This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/JZWlbgGs77-K_lBvMrRD_aczpko.roa File: JZWlbgGs77-K_lBvMrRD_aczpko.roa (raw, json) Hash identifier: 7WDxDeue9uY3onqd6ZcYQ+v+RK9TTwQALQaKXD0UqfQ= Subject key identifier: 25:95:A5:6E:01:AC:EF:BF:8A:FE:50:6F:32:B4:43:FD:A7:33:A6:4A Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B7AC877F80A6AC4463B30DE0F0101D92B Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/JZWlbgGs77-K_lBvMrRD_aczpko.roa Signing time: Thu 01 Jan 2026 18:18:36 +0000 ROA not before: Thu 01 Jan 2026 18:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205901 IP address blocks: 2a0d:d940:2001::/48 maxlen: 48 2a0d:d940:9002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:77:f8:0a:6a:c4:46:3b:30:de:0f:01:01:d9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 1 18:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2595a56e01acefbf8afe506f32b443fda733a64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:11:43:51:48:67:a7:d3:9d:54:ee:7d:99: 2b:3c:95:08:39:15:d1:cc:42:91:9d:a8:a3:35:85: 64:89:54:9c:06:3b:75:93:2f:70:c2:5d:6e:2a:81: f8:99:de:92:8a:3f:d2:9b:3a:96:07:6e:ee:04:ca: 71:9c:f6:20:32:13:c5:31:43:d9:61:a1:53:60:70: d7:fb:23:36:c9:dd:08:f0:2e:f2:47:e6:77:ad:99: 58:92:35:67:9c:94:15:e6:69:ac:fb:9e:93:62:7b: c5:d2:0f:18:45:b0:3a:b7:f4:e3:73:c7:df:ed:71: cd:19:b5:53:56:ec:23:74:ae:48:c9:f4:30:47:77: 04:b0:be:c6:fb:85:76:11:e2:0c:a8:a9:31:e3:07: df:13:9f:05:8b:68:cb:02:0b:c2:7f:65:2b:51:08: 46:a5:41:51:a2:9a:0c:d9:b1:36:af:59:40:2d:a0: 8a:50:92:ec:d4:09:26:ec:46:7f:28:47:0a:b9:bd: 83:4c:be:0a:11:a4:cc:a5:33:f8:89:f6:22:ee:f5: 97:78:30:63:e6:1a:60:c0:c3:4b:ec:04:ed:2b:0a: 86:2b:92:fb:e0:c2:47:5d:e8:d2:56:30:61:b9:db: a3:3b:c3:f0:19:a1:b5:6b:42:37:8b:bf:20:df:f7: 5f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:95:A5:6E:01:AC:EF:BF:8A:FE:50:6F:32:B4:43:FD:A7:33:A6:4A X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/JZWlbgGs77-K_lBvMrRD_aczpko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:2001::/48 2a0d:d940:9002::/48 Signature Algorithm: sha256WithRSAEncryption 9b:10:72:dc:bc:70:68:ce:9d:c6:e1:3c:3c:23:1c:65:8f:dd: 3b:6b:14:53:77:ad:e1:6b:86:27:5a:eb:49:33:33:57:08:20: e7:08:f5:fc:74:df:07:ee:f5:a5:9a:d6:97:cf:e2:1b:71:07: 6b:5b:8b:ae:c3:be:74:04:ab:18:09:a1:0e:3f:8d:f3:c3:80: 51:1a:75:c2:04:3c:a1:07:46:29:ca:eb:4d:1b:cf:e8:8e:8d: c0:12:d2:61:03:dd:48:c5:28:3d:ae:5e:7c:1c:e4:52:c8:e5: b3:26:2c:7e:c6:20:47:a5:2f:6b:38:eb:33:e5:c8:59:2c:41: 71:1a:45:bc:4f:e3:c2:a0:82:c8:72:84:09:a9:32:29:93:66: 4e:90:1b:b0:f0:66:1b:a2:1f:0d:0b:ba:26:ae:b8:e7:25:9c: bb:50:62:42:82:9f:23:a8:f7:e1:c1:8e:20:81:2c:86:b3:78: 2b:b0:53:71:8b:0a:f9:6f:a3:5d:ad:af:54:a3:bb:ab:e5:03: de:e4:2c:d6:04:97:ed:c8:18:5f:8d:6f:d0:36:78:c7:94:e2: b0:6f:fe:1b:a1:55:41:82:97:05:99:9d:bd:e5:bc:a8:a1:95: 58:6c:16:e5:2e:32:ea:60:b8:86:eb:83:6f:74:6d:e5:c3:64: 73:9f:a3:69 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yHf4CmrERjsw3g8BAdkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAxMTgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTk1YTU2ZTAxYWNlZmJmOGFmZTUwNmYzMmI0NDNmZGE3MzNhNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KARQ1FIZ6fTnVTufZkrPJUIORXR zEKRnaijNYVkiVScBjt1ky9wwl1uKoH4md6Sij/SmzqWB27uBMpxnPYgMhPFMUPZ YaFTYHDX+yM2yd0I8C7yR+Z3rZlYkjVnnJQV5mms+56TYnvF0g8YRbA6t/Tjc8ff 7XHNGbVTVuwjdK5IyfQwR3cEsL7G+4V2EeIMqKkx4wffE58Fi2jLAgvCf2UrUQhG pUFRopoM2bE2r1lALaCKUJLs1Akm7EZ/KEcKub2DTL4KEaTMpTP4ifYi7vWXeDBj 5hpgwMNL7ATtKwqGK5L74MJHXejSVjBhudujO8PwGaG1a0I3i78g3/df9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCWVpW4BrO+/iv5QbzK0Q/2nM6ZKMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvSlpXbGJnR3M3Ny1LX2xCdk1yUkRfYWN6cGtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQCAB AwcAKg3ZQJACMA0GCSqGSIb3DQEBCwUAA4IBAQCbEHLcvHBozp3G4Tw8Ixxlj907 axRTd63ha4YnWutJMzNXCCDnCPX8dN8H7vWlmtaXz+IbcQdrW4uuw750BKsYCaEO P43zw4BRGnXCBDyhB0YpyutNG8/ojo3AEtJhA91IxSg9rl58HORSyOWzJix+xiBH pS9rOOsz5chZLEFxGkW8T+PCoILIcoQJqTIpk2ZOkBuw8GYboh8NC7omrrjnJZy7 UGJCgp8jqPfhwY4ggSyGs3grsFNxiwr5b6Ndra9Uo7ur5QPe5CzWBJftyBhfjW/Q NnjHlOKwb/4boVVBgpcFmZ295byooZVYbBblLjLqYLiG64NvdG3lw2Rzn6Np -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:34 2026 by rpki-client