This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZLUEmByOiobrhmfNh__npJOjTZI.roa File: ZLUEmByOiobrhmfNh__npJOjTZI.roa (raw, json) Hash identifier: jsI1IQp+AglclYgjL62S68CLg27R4VrCqoouYs5JfJI= Subject key identifier: 64:B5:04:98:1C:8E:8A:86:EB:86:67:CD:87:FF:E7:A4:93:A3:4D:92 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B8A5FDFD1DB9AF92EFDE977DDC4FE1BCF Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZLUEmByOiobrhmfNh__npJOjTZI.roa Signing time: Sun 04 Jan 2026 18:58:17 +0000 ROA not before: Sun 04 Jan 2026 18:58:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200993 IP address blocks: 2a0d:d940:50::/46 maxlen: 48 2a0d:d940:1300::/40 maxlen: 40 2a0d:d940:1f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:5f:df:d1:db:9a:f9:2e:fd:e9:77:dd:c4:fe:1b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 4 18:58:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64b504981c8e8a86eb8667cd87ffe7a493a34d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:2a:d5:4e:ce:03:36:e7:8c:8d:8f:97:1f: 58:66:80:0c:35:80:bf:b9:e5:f0:fe:dd:17:7a:b3: e3:4e:f7:57:41:77:5f:54:b5:2d:cb:98:40:38:fc: 74:2d:67:cc:70:d8:c6:33:3a:fe:5f:c5:cd:c3:33: bd:34:f7:03:cb:f8:90:ff:25:1d:30:e5:2a:c6:a8: ab:bc:3f:4f:52:fe:c3:7b:39:e7:10:61:35:53:1e: 1a:e9:f2:12:27:3c:af:34:3f:bf:80:5f:63:06:95: 5f:86:d2:54:91:23:3b:d5:3e:a4:a1:39:c1:5b:af: 47:5f:3a:7e:c4:06:89:b1:25:9f:73:51:48:e7:32: b9:9e:ce:7e:9e:4c:a9:5e:33:31:bd:9a:26:19:2e: e9:64:43:78:2b:13:2e:8f:68:d8:c5:dc:8c:4c:73: 76:e0:d0:6b:0d:8f:c3:ce:78:27:a4:23:7f:73:08: 03:15:ee:9f:4b:0b:48:f5:14:32:39:01:e1:10:11: 6a:1e:ef:4c:3e:7c:e3:a9:f8:f2:0c:fb:37:f4:dd: bf:e6:f8:a3:d6:09:5e:8c:95:4e:c1:1e:12:8c:cf: b2:f9:c8:3d:5d:0a:9f:36:55:14:e8:bb:6c:b2:8b: 79:20:13:01:df:71:00:c6:70:2b:4b:d6:0c:15:83: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B5:04:98:1C:8E:8A:86:EB:86:67:CD:87:FF:E7:A4:93:A3:4D:92 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ZLUEmByOiobrhmfNh__npJOjTZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:50::/46 2a0d:d940:1300::/40 2a0d:d940:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 64:d3:1e:8d:47:c6:7e:2a:7c:cc:f4:88:ff:77:b6:b3:fd:49: fe:fb:1b:91:9c:89:23:11:8d:d8:e4:41:97:21:a9:be:e7:37: 08:11:3c:96:e4:c6:d6:49:74:60:39:4c:6f:2a:be:65:0a:93: 32:bb:26:54:cb:d9:2e:1f:7a:5e:b1:5e:2c:f8:64:b4:b2:10: a1:8f:91:87:6c:20:54:47:5e:51:9d:b6:a3:3e:21:7d:95:bf: a5:12:b4:b2:09:a1:5d:5b:11:68:ce:60:16:9c:bc:d2:c3:05: 7c:b6:7c:5f:50:8e:4c:c2:15:fe:c2:20:32:5f:42:58:15:1d: 3f:0e:92:f8:9c:8a:43:76:2e:ed:1f:af:4e:3c:93:69:9a:1b: d4:1a:a6:7f:85:be:93:c1:82:68:f3:37:d7:f5:65:f0:0d:ba: fb:e6:7a:da:56:d7:5c:08:2b:ef:59:a8:77:5d:c1:15:aa:59: 40:1a:e8:a4:8b:81:8d:c1:19:8f:b8:de:72:a5:e5:b4:0f:f9: 29:0b:ba:97:48:a8:ad:f5:85:77:5b:7c:96:d0:ea:4d:49:4c: b3:e5:67:03:c1:27:88:b5:64:23:f7:24:a6:aa:0d:f7:64:93: a7:85:22:87:91:45:99:21:e7:2c:42:04:84:3b:01:0a:89:f9: 90:e7:9e:23 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZuKX9/R25r5Lv3pd93E/hvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTA0MTg1ODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGI1MDQ5ODFjOGU4YTg2ZWI4NjY3Y2Q4N2ZmZTdhNDkzYTM0ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux4q1U7OAzbnjI2Plx9YZoAMNYC/ ueXw/t0XerPjTvdXQXdfVLUty5hAOPx0LWfMcNjGMzr+X8XNwzO9NPcDy/iQ/yUd MOUqxqirvD9PUv7DeznnEGE1Ux4a6fISJzyvND+/gF9jBpVfhtJUkSM71T6koTnB W69HXzp+xAaJsSWfc1FI5zK5ns5+nkypXjMxvZomGS7pZEN4KxMuj2jYxdyMTHN2 4NBrDY/DzngnpCN/cwgDFe6fSwtI9RQyOQHhEBFqHu9MPnzjqfjyDPs39N2/5vij 1glejJVOwR4SjM+y+cg9XQqfNlUU6Ltssot5IBMB33EAxnArS9YMFYPlwwIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFGS1BJgcjoqG64ZnzYf/56STo02SMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvWkxVRW1CeU9pb2JyaG1mTmhfX25wSk9qVFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcCKg3ZQABQ AwYAKg3ZQBMDBgAqDdlAHzANBgkqhkiG9w0BAQsFAAOCAQEAZNMejUfGfip8zPSI /3e2s/1J/vsbkZyJIxGN2ORBlyGpvuc3CBE8luTG1kl0YDlMbyq+ZQqTMrsmVMvZ Lh96XrFeLPhktLIQoY+Rh2wgVEdeUZ22oz4hfZW/pRK0sgmhXVsRaM5gFpy80sMF fLZ8X1COTMIV/sIgMl9CWBUdPw6S+JyKQ3Yu7R+vTjyTaZob1Bqmf4W+k8GCaPM3 1/Vl8A26++Z62lbXXAgr71mod13BFapZQBropIuBjcEZj7jecqXltA/5KQu6l0io rfWFd1t8ltDqTUlMs+VnA8EniLVkI/ckpqoN92STp4Uih5FFmSHnLEIEhDsBCon5 kOeeIw== -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:07 2026 by rpki-client