This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zPO2AAYP4fSolIgxQyCrbObDgdU.roa File: zPO2AAYP4fSolIgxQyCrbObDgdU.roa (raw, json) Hash identifier: /PEkT2RqsPLi4LdqtolHB+s3Gvd0guochWMoJPM13nY= Subject key identifier: CC:F3:B6:00:06:0F:E1:F4:A8:94:88:31:43:20:AB:6C:E6:C3:81:D5 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F17B572E1FD4C4C20F8B072A36BF Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zPO2AAYP4fSolIgxQyCrbObDgdU.roa Signing time: Fri 02 Jan 2026 14:19:31 +0000 ROA not before: Fri 02 Jan 2026 14:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43478 IP address blocks: 2a02:2698:5000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f1:7b:57:2e:1f:d4:c4:c2:0f:8b:07:2a:36:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccf3b600060fe1f4a89488314320ab6ce6c381d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:ee:d7:c5:a1:35:7f:90:f7:e5:ba:dd:ad: 3a:2b:b5:d7:25:59:be:1e:a4:35:bc:1c:ac:60:a9: e1:44:a3:86:28:df:a9:66:78:8b:15:d6:92:75:0b: 00:7d:07:5d:bf:56:fb:f7:cc:93:6f:b1:86:eb:9c: b5:45:24:b2:ed:03:e7:d8:1b:63:0b:a2:88:64:d9: 55:d2:49:5e:7b:c0:28:20:c8:52:18:ac:62:75:3f: 21:a6:3c:de:57:8d:e9:cb:3a:99:f5:7b:39:d9:90: a0:87:8a:1a:94:1f:5a:27:ba:f7:7c:85:ff:3f:9f: f9:6c:a1:b5:d1:6f:40:a0:38:9e:b3:33:99:1d:a2: 5e:9a:b8:84:01:8e:aa:02:82:04:f6:a2:50:b6:e0: 6d:6c:e8:c4:8b:6a:b7:32:0c:66:34:66:f6:c1:62: e5:d0:ad:e4:83:95:cc:25:02:7d:45:0f:db:31:c1: c4:ba:33:8c:da:c6:d6:a3:be:95:22:04:bc:b6:b9: fe:92:55:eb:f2:ff:17:95:01:ed:1a:f9:0d:2d:3c: 06:52:34:73:2f:22:22:72:ce:03:56:f5:61:ed:54: 42:f1:bd:42:7a:5f:61:57:c3:a6:4b:85:33:6f:4d: 5b:fa:2e:68:5a:46:9c:11:b3:17:f1:07:b1:42:75: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F3:B6:00:06:0F:E1:F4:A8:94:88:31:43:20:AB:6C:E6:C3:81:D5 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/zPO2AAYP4fSolIgxQyCrbObDgdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:5000::/38 Signature Algorithm: sha256WithRSAEncryption 69:50:fc:17:68:c3:27:30:25:cd:76:2d:a9:d5:a9:9a:9f:b0: 12:ea:ef:22:bc:7a:26:c0:d8:fd:83:f8:7d:3b:cd:eb:cf:4b: a7:c3:1a:8b:b3:28:2a:11:6a:e5:cd:1c:f7:5b:3e:03:55:e0: 65:8a:ca:e7:5b:88:1c:9e:8a:2c:ec:9d:16:cd:cc:be:d4:b1: d6:c4:37:37:3a:40:04:21:24:04:e4:b9:cb:03:c9:28:f2:b5: 31:41:1a:ac:c2:4b:15:8e:a4:06:86:e5:8a:3a:79:58:e8:4a: ba:c8:c2:af:ad:a9:2d:3e:f2:92:d7:1b:38:84:37:e9:01:88: 8e:3a:16:a5:89:2e:8a:8f:ce:6a:43:d1:80:73:6c:eb:f2:d9: d0:cd:67:55:1a:f3:41:ee:9b:56:d6:d8:f2:76:7d:8b:de:61: d3:77:0c:c7:3d:ee:4c:7c:e3:4d:41:aa:5a:92:a1:8f:67:67: 08:50:3d:dd:46:cf:03:82:c9:cd:4c:bb:d2:20:24:97:22:c5: bb:41:40:14:1a:5e:3f:2e:85:22:a4:c9:f4:4e:5c:f6:40:c8: c7:b8:db:d0:83:c8:ae:12:5d:d1:c9:47:7a:bc:4b:59:92:c0: ce:7f:21:87:f3:d3:e5:ab:e4:a3:8a:2a:5e:c7:c6:ba:28:f3: 0d:9e:1b:61 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/E/F7Vy4f1MTCD4sHKja/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2YzYjYwMDA2MGZlMWY0YTg5NDg4MzE0MzIwYWI2Y2U2YzM4MWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprXu18WhNX+Q9+W63a06K7XXJVm+ HqQ1vBysYKnhRKOGKN+pZniLFdaSdQsAfQddv1b798yTb7GG65y1RSSy7QPn2Btj C6KIZNlV0klee8AoIMhSGKxidT8hpjzeV43pyzqZ9Xs52ZCgh4oalB9aJ7r3fIX/ P5/5bKG10W9AoDieszOZHaJemriEAY6qAoIE9qJQtuBtbOjEi2q3MgxmNGb2wWLl 0K3kg5XMJQJ9RQ/bMcHEujOM2sbWo76VIgS8trn+klXr8v8XlQHtGvkNLTwGUjRz LyIics4DVvVh7VRC8b1Cel9hV8OmS4Uzb01b+i5oWkacEbMX8QexQnUlAwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMzztgAGD+H0qJSIMUMgq2zmw4HVMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvelBPMkFBWVA0ZlNvbElneFF5Q3JiT2JEZ2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmFAw DQYJKoZIhvcNAQELBQADggEBAGlQ/BdowycwJc12LanVqZqfsBLq7yK8eibA2P2D +H07zevPS6fDGouzKCoRauXNHPdbPgNV4GWKyudbiByeiizsnRbNzL7UsdbENzc6 QAQhJATkucsDySjytTFBGqzCSxWOpAaG5Yo6eVjoSrrIwq+tqS0+8pLXGziEN+kB iI46FqWJLoqPzmpD0YBzbOvy2dDNZ1Ua80Hum1bW2PJ2fYveYdN3DMc97kx8401B qlqSoY9nZwhQPd1GzwOCyc1Mu9IgJJcixbtBQBQaXj8uhSKkyfROXPZAyMe429CD yK4SXdHJR3q8S1mSwM5/IYfz0+Wr5KOKKl7Hxroo8w2eG2E= -----END CERTIFICATE-----Generated at Thu Feb 5 05:55:05 2026 by rpki-client