This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Z76wqe5zVllLdmL6YTCgfNC-HKk.roa File: Z76wqe5zVllLdmL6YTCgfNC-HKk.roa (raw, json) Hash identifier: EFZtQz+ewhz/F5oz+xxU/tbvpfc2siuJ5pqENE774i4= Subject key identifier: 67:BE:B0:A9:EE:73:56:59:4B:76:62:FA:61:30:A0:7C:D0:BE:1C:A9 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CE417F017F4DC745B707F346D20A Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Z76wqe5zVllLdmL6YTCgfNC-HKk.roa Signing time: Fri 02 Jan 2026 16:20:37 +0000 ROA not before: Fri 02 Jan 2026 16:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207649 IP address blocks: 2a0b:b87:ffb6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ce:41:7f:01:7f:4d:c7:45:b7:07:f3:46:d2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67beb0a9ee7356594b7662fa6130a07cd0be1ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:5b:a3:63:e3:27:0b:76:ee:bd:3b:41:a3: 8f:9e:ca:ee:ba:82:7f:ba:14:5a:f9:8d:44:79:07: 0c:9d:10:a6:b5:45:0a:5e:c3:c9:cd:8d:c6:bd:8e: 33:e8:00:a7:b1:35:d0:e5:9d:6a:15:46:19:98:9f: 8f:ac:7b:25:dd:1a:b3:98:03:bc:c3:36:08:28:d7: ec:8b:4c:c0:c8:fd:1d:33:d5:d9:ac:fc:44:81:23: d4:a7:53:22:f4:64:16:2f:85:4b:a9:ab:98:1f:d4: 8f:82:cb:b0:39:73:29:6e:f2:a5:fb:39:2e:4f:e3: a3:5e:03:97:21:27:df:51:60:16:b0:41:87:ee:17: a1:42:06:37:2b:32:54:2f:c4:37:da:2b:02:ac:60: ad:1a:96:4d:aa:1f:77:68:30:cb:53:0d:39:ff:f8: 46:08:78:9c:86:ef:d8:83:b1:bc:74:52:d1:0f:05: 05:fb:03:87:39:54:62:b3:f2:d3:b5:99:c8:cb:d1: d4:b3:7c:66:3e:99:e9:98:e9:10:56:e7:47:05:2c: 28:c3:76:ee:7b:90:14:53:0f:ba:7a:47:6b:22:b1: ed:e5:6d:03:20:49:ac:39:fa:4f:26:52:5d:b3:67: b6:79:29:b8:49:dc:06:60:ba:94:f5:fc:56:ba:8d: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BE:B0:A9:EE:73:56:59:4B:76:62:FA:61:30:A0:7C:D0:BE:1C:A9 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Z76wqe5zVllLdmL6YTCgfNC-HKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffb6::/48 Signature Algorithm: sha256WithRSAEncryption 15:dd:8e:61:a2:f7:ab:04:19:70:bb:c9:46:7f:d0:69:ba:bf: fc:b0:bb:16:b0:44:b3:74:b8:a3:e2:b9:46:b4:50:62:72:e3: 7c:6b:5e:97:68:eb:1a:1f:05:16:7f:2b:36:4c:f1:19:69:6b: af:cb:6b:37:2c:de:6a:3b:05:dd:d1:1e:68:23:c4:9f:62:07: 37:b1:c4:6d:13:86:9c:01:38:34:6c:2d:73:a5:7a:6f:7a:01: d8:1c:3e:61:b6:40:d7:17:3f:aa:52:36:e4:0e:37:75:4e:9f: 4c:99:c0:e6:fc:61:d3:60:18:d0:02:97:b3:02:18:1d:cd:44: 80:cf:35:53:9a:bd:75:f6:aa:87:03:47:bc:3a:56:86:8d:66: 8f:a6:b1:48:4d:1b:48:a5:fb:83:2f:ba:0e:71:0b:1e:77:88: 27:74:5e:60:9c:6d:e6:0a:f0:b5:58:cf:80:79:58:b0:27:63: f1:0f:ee:22:6d:cb:a3:06:91:ee:4a:51:5e:7a:1a:80:a9:9c: 72:21:79:2d:e3:bf:c1:b0:3c:40:31:9f:5a:57:1e:5f:12:a3: 72:d4:ef:0d:b6:cc:19:01:e8:97:33:fe:b1:52:52:33:e4:fa: b4:a1:13:d7:16:1b:81:49:1d:15:7d:78:32:9f:7f:f2:f3:a9: f0:1e:2c:ce -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gs5BfwF/TcdFtwfzRtIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2JlYjBhOWVlNzM1NjU5NGI3NjYyZmE2MTMwYTA3Y2QwYmUxY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzRbo2PjJwt27r07QaOPnsruuoJ/ uhRa+Y1EeQcMnRCmtUUKXsPJzY3GvY4z6ACnsTXQ5Z1qFUYZmJ+PrHsl3RqzmAO8 wzYIKNfsi0zAyP0dM9XZrPxEgSPUp1Mi9GQWL4VLqauYH9SPgsuwOXMpbvKl+zku T+OjXgOXISffUWAWsEGH7hehQgY3KzJUL8Q32isCrGCtGpZNqh93aDDLUw05//hG CHichu/Yg7G8dFLRDwUF+wOHOVRis/LTtZnIy9HUs3xmPpnpmOkQVudHBSwow3bu e5AUUw+6ekdrIrHt5W0DIEmsOfpPJlJds2e2eSm4SdwGYLqU9fxWuo0AbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGe+sKnuc1ZZS3Zi+mEwoHzQvhypMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvWjc2d3FlNXpWbGxMZG1MNllUQ2dmTkMtSEtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+2 MA0GCSqGSIb3DQEBCwUAA4IBAQAV3Y5hoverBBlwu8lGf9Bpur/8sLsWsESzdLij 4rlGtFBicuN8a16XaOsaHwUWfys2TPEZaWuvy2s3LN5qOwXd0R5oI8SfYgc3scRt E4acATg0bC1zpXpvegHYHD5htkDXFz+qUjbkDjd1Tp9MmcDm/GHTYBjQApezAhgd zUSAzzVTmr119qqHA0e8OlaGjWaPprFITRtIpfuDL7oOcQsed4gndF5gnG3mCvC1 WM+AeViwJ2PxD+4ibcujBpHuSlFeehqAqZxyIXkt47/BsDxAMZ9aVx5fEqNy1O8N tswZAeiXM/6xUlIz5Pq0oRPXFhuBSR0VfXgyn3/y86nwHizO -----END CERTIFICATE-----Generated at Tue Jan 20 15:17:59 2026 by rpki-client