This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/z7Jky_l_vERGZmnbRTbQHo6iSl0.roa File: z7Jky_l_vERGZmnbRTbQHo6iSl0.roa (raw, json) Hash identifier: /zMH/gs7zUW2ybBqzyKAL9kXu6AlniUMtgtFZvFiuYM= Subject key identifier: CF:B2:64:CB:F9:7F:BC:44:46:66:69:DB:45:36:D0:1E:8E:A2:4A:5D Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84C6F134FB8C102267DE1FA839B8BD Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/z7Jky_l_vERGZmnbRTbQHo6iSl0.roa Signing time: Fri 02 Jan 2026 16:22:46 +0000 ROA not before: Fri 02 Jan 2026 16:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 2a12:d3c0::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c6:f1:34:fb:8c:10:22:67:de:1f:a8:39:b8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfb264cbf97fbc44466669db4536d01e8ea24a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:04:af:34:c1:f4:a0:20:42:95:4e:6f:2c:8a: 91:94:cf:c9:56:d5:2b:56:75:f4:4b:6f:68:c7:52: da:13:7d:53:a0:ce:ce:40:dc:b4:4d:68:fe:8c:54: 3f:08:b8:e1:1b:0f:31:f0:b3:48:1b:4e:c0:89:16: 36:a1:e0:f2:29:59:d5:c3:89:78:cf:1f:a9:e7:59: 24:6a:a8:d3:ce:2c:4a:47:f5:a2:db:85:27:32:30: 86:74:86:f2:76:df:f9:6c:0a:fe:83:51:0e:57:5d: 0e:96:f4:df:55:a0:1d:f6:7c:38:11:70:1e:f1:06: f4:54:ca:2f:d4:80:e4:b1:58:bd:62:89:e3:bb:e9: 56:41:a9:ef:5f:c1:89:6a:1e:31:c0:bc:45:79:9b: 07:61:a4:b5:51:5d:2b:0a:4a:60:68:c7:21:82:af: 9a:87:b0:01:fd:69:ed:8a:c2:3b:8b:fc:23:ad:b4: 56:3a:90:c6:07:6f:63:2f:04:1e:5e:c6:6b:fd:d4: 7f:a8:ac:7f:25:a1:da:d3:b8:4b:32:0b:20:c1:a9: 42:e5:ac:68:8e:52:92:ef:98:f7:c5:1c:89:e6:37: 75:d2:1b:0f:01:0d:75:d2:32:2e:1b:93:9e:ec:f2: 68:4c:16:d9:e6:89:63:87:ff:de:6a:42:86:36:54: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B2:64:CB:F9:7F:BC:44:46:66:69:DB:45:36:D0:1E:8E:A2:4A:5D X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/z7Jky_l_vERGZmnbRTbQHo6iSl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:d3c0::/29 Signature Algorithm: sha256WithRSAEncryption b0:cd:84:8f:f0:ba:68:d2:76:e1:7b:35:16:48:dd:a5:18:d3: 4a:08:2a:be:1c:eb:8f:dc:0c:af:e1:f2:57:92:71:1d:10:35: 3d:ed:a3:16:5e:bc:da:68:60:5a:95:2b:fb:64:62:6d:1f:8f: 1f:fc:31:12:0e:aa:1f:e1:c8:94:c9:82:16:57:24:74:1a:d6: f4:67:e6:8f:b3:d4:64:e2:c8:7e:41:df:6e:94:28:aa:03:ab: ea:96:62:85:1c:a6:45:e7:bd:a2:38:ce:6d:a2:e2:a8:3a:69: e2:bc:fc:d1:25:c4:b4:41:58:37:47:28:6e:73:9c:6b:58:c1: 0e:4e:fb:63:b8:9b:8f:3b:0f:bc:7f:d9:f7:f1:ea:f7:7d:5b: b6:ac:6a:87:72:da:b1:dd:13:33:95:d9:4a:99:f5:d2:39:87: 0f:19:2e:3c:9c:4c:36:dc:e7:53:68:57:c6:c9:5e:8b:85:30: ea:43:80:5d:cd:0d:41:b9:68:37:c9:c9:6e:67:f2:5d:c5:af: ba:43:85:a2:91:06:fd:3e:24:c5:e5:9d:5d:7c:6e:15:73:bc: 0c:06:e1:a4:83:de:1a:a0:a0:82:69:bc:c3:17:0e:ca:6b:97: 52:98:f7:4f:66:41:d2:20:a4:02:2b:b5:8b:a5:c6:50:b2:61: ef:50:a4:83 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hMbxNPuMECJn3h+oObi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmIyNjRjYmY5N2ZiYzQ0NDY2NjY5ZGI0NTM2ZDAxZThlYTI0YTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wSvNMH0oCBClU5vLIqRlM/JVtUr VnX0S29ox1LaE31ToM7OQNy0TWj+jFQ/CLjhGw8x8LNIG07AiRY2oeDyKVnVw4l4 zx+p51kkaqjTzixKR/Wi24UnMjCGdIbydt/5bAr+g1EOV10OlvTfVaAd9nw4EXAe 8Qb0VMov1IDksVi9Yonju+lWQanvX8GJah4xwLxFeZsHYaS1UV0rCkpgaMchgq+a h7AB/WntisI7i/wjrbRWOpDGB29jLwQeXsZr/dR/qKx/JaHa07hLMgsgwalC5axo jlKS75j3xRyJ5jd10hsPAQ110jIuG5Oe7PJoTBbZ5oljh//eakKGNlR18wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFM+yZMv5f7xERmZp20U20B6OokpdMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvejdKa3lfbF92RVJHWm1uYlJUYlFIbzZpU2wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLTwDAN BgkqhkiG9w0BAQsFAAOCAQEAsM2Ej/C6aNJ24Xs1FkjdpRjTSggqvhzrj9wMr+Hy V5JxHRA1Pe2jFl682mhgWpUr+2RibR+PH/wxEg6qH+HIlMmCFlckdBrW9Gfmj7PU ZOLIfkHfbpQoqgOr6pZihRymRee9ojjObaLiqDpp4rz80SXEtEFYN0cobnOca1jB Dk77Y7ibjzsPvH/Z9/Hq931btqxqh3Lasd0TM5XZSpn10jmHDxkuPJxMNtznU2hX xslei4Uw6kOAXc0NQbloN8nJbmfyXcWvukOFopEG/T4kxeWdXXxuFXO8DAbhpIPe GqCggmm8wxcOymuXUpj3T2ZB0iCkAiu1i6XGULJh71Ckgw== -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:00 2026 by rpki-client