:cb:e8:34:5f: 57:2c:13:34:77:b4:03:cc:f8:9a:ea:1e:af:01:5a: 34:cf:1a:5f:9e:54:3d:fa:24:d6:d6:e0:57:52:62: a2:e5:e1:2f:93:e7:5c:da:d1:d2:71:6c:d0:25:67: d3:cf:9a:0f:5e:2b:f1:d2:c8:29:5d:cd:2b:1a:9c: 63:ef:10:8f:f2:3c:a4:54:1f:03:ca:8b:31:7c:3b: 32:81:95:59:e1:2a:9c:25:ec:59:df:03:3a:fe:89: de:20:d3:68:a0:0f:c4:e1:09:36:78:4a:9a:e2:02: 90:d8:bb:5c:89:36:c6:33:ec:e6:da:95:06:d0:61: 63:89:58:64:6e:d1:d7:cb:40:8f:7b:8c:c9:87:f4: 6e:ce:68:8f:c2:95:88:0e:86:e2:34:bc:b6:2d:43: bf:ce:3d:20:cb:15:82:6e:f2:74:7c:00:07:29:fa: 9a:da:65:4a:dc:c4:6a:d3:ed:d7:c4:51:d0:1c:44: f6:11:8a:17:cc:f0:67:5a:96:0c:ea:8a:91:86:20: c6:23:aa:51:46:e0:a7:e6:f2:f4:21:e3:10:1f:6c: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:28:FC:35:73:55:16:43:FC:B3:E1:C6:D1:CD:34:38:4F:B8:F5:00 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Zyj8NXNVFkP8s-HG0c00OE-49QA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8450::/48 Signature Algorithm: sha256WithRSAEncryption 57:4e:4a:90:0b:48:20:83:6b:c2:e3:8c:7b:f2:16:1a:f7:68: 85:5e:53:ff:b5:6f:a1:7b:ea:9f:b7:aa:cc:4e:0e:62:1d:b6: de:38:e8:f8:a8:f4:f9:75:7a:e0:28:63:b0:29:c3:2c:d3:d9: e9:59:e2:21:04:63:6f:5f:9f:63:f8:19:f9:57:21:57:bb:47: 01:29:4b:96:48:ed:9f:b5:70:15:90:71:66:e8:88:da:5a:d8: 1d:52:23:85:e5:5d:a4:90:a3:fe:ea:18:b4:41:c1:0e:59:15: fb:1f:93:60:e3:a3:fc:cb:28:f6:e6:67:16:83:02:38:19:c4: 79:fb:12:1f:a8:d4:10:a4:10:07:dc:7d:36:78:d2:f9:02:55: 9d:59:9f:01:84:7a:f5:4c:e1:d2:bb:ce:12:14:d1:5f:2d:38: a9:2a:87:02:5f:14:86:49:17:3e:c5:f9:69:98:68:9a:ec:e5: 3f:ce:06:f1:ce:ea:6d:65:11:9b:02:a1:6f:c8:17:ad:38:1c: 17:7a:a6:d8:6a:18:bd:2a:9b:1e:1a:9c:7f:31:c4:74:83:9d: bf:8b:54:1b:09:64:4e:d6:6d:d9:8b:61:40:b5:c3:63:ad:4c: aa:af:b8:a0:0d:3c:86:ff:42:f6:cb:c9:1a:77:d9:14:ad:cd: e0:9c:e9:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxEiyLX9hfZ56fMaHaTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzI4ZmMzNTczNTUxNjQzZmNiM2UxYzZkMWNkMzQzODRmYjhmNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm1SHuMmbt1InBAkShS2awNCZqyb kP5YZotPFjRSKh/1gNdj2tcP3MvoNF9XLBM0d7QDzPia6h6vAVo0zxpfnlQ9+iTW 1uBXUmKi5eEvk+dc2tHScWzQJWfTz5oPXivx0sgpXc0rGpxj7xCP8jykVB8Dyosx fDsygZVZ4SqcJexZ3wM6/oneINNooA/E4Qk2eEqa4gKQ2LtciTbGM+zm2pUG0GFj iVhkbtHXy0CPe4zJh/RuzmiPwpWIDobiNLy2LUO/zj0gyxWCbvJ0fAAHKfqa2mVK 3MRq0+3XxFHQHET2EYoXzPBnWpYM6oqRhiDGI6pRRuCn5vL0IeMQH2wnKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGco/DVzVRZD/LPhxtHNNDhPuPUAMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvWnlqOE5YTlZGa1A4cy1IRzBjMDBPRS00OVFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIRQ MA0GCSqGSIb3DQEBCwUAA4IBAQBXTkqQC0ggg2vC44x78hYa92iFXlP/tW+he+qf t6rMTg5iHbbeOOj4qPT5dXrgKGOwKcMs09npWeIhBGNvX59j+Bn5VyFXu0cBKUuW SO2ftXAVkHFm6IjaWtgdUiOF5V2kkKP+6hi0QcEOWRX7H5Ng46P8yyj25mcWgwI4 GcR5+xIfqNQQpBAH3H02eNL5AlWdWZ8BhHr1TOHSu84SFNFfLTipKocCXxSGSRc+ xflpmGia7OU/zgbxzuptZRGbAqFvyBetOBwXeqbYahi9KpseGpx/McR0g52/i1Qb CWRO1m3Zi2FAtcNjrUyqr7igDTyG/0L2y8kad9kUrc3gnOlG -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:12 2026 by rpki-client