This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zCLSC2PRG_Jq0Rq1b54jlivR25k.roa File: zCLSC2PRG_Jq0Rq1b54jlivR25k.roa (raw, json) Hash identifier: nn1WG5IJsnl/S3pRLFNtdkkGq1H1Zz2DX9z5FM3oHgs= Subject key identifier: CC:22:D2:0B:63:D1:1B:F2:6A:D1:1A:B5:6F:9E:23:96:2B:D1:DB:99 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F70950ECE00DCD0978A57899FC61 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zCLSC2PRG_Jq0Rq1b54jlivR25k.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209533 IP address blocks: 2a0c:9a40:a000::/36 maxlen: 48 2a0c:9a47::/44 maxlen: 44 2a0c:9a47:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f7:09:50:ec:e0:0d:cd:09:78:a5:78:99:fc:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc22d20b63d11bf26ad11ab56f9e23962bd1db99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:37:d8:18:0f:f2:37:ee:2b:2a:27:b4:4d: d5:59:91:52:e0:7a:ec:93:cc:30:c6:4b:c8:87:20: aa:a1:59:5c:24:df:33:e5:43:3e:a9:40:bf:c8:9f: 1f:c4:74:f9:89:8b:93:3c:fa:6d:05:e0:47:98:22: 7a:83:e8:09:25:3d:e5:2a:53:d0:34:ca:4f:db:8a: 76:48:6d:9f:f9:1b:46:7e:88:b8:6a:e5:36:8d:10: ca:2a:ae:db:0d:a1:13:67:da:02:d9:d9:5c:67:e3: e1:ec:91:88:33:96:b6:9a:39:76:2b:ce:da:9b:de: fa:1e:de:9a:cc:24:f2:6e:a0:7c:4f:61:be:ba:09: 90:20:0a:c1:45:e2:70:fc:05:a8:c5:c5:0b:d9:00: 2e:69:6a:99:cd:16:dd:56:3c:b6:39:cb:3f:e1:08: 82:1c:4c:1a:c3:64:09:6c:1a:a7:22:90:97:87:da: 27:d1:01:28:ee:99:fa:3b:46:db:33:89:7d:7a:48: 9a:58:86:4f:a5:51:23:5c:e1:14:8e:3a:40:73:1f: 08:07:41:f9:ce:55:4d:3c:19:3d:13:bb:85:c4:32: 2e:9d:c7:c4:7a:bb:26:95:8a:c1:ff:6a:b1:e6:91: 77:57:c2:ae:15:25:ee:7d:aa:1f:0e:0f:7e:7a:8c: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:22:D2:0B:63:D1:1B:F2:6A:D1:1A:B5:6F:9E:23:96:2B:D1:DB:99 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zCLSC2PRG_Jq0Rq1b54jlivR25k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:a000::/36 2a0c:9a47::/44 2a0c:9a47:20::/48 Signature Algorithm: sha256WithRSAEncryption 12:e6:af:4f:c3:c7:a6:97:8b:92:ce:fe:f0:9b:58:c1:14:01: ab:3e:10:f7:52:82:86:f9:89:28:83:ce:8c:85:3d:ea:32:e1: 08:7d:99:49:49:af:83:61:24:5b:23:8d:6c:f9:8d:97:67:8d: eb:c7:bc:85:3a:2b:f8:3a:9e:0a:94:76:25:af:50:6c:99:2b: 22:64:67:07:86:95:85:f4:38:ac:d1:a0:29:1b:f6:8b:0d:c6: b6:d6:47:fb:5e:85:e6:de:99:bc:0d:f6:09:ca:e4:ed:6d:3f: f5:53:73:f7:45:fe:43:ea:85:f9:a5:fb:c1:74:b6:a4:db:5e: be:cf:ce:79:32:69:fd:1d:23:1f:ee:82:14:84:1b:83:f3:e1: 2d:a1:40:55:d2:38:28:11:d2:36:ea:d1:7c:0a:d9:87:97:b9: 40:d1:53:9a:59:bb:ce:a9:00:99:2f:e9:2e:8b:87:46:6e:65: a9:7c:12:02:6f:51:73:e2:b8:d2:4c:16:63:61:5b:b7:24:3f: 0d:bb:e9:a6:12:d0:cc:40:d6:03:8d:a6:da:bf:ce:07:0c:b5: cc:a5:a5:32:08:73:e2:be:0f:af:50:c2:d6:11:f1:a5:93:5b: a1:e6:66:4b:d5:85:9a:f5:1c:e4:4d:94:0f:8d:57:a4:72:a4: 26:ec:78:97 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+pvcJUOzgDc0JeKV4mfxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzIyZDIwYjYzZDExYmYyNmFkMTFhYjU2ZjllMjM5NjJiZDFkYjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdY32BgP8jfuKyontE3VWZFS4Hrs k8wwxkvIhyCqoVlcJN8z5UM+qUC/yJ8fxHT5iYuTPPptBeBHmCJ6g+gJJT3lKlPQ NMpP24p2SG2f+RtGfoi4auU2jRDKKq7bDaETZ9oC2dlcZ+Ph7JGIM5a2mjl2K87a m976Ht6azCTybqB8T2G+ugmQIArBReJw/AWoxcUL2QAuaWqZzRbdVjy2Ocs/4QiC HEwaw2QJbBqnIpCXh9on0QEo7pn6O0bbM4l9ekiaWIZPpVEjXOEUjjpAcx8IB0H5 zlVNPBk9E7uFxDIuncfEersmlYrB/2qx5pF3V8KuFSXufaofDg9+eoxeZwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMwi0gtj0RvyatEatW+eI5Yr0duZMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvekNMU0MyUFJHX0pxMFJxMWI1NGpsaXZSMjVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwYEKgyaQKAD BwQqDJpHAAADBwAqDJpHACAwDQYJKoZIhvcNAQELBQADggEBABLmr0/Dx6aXi5LO /vCbWMEUAas+EPdSgob5iSiDzoyFPeoy4Qh9mUlJr4NhJFsjjWz5jZdnjevHvIU6 K/g6ngqUdiWvUGyZKyJkZweGlYX0OKzRoCkb9osNxrbWR/tehebembwN9gnK5O1t P/VTc/dF/kPqhfml+8F0tqTbXr7Pznkyaf0dIx/ughSEG4Pz4S2hQFXSOCgR0jbq 0XwK2YeXuUDRU5pZu86pAJkv6S6Lh0ZuZal8EgJvUXPiuNJMFmNhW7ckPw276aYS 0MxA1gONptq/zgcMtcylpTIIc+K+D69QwtYR8aWTW6HmZkvVhZr1HORNlA+NV6Ry pCbseJc= -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:38 2026 by rpki-client