This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Z6a8PnHqYZn-Nz0WkMgZ02PRUAs.roa File: Z6a8PnHqYZn-Nz0WkMgZ02PRUAs.roa (raw, json) Hash identifier: 6UrLctgJtpaAQMF4WeDpblbf7uScjtjPul1viP5uftE= Subject key identifier: 67:A6:BC:3E:71:EA:61:99:FE:37:3D:16:90:C8:19:D3:63:D1:50:0B Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C99690FADB6EA8291FB553CD3DAE Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Z6a8PnHqYZn-Nz0WkMgZ02PRUAs.roa Signing time: Fri 02 Jan 2026 16:20:36 +0000 ROA not before: Fri 02 Jan 2026 16:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205036 IP address blocks: 2a0b:b87:ffe2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c9:96:90:fa:db:6e:a8:29:1f:b5:53:cd:3d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67a6bc3e71ea6199fe373d1690c819d363d1500b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:05:35:ca:70:dd:8c:7c:8e:52:35:64:2a:2e: be:89:6d:f6:46:80:ee:e7:74:b0:d3:49:da:df:a3: 16:78:e0:bd:04:8f:59:09:2c:53:e6:9d:c0:68:20: b5:dc:b4:03:7c:6a:12:b5:55:87:1c:14:e7:cb:17: 57:2e:9e:ea:0e:38:aa:21:08:56:d2:ab:82:91:8d: b4:95:06:c8:22:d1:19:6e:fe:9f:69:03:45:c1:4c: 08:3c:cc:69:4c:ce:4a:a0:d2:c1:44:75:8c:4c:24: 62:04:3e:95:20:be:1e:dc:5a:1a:e1:27:3a:6c:b2: 66:6a:85:f8:80:89:4b:36:85:4d:ee:5a:ab:54:64: 5a:b8:25:de:75:62:fd:6f:9d:76:05:72:87:5d:a9: 87:df:3a:f2:6e:4d:6c:9c:ca:95:46:bb:b4:a6:f1: 8b:92:f9:8d:0a:fd:b4:c8:b7:23:87:2a:bc:68:4d: 54:5d:5f:ac:c4:df:e7:70:73:9a:91:52:83:f8:db: 2b:43:9c:fe:f7:05:1b:3d:c7:3b:09:24:4f:93:e6: 7a:0a:c9:4e:4d:01:7e:12:65:8f:a7:c2:17:3f:fe: 92:0c:0c:80:c0:27:56:88:3f:97:4f:ee:f2:ba:c5: 1e:5b:93:d1:db:28:03:c5:3f:10:4f:bb:32:55:7b: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A6:BC:3E:71:EA:61:99:FE:37:3D:16:90:C8:19:D3:63:D1:50:0B X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Z6a8PnHqYZn-Nz0WkMgZ02PRUAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffe2::/48 Signature Algorithm: sha256WithRSAEncryption 4f:ba:b9:1d:26:24:9a:28:55:ba:2f:6e:a5:f5:2f:08:27:9d: a2:35:b3:a3:c0:a9:1e:f6:9b:56:f4:fd:87:92:87:89:0a:ba: db:5f:72:46:9c:f4:15:ff:74:ee:8d:6b:be:eb:43:f6:f9:c8: 90:d6:fd:b9:b2:c4:08:29:63:82:3a:ba:f7:f3:f5:35:2e:cf: 5f:c5:b2:7a:0f:60:ef:26:42:f3:09:73:f8:60:79:9f:11:79: 9f:64:35:46:aa:bb:ae:b9:cd:51:57:90:0b:38:b3:70:92:ae: 49:6f:bd:12:80:53:a5:d7:92:d5:da:21:39:be:43:39:7f:6d: 89:03:41:b2:32:ed:7d:c8:ea:86:ea:f0:84:e0:1c:dc:2b:e5: df:12:1d:42:23:2c:56:bd:a3:c6:fa:7d:e0:24:41:9f:4a:b6: c9:01:f7:5a:ea:e5:42:06:48:f7:31:d0:9c:5f:08:a1:eb:0c: 32:ae:bb:bb:2b:e0:34:4b:6f:59:15:14:5c:c6:43:be:fc:ce: 49:4b:30:ac:04:f0:80:f1:2d:bd:e1:55:42:3d:8c:a5:a3:f6: b5:20:f0:58:41:48:63:c7:71:c5:9f:01:08:8f:f1:3b:d9:0a: 4d:be:95:9e:85:b9:43:26:5f:c4:88:d3:a3:b6:44:f7:1d:b4: b1:22:12:57 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gsmWkPrbbqgpH7VTzT2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2E2YmMzZTcxZWE2MTk5ZmUzNzNkMTY5MGM4MTlkMzYzZDE1MDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AU1ynDdjHyOUjVkKi6+iW32RoDu 53Sw00na36MWeOC9BI9ZCSxT5p3AaCC13LQDfGoStVWHHBTnyxdXLp7qDjiqIQhW 0quCkY20lQbIItEZbv6faQNFwUwIPMxpTM5KoNLBRHWMTCRiBD6VIL4e3Foa4Sc6 bLJmaoX4gIlLNoVN7lqrVGRauCXedWL9b512BXKHXamH3zrybk1snMqVRru0pvGL kvmNCv20yLcjhyq8aE1UXV+sxN/ncHOakVKD+NsrQ5z+9wUbPcc7CSRPk+Z6CslO TQF+EmWPp8IXP/6SDAyAwCdWiD+XT+7yusUeW5PR2ygDxT8QT7syVXv3nwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGemvD5x6mGZ/jc9FpDIGdNj0VALMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvWjZhOFBuSHFZWm4tTnowV2tNZ1owMlBSVUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh//i MA0GCSqGSIb3DQEBCwUAA4IBAQBPurkdJiSaKFW6L26l9S8IJ52iNbOjwKke9ptW 9P2HkoeJCrrbX3JGnPQV/3TujWu+60P2+ciQ1v25ssQIKWOCOrr38/U1Ls9fxbJ6 D2DvJkLzCXP4YHmfEXmfZDVGqruuuc1RV5ALOLNwkq5Jb70SgFOl15LV2iE5vkM5 f22JA0GyMu19yOqG6vCE4BzcK+XfEh1CIyxWvaPG+n3gJEGfSrbJAfda6uVCBkj3 MdCcXwih6wwyrru7K+A0S29ZFRRcxkO+/M5JSzCsBPCA8S294VVCPYylo/a1IPBY QUhjx3HFnwEIj/E72QpNvpWehblDJl/EiNOjtkT3HbSxIhJX -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:42 2026 by rpki-client