This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/zB1uc6k_qAdWt66X8InqZqHDntM.roa File: zB1uc6k_qAdWt66X8InqZqHDntM.roa (raw, json) Hash identifier: hWYMua5mstmbOSm8yc4WQRkHL7pc/tOGsprl+gVmDkM= Subject key identifier: CC:1D:6E:73:A9:3F:A8:07:56:B7:AE:97:F0:89:EA:66:A1:C3:9E:D3 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019BCCCDD147930CDFB068EF87E4AD65BC9D Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/zB1uc6k_qAdWt66X8InqZqHDntM.roa Signing time: Sat 17 Jan 2026 16:33:19 +0000 ROA not before: Sat 17 Jan 2026 16:33:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212895 IP address blocks: 2a0d:d940:90a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cc:cd:d1:47:93:0c:df:b0:68:ef:87:e4:ad:65:bc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 17 16:33:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc1d6e73a93fa80756b7ae97f089ea66a1c39ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:f9:66:ff:77:b1:47:e0:a9:34:3f:8d:f8: 24:10:a2:d1:aa:c5:9f:cf:8c:c2:0d:e9:2c:f3:12: 1e:ff:03:78:5d:30:02:7b:f5:fa:b5:bf:08:5d:8d: 58:4c:95:8d:73:f1:d9:ed:25:3c:ae:e8:c7:f9:4d: c6:41:ed:40:ba:0c:2e:b1:56:5a:59:68:eb:e9:21: f1:89:8e:05:b1:24:61:f9:98:e6:bc:2d:d2:52:e2: e6:b5:4a:b4:3a:92:74:29:f7:3a:18:f0:1a:d7:71: af:1c:a1:ca:90:33:0d:d8:a9:dd:d6:20:e6:e5:f3: 6b:6f:a7:28:27:f4:94:8f:38:fb:e2:05:ab:64:a7: 1c:d7:cd:fe:95:8c:b3:53:6d:c8:a7:c0:bf:37:db: 64:d5:a1:54:4a:d3:bd:1a:8e:af:00:16:e3:1c:38: b2:72:9a:ba:be:28:c1:2e:b9:82:77:d9:7a:38:65: 6f:9f:6f:7c:9e:ef:64:b9:d0:1e:dd:ec:a4:ce:f8: 20:e4:19:b1:8d:5b:42:ca:fe:d7:3b:c1:b8:6b:ee: dc:d5:5f:51:9e:2b:cd:5d:88:2b:db:51:b1:3e:6e: 85:45:72:fa:73:ae:8f:9f:82:1a:4d:44:fd:d7:bd: 40:fd:d1:bc:de:ac:12:e9:80:1f:99:eb:df:02:59: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:6E:73:A9:3F:A8:07:56:B7:AE:97:F0:89:EA:66:A1:C3:9E:D3 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/zB1uc6k_qAdWt66X8InqZqHDntM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:90a6::/48 Signature Algorithm: sha256WithRSAEncryption d3:12:a2:c6:23:09:2a:ca:d1:57:be:11:58:a0:66:5c:03:c6: b8:a0:71:c2:84:f2:09:d0:e3:09:08:b3:e2:02:9d:ac:90:71: f1:7b:a5:0e:24:17:7c:5e:06:bf:94:ee:33:a2:05:4b:f6:cd: 5e:6d:36:3e:7f:d4:be:98:ed:1f:b8:0e:92:8e:fe:fb:9e:cd: 03:9d:39:53:00:5b:df:d8:7e:02:86:22:56:5f:99:b4:48:4e: 7e:c9:60:37:b5:10:c4:74:4f:62:a4:06:92:ff:3a:ff:3a:bb: fe:f0:ac:0f:b3:4d:c7:01:72:25:d2:3d:ff:f5:2c:3e:2a:2e: bd:ec:96:8e:ca:83:2a:08:84:58:80:4f:2c:50:82:27:7e:8c: c9:f2:85:85:f5:2e:e3:96:67:42:fb:a6:bc:93:3b:df:c2:9a: 84:ee:52:48:94:51:77:e8:f9:cd:b2:86:88:2a:c9:82:3e:d6: 8b:71:b8:b5:9c:a1:d0:a9:5e:37:14:70:6e:d7:71:f7:0b:52: 0f:a7:14:17:9c:97:78:7e:7f:29:a6:be:fa:41:91:6b:c9:ff: 9a:33:d6:46:88:31:aa:41:59:cd:c5:e1:07:7f:b8:89:b9:c1: 0b:b4:4d:13:d5:e4:5a:b2:3c:72:e1:47:de:91:1f:0d:b7:71: a3:06:f2:d2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvMzdFHkwzfsGjvh+StZbydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTE3MTYzMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzFkNmU3M2E5M2ZhODA3NTZiN2FlOTdmMDg5ZWE2NmExYzM5ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYP5Zv93sUfgqTQ/jfgkEKLRqsWf z4zCDeks8xIe/wN4XTACe/X6tb8IXY1YTJWNc/HZ7SU8rujH+U3GQe1AugwusVZa WWjr6SHxiY4FsSRh+ZjmvC3SUuLmtUq0OpJ0Kfc6GPAa13GvHKHKkDMN2Knd1iDm 5fNrb6coJ/SUjzj74gWrZKcc183+lYyzU23Ip8C/N9tk1aFUStO9Go6vABbjHDiy cpq6vijBLrmCd9l6OGVvn298nu9kudAe3eykzvgg5BmxjVtCyv7XO8G4a+7c1V9R nivNXYgr21GxPm6FRXL6c66Pn4IaTUT9171A/dG83qwS6YAfmevfAlmVQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMwdbnOpP6gHVreul/CJ6mahw57TMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvekIxdWM2a19xQWRXdDY2WDhJbnFacUhEbnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQJCm MA0GCSqGSIb3DQEBCwUAA4IBAQDTEqLGIwkqytFXvhFYoGZcA8a4oHHChPIJ0OMJ CLPiAp2skHHxe6UOJBd8Xga/lO4zogVL9s1ebTY+f9S+mO0fuA6Sjv77ns0DnTlT AFvf2H4ChiJWX5m0SE5+yWA3tRDEdE9ipAaS/zr/Orv+8KwPs03HAXIl0j3/9Sw+ Ki697JaOyoMqCIRYgE8sUIInfozJ8oWF9S7jlmdC+6a8kzvfwpqE7lJIlFF36PnN soaIKsmCPtaLcbi1nKHQqV43FHBu13H3C1IPpxQXnJd4fn8ppr76QZFryf+aM9ZG iDGqQVnNxeEHf7iJucELtE0T1eRasjxy4UfekR8Nt3GjBvLS -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:18 2026 by rpki-client