This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/zCvHww-lgeEaTdUBQpphqZ3w_9M.roa File: zCvHww-lgeEaTdUBQpphqZ3w_9M.roa (raw, json) Hash identifier: K/lIPuRjlV2HlKMhNCz08tPrUU4WvnzPvFNZtb1yMJs= Subject key identifier: CC:2B:C7:C3:0F:A5:81:E1:1A:4D:D5:01:42:9A:61:A9:9D:F0:FF:D3 Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d Certificate serial: 019C09F3AC9B433F6F4EB9267583FF20A2A6 Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/zCvHww-lgeEaTdUBQpphqZ3w_9M.roa Signing time: Thu 29 Jan 2026 13:31:30 +0000 ROA not before: Thu 29 Jan 2026 13:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56718 IP address blocks: 2a05:9780::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:f3:ac:9b:43:3f:6f:4e:b9:26:75:83:ff:20:a2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d Validity Not Before: Jan 29 13:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc2bc7c30fa581e11a4dd501429a61a99df0ffd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:b4:7b:42:6d:24:27:df:2e:33:f3:0f:90: 50:b6:46:ca:36:82:74:41:70:43:ed:9e:97:8f:c8: 4d:be:09:a2:52:4b:7d:11:45:47:95:11:f3:7b:62: ce:3d:3e:35:98:97:77:3b:bf:02:50:85:5b:35:7f: e8:5f:c2:e2:68:01:88:72:99:7e:77:63:26:9d:4e: bd:93:13:7d:6e:f6:41:95:e2:bf:ec:94:cf:4e:0e: dd:17:91:96:15:63:84:ed:5d:fa:e3:0f:a7:73:64: 7c:31:58:e8:43:9c:ba:30:1f:3f:4f:3c:75:4b:d0: d7:23:42:0c:60:5e:05:e3:79:e0:1b:2b:a1:2e:92: 42:0e:fe:51:bd:2d:f2:84:13:88:e1:91:75:8d:0e: 3f:4b:72:68:91:f3:97:18:6b:e6:0d:5c:37:f1:f1: 0a:33:4b:c9:91:29:3a:9e:1f:83:67:00:f1:e9:8b: 26:c0:f5:68:40:02:45:92:a7:fd:5f:a8:97:63:c6: 1b:de:e4:7c:49:3c:1e:2b:b0:8d:99:e9:ce:ce:78: 7c:10:21:e5:90:d3:cf:36:d6:bd:02:ae:7e:83:15: 54:4b:b2:54:72:a5:16:36:1b:85:dc:d0:e1:ac:81: 38:e9:d3:5e:a3:e5:ce:70:ca:5d:f9:d7:d2:5e:e0: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2B:C7:C3:0F:A5:81:E1:1A:4D:D5:01:42:9A:61:A9:9D:F0:FF:D3 X509v3 Authority Key Identifier: keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/zCvHww-lgeEaTdUBQpphqZ3w_9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9780::/40 Signature Algorithm: sha256WithRSAEncryption 0a:66:49:e4:11:36:f9:8c:74:28:ab:c4:bc:17:27:54:f6:fd: ac:34:ff:2d:eb:bf:a2:b6:be:85:12:7b:de:89:5f:33:77:4f: b0:6e:26:d5:ee:c8:c8:6e:ef:1b:1d:79:a2:7d:0c:a8:3f:dc: 2f:6a:4f:84:e6:61:70:ca:93:5a:65:50:17:8d:df:bc:d5:4f: 06:5c:0a:02:bd:bc:0d:8a:9d:6c:24:f5:12:65:61:76:14:f4: 85:52:64:5f:3d:6a:99:22:21:e2:58:c0:26:83:90:97:bd:95: 8c:3d:4a:50:4a:cb:06:92:cb:47:5f:57:96:ea:8f:66:84:69: 33:d4:da:c4:c6:7b:13:ff:05:b1:d1:ef:9d:22:73:35:9a:2c: c0:a9:07:85:23:20:d1:4e:c3:9c:b8:ca:24:b4:e0:e0:7b:0a: a6:5e:cb:12:82:70:d9:b7:82:c9:1d:de:e5:d1:b7:7a:11:32: 58:9c:0f:9a:98:e6:c6:94:a7:a0:aa:67:94:c6:b8:03:ae:54: 50:51:7b:16:25:c7:10:da:fd:d0:da:99:ac:10:ff:62:bc:7d: 84:54:00:31:e1:d4:41:91:85:38:cc:fb:f4:98:03:71:95:cf: c3:bd:9e:fe:00:ef:b2:7c:4b:0a:30:d7:df:b6:48:b3:73:a9: e2:29:c8:fd -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZwJ86ybQz9vTrkmdYP/IKKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYzhiYWNiZTczYTQwY2U4MThhNGJhZmEzOTNhODUyOTdj MTljMGQwHhcNMjYwMTI5MTMzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzJiYzdjMzBmYTU4MWUxMWE0ZGQ1MDE0MjlhNjFhOTlkZjBmZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D20e0JtJCffLjPzD5BQtkbKNoJ0 QXBD7Z6Xj8hNvgmiUkt9EUVHlRHze2LOPT41mJd3O78CUIVbNX/oX8LiaAGIcpl+ d2MmnU69kxN9bvZBleK/7JTPTg7dF5GWFWOE7V364w+nc2R8MVjoQ5y6MB8/Tzx1 S9DXI0IMYF4F43ngGyuhLpJCDv5RvS3yhBOI4ZF1jQ4/S3JokfOXGGvmDVw38fEK M0vJkSk6nh+DZwDx6YsmwPVoQAJFkqf9X6iXY8Yb3uR8STweK7CNmenOznh8ECHl kNPPNta9Aq5+gxVUS7JUcqUWNhuF3NDhrIE46dNeo+XOcMpd+dfSXuDWPwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMwrx8MPpYHhGk3VAUKaYamd8P/TMB8GA1UdIwQY MBaAFHzIusvnOkDOgYpLr6OTqFKXwZwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUt OGI4YjJhYzU2YzliLzEvekN2SHd3LWxnZUVhVGRVQlFwcGhxWjN3XzlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUtOGI4YjJhYzU2Yzli LzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgWXgAAw DQYJKoZIhvcNAQELBQADggEBAApmSeQRNvmMdCirxLwXJ1T2/aw0/y3rv6K2voUS e96JXzN3T7BuJtXuyMhu7xsdeaJ9DKg/3C9qT4TmYXDKk1plUBeN37zVTwZcCgK9 vA2KnWwk9RJlYXYU9IVSZF89apkiIeJYwCaDkJe9lYw9SlBKywaSy0dfV5bqj2aE aTPU2sTGexP/BbHR750iczWaLMCpB4UjINFOw5y4yiS04OB7CqZeyxKCcNm3gskd 3uXRt3oRMlicD5qY5saUp6CqZ5TGuAOuVFBRexYlxxDa/dDamawQ/2K8fYRUADHh 1EGRhTjM+/SYA3GVz8O9nv4A77J8Swow19+2SLNzqeIpyP0= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:29 2026 by rpki-client