This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ZcIzEiJwYxPPkm7Y7dv9lgoJaO4.roa File: ZcIzEiJwYxPPkm7Y7dv9lgoJaO4.roa (raw, json) Hash identifier: JNU/zVs/QkSh6LxJiN5Vq0jrPYqEK//Cnc3GvRNfkSI= Subject key identifier: 65:C2:33:12:22:70:63:13:CF:92:6E:D8:ED:DB:FD:96:0A:09:68:EE Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E620A5D74D5FC372DBBB09A45C26 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ZcIzEiJwYxPPkm7Y7dv9lgoJaO4.roa Signing time: Fri 02 Jan 2026 14:19:28 +0000 ROA not before: Fri 02 Jan 2026 14:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34150 IP address blocks: 2a02:2698:9c00::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e6:20:a5:d7:4d:5f:c3:72:db:bb:09:a4:5c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65c2331222706313cf926ed8eddbfd960a0968ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:b1:05:27:b8:ad:35:24:07:b4:c3:17:9a: e6:df:7f:b9:7e:75:23:77:72:20:99:18:c6:d0:35: f0:5b:28:f1:34:63:dc:8c:55:36:97:89:51:ee:a1: 06:7d:47:89:ed:c7:3e:77:b0:fe:b4:30:79:44:74: be:21:2e:27:ff:c9:34:d7:8e:5b:28:9b:c1:40:c9: ea:f3:91:74:75:44:be:88:a1:20:ff:22:e8:30:4a: 73:ea:28:e3:12:25:b7:10:0b:32:5e:7b:27:c3:bd: 5c:a9:bd:eb:70:31:0a:28:a8:bf:b2:c4:49:ec:ae: 23:10:8f:5e:8d:16:33:92:84:9c:89:a1:45:45:cf: 5b:07:38:3f:fa:b4:93:3c:08:70:05:01:25:e8:65: 1b:a3:d2:ae:94:32:32:c4:4e:cf:2e:a5:04:eb:be: 04:90:d1:16:b8:a0:d7:a2:da:9b:6a:25:a9:33:49: 08:d2:3c:42:ed:f9:f7:f8:3e:72:b5:b9:6e:87:f6: d5:a2:73:53:9b:2f:04:80:c3:92:19:24:f0:89:be: af:2f:d3:37:bb:21:54:fb:da:da:9d:56:75:02:11: 83:dd:c3:c5:fb:fd:ed:f0:73:b8:68:8d:07:f8:31: 78:65:0d:d0:f1:b2:c0:d6:1f:23:be:cf:f4:cf:64: f8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:33:12:22:70:63:13:CF:92:6E:D8:ED:DB:FD:96:0A:09:68:EE X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ZcIzEiJwYxPPkm7Y7dv9lgoJaO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:9c00::/38 Signature Algorithm: sha256WithRSAEncryption 1f:4d:92:17:75:29:31:8d:2d:08:94:8c:1e:70:5c:93:34:36: 7c:f7:84:10:ca:cf:7b:3f:22:66:be:2e:07:1b:0d:0c:de:24: 95:27:40:15:61:57:49:df:bc:b0:78:d5:03:fe:f0:17:c9:6c: 49:5e:c5:54:c8:99:3e:40:22:bb:30:3c:8d:6e:3f:50:05:67: 80:ea:6f:7f:ec:e2:cf:36:39:4b:29:05:e7:a4:98:7e:23:03: 9a:fe:04:f4:1c:e0:f7:29:ee:eb:ed:72:a6:38:af:aa:f4:e8: bc:32:86:c1:34:0c:3f:cc:9c:8b:41:20:11:c2:88:df:23:99: ec:b8:00:cb:9a:0c:f2:78:09:f4:79:1c:5d:be:59:18:a6:ff: cb:2b:8a:bc:db:9f:7e:9b:2b:74:8a:e4:e2:af:ec:ed:b9:13: 36:ea:c7:07:c3:7e:a1:13:72:85:ba:d6:33:1f:36:e6:82:0c: 69:33:5c:3b:14:3a:5e:6d:5c:8f:d3:21:6f:57:d3:c9:dd:99: 1a:ec:34:61:be:92:2e:ee:a0:c0:16:03:d2:bd:82:d4:c5:a7: aa:24:6c:af:0f:46:39:73:c2:1f:79:66:8f:4e:50:f5:6b:c2: bf:03:6b:9c:ac:4a:9d:0e:82:46:58:02:60:ba:12:31:1b:f3: 85:63:9c:c5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E+YgpddNX8Ny27sJpFwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWMyMzMxMjIyNzA2MzEzY2Y5MjZlZDhlZGRiZmQ5NjBhMDk2OGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGmxBSe4rTUkB7TDF5rm33+5fnUj d3IgmRjG0DXwWyjxNGPcjFU2l4lR7qEGfUeJ7cc+d7D+tDB5RHS+IS4n/8k0145b KJvBQMnq85F0dUS+iKEg/yLoMEpz6ijjEiW3EAsyXnsnw71cqb3rcDEKKKi/ssRJ 7K4jEI9ejRYzkoSciaFFRc9bBzg/+rSTPAhwBQEl6GUbo9KulDIyxE7PLqUE674E kNEWuKDXotqbaiWpM0kI0jxC7fn3+D5ytbluh/bVonNTmy8EgMOSGSTwib6vL9M3 uyFU+9ranVZ1AhGD3cPF+/3t8HO4aI0H+DF4ZQ3Q8bLA1h8jvs/0z2T4MwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGXCMxIicGMTz5Ju2O3b/ZYKCWjuMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvWmNJekVpSndZeFBQa203WTdkdjlsZ29KYU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmJww DQYJKoZIhvcNAQELBQADggEBAB9Nkhd1KTGNLQiUjB5wXJM0Nnz3hBDKz3s/Ima+ LgcbDQzeJJUnQBVhV0nfvLB41QP+8BfJbElexVTImT5AIrswPI1uP1AFZ4Dqb3/s 4s82OUspBeekmH4jA5r+BPQc4Pcp7uvtcqY4r6r06LwyhsE0DD/MnItBIBHCiN8j mey4AMuaDPJ4CfR5HF2+WRim/8srirzbn36bK3SK5OKv7O25EzbqxwfDfqETcoW6 1jMfNuaCDGkzXDsUOl5tXI/TIW9X08ndmRrsNGG+ki7uoMAWA9K9gtTFp6okbK8P Rjlzwh95Zo9OUPVrwr8Da5ysSp0OgkZYAmC6EjEb84VjnMU= -----END CERTIFICATE-----Generated at Thu Feb 5 05:57:38 2026 by rpki-client