This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CZDKIGwWhnI-INEGACnwv7AgaTg.roa File: CZDKIGwWhnI-INEGACnwv7AgaTg.roa (raw, json) Hash identifier: dVa9P5hdVe5LY0y46KggHZSlq4Z8c9qXOpPcVSps3Is= Subject key identifier: 09:90:CA:20:6C:16:86:72:3E:20:D1:06:00:29:F0:BF:B0:20:69:38 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B8A41AA5CC3A53299ABA45809DAB77B67 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CZDKIGwWhnI-INEGACnwv7AgaTg.roa Signing time: Sun 04 Jan 2026 18:25:17 +0000 ROA not before: Sun 04 Jan 2026 18:25:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 2a0d:d940:d0::/44 maxlen: 44 2a0d:d940:1e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:41:aa:5c:c3:a5:32:99:ab:a4:58:09:da:b7:7b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 4 18:25:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0990ca206c1686723e20d1060029f0bfb0206938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:3d:dc:d8:89:18:c2:c9:32:84:b6:21:dd: a7:16:6a:06:a8:12:ed:1c:4b:ea:c7:4b:97:b3:67: 2b:b9:aa:42:03:a3:d8:82:6a:06:d9:9f:04:2e:01: 8d:69:04:12:bd:11:bf:44:bd:19:a3:78:ad:33:40: 20:75:2c:c5:07:08:74:fc:75:f3:c2:6c:65:8a:9a: 53:b7:55:ed:a4:e7:f8:82:fc:08:75:5d:73:d4:cd: c9:be:b6:7e:4e:3f:db:d9:06:cd:47:6c:35:e5:f4: 3d:b6:b9:35:77:89:02:62:80:60:28:b7:fc:c1:54: 82:c9:ba:10:be:ed:14:95:e0:f9:79:ed:61:47:07: cd:8e:8c:61:dc:02:33:ea:37:1b:52:20:1c:a6:d5: f5:2a:73:53:af:58:5c:2a:96:ec:a7:41:54:b3:9c: b5:66:ca:2a:dd:6f:0e:d5:bf:29:7a:16:81:14:5c: c9:ae:fe:4a:f9:8a:6e:7b:b9:ab:2b:6a:c8:6e:9d: 05:2b:7a:b3:e5:f1:08:29:1c:10:52:62:7a:16:ed: 70:ac:a5:81:03:4c:4d:74:8d:16:96:71:5b:de:68: 4b:e0:4a:b9:30:47:e1:e4:d4:65:33:65:a1:a2:11: 47:bd:9d:6f:b3:a0:e5:1f:07:35:d8:7b:56:0f:61: cf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:90:CA:20:6C:16:86:72:3E:20:D1:06:00:29:F0:BF:B0:20:69:38 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/CZDKIGwWhnI-INEGACnwv7AgaTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:d0::/44 2a0d:d940:1e00::/40 Signature Algorithm: sha256WithRSAEncryption 65:5f:c4:fa:bd:32:16:bd:ce:a3:a6:27:09:02:64:fb:36:6b: fa:e5:0f:7d:6b:52:04:1c:51:89:66:22:50:db:f1:22:77:7f: 18:fa:11:cf:bb:1d:06:24:a2:d8:07:c0:72:3f:63:ca:96:7c: 63:c7:ad:3a:2e:6d:85:3a:c0:f3:33:31:82:5e:6f:3e:89:76: e7:fa:57:c3:f9:57:a8:22:fe:36:29:82:d2:0a:3d:7b:f4:1a: 29:56:e0:db:e4:04:7e:5e:3a:27:a5:a8:f1:ea:41:ca:8c:90: 13:d4:af:6c:cd:a6:b6:55:f6:ae:61:1b:42:0c:71:35:51:4f: 1e:17:8d:38:00:7e:0a:d3:52:83:15:1c:52:9b:d5:fa:d8:6a: f2:56:76:b6:69:32:00:7f:85:9b:8f:a7:85:62:1e:b6:fc:d9: b7:a7:8f:a7:f1:ea:00:9c:40:3e:30:3b:71:8c:98:46:e5:1a: 7f:96:70:25:f4:90:cb:c9:e7:2a:6e:22:27:a2:5e:b4:a6:c9: 7d:d0:8b:99:10:3e:ed:f4:d5:70:3c:c9:1a:bd:db:3f:cb:74: d6:89:8b:df:26:0a:dd:33:fb:7a:69:04:72:91:e1:66:46:2a: d0:b4:f0:2a:6f:b9:6c:a8:66:a9:ef:c2:dd:69:a2:cb:5e:9d: 16:17:47:2c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZuKQapcw6UymaukWAnat3tnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTA0MTgyNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTkwY2EyMDZjMTY4NjcyM2UyMGQxMDYwMDI5ZjBiZmIwMjA2OTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8w93NiJGMLJMoS2Id2nFmoGqBLt HEvqx0uXs2cruapCA6PYgmoG2Z8ELgGNaQQSvRG/RL0Zo3itM0AgdSzFBwh0/HXz wmxlippTt1XtpOf4gvwIdV1z1M3JvrZ+Tj/b2QbNR2w15fQ9trk1d4kCYoBgKLf8 wVSCyboQvu0UleD5ee1hRwfNjoxh3AIz6jcbUiAcptX1KnNTr1hcKpbsp0FUs5y1 Zsoq3W8O1b8pehaBFFzJrv5K+Ypue7mrK2rIbp0FK3qz5fEIKRwQUmJ6Fu1wrKWB A0xNdI0WlnFb3mhL4Eq5MEfh5NRlM2WhohFHvZ1vs6DlHwc12HtWD2HPiQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFAmQyiBsFoZyPiDRBgAp8L+wIGk4MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQ1pES0lHd1dobkktSU5FR0FDbnd2N0FnYVRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKg3ZQADQ AwYAKg3ZQB4wDQYJKoZIhvcNAQELBQADggEBAGVfxPq9Mha9zqOmJwkCZPs2a/rl D31rUgQcUYlmIlDb8SJ3fxj6Ec+7HQYkotgHwHI/Y8qWfGPHrToubYU6wPMzMYJe bz6Jduf6V8P5V6gi/jYpgtIKPXv0GilW4NvkBH5eOielqPHqQcqMkBPUr2zNprZV 9q5hG0IMcTVRTx4XjTgAfgrTUoMVHFKb1frYavJWdrZpMgB/hZuPp4ViHrb82ben j6fx6gCcQD4wO3GMmEblGn+WcCX0kMvJ5ypuIieiXrSmyX3Qi5kQPu301XA8yRq9 2z/LdNaJi98mCt0z+3ppBHKR4WZGKtC08CpvuWyoZqnvwt1postenRYXRyw= -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:55 2026 by rpki-client