This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa File: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (raw, json) Hash identifier: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ= Subject key identifier: CE:FC:5C:9F:F1:83:F3:F8:54:25:71:86:27:BA:E3:14:5C:00:40:1E Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C7F53FEBE4E1BF53F17B17C590D3B Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201386 IP address blocks: 2a13:b487:5300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7f:53:fe:be:4e:1b:f5:3f:17:b1:7c:59:0d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cefc5c9ff183f3f85425718627bae3145c00401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:a3:8e:43:38:a8:78:09:eb:df:13:da:b9: 76:7a:10:9a:5f:fd:d2:3a:d5:2d:dc:34:83:81:ca: 32:14:4a:3b:47:72:72:5e:4b:f0:5e:52:8f:a5:93: 71:29:29:0c:97:14:fb:1a:4b:7d:ce:4c:a3:07:f3: 6f:a7:1b:2b:36:3e:7c:0b:0f:55:f1:5d:5e:47:a3: a7:0a:93:3c:4b:bf:e2:59:af:6a:19:aa:7c:fb:78: e8:a1:3d:1f:cd:b6:30:8b:09:ca:74:26:ac:cb:21: 73:a3:dd:96:57:39:7e:3e:7b:9e:f6:c3:db:b8:7c: cf:a0:07:49:00:42:ee:84:7b:55:6c:26:1e:2c:de: dc:ba:68:71:dd:2d:f4:c8:d6:20:97:6b:7b:cd:d4: 39:1a:56:96:a7:24:36:b1:49:cf:e2:c7:df:53:03: 51:48:77:38:74:63:99:65:f5:e7:f6:93:3c:55:2e: 27:73:7a:a6:7b:9a:07:65:56:83:05:cf:4d:52:b2: 3b:e9:82:43:f7:db:b3:19:3d:e8:b0:db:bf:c4:ba: 18:d5:30:3e:4c:9d:99:ff:5a:ff:ac:e5:41:7e:6b: 1e:d3:a4:76:8f:1f:6d:fa:f3:c9:2f:96:cc:c6:46: e7:a7:bd:d0:3f:6c:48:43:12:e3:f9:5d:8c:5b:9d: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FC:5C:9F:F1:83:F3:F8:54:25:71:86:27:BA:E3:14:5C:00:40:1E X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:5300::/40 Signature Algorithm: sha256WithRSAEncryption 80:24:43:74:87:b5:a8:0d:f7:6c:53:4a:fa:6b:2f:c1:1a:1f: 07:df:10:96:0d:a0:a3:de:d5:ba:bb:9d:b1:a2:46:ae:15:04: 8a:8c:9e:07:29:5f:aa:15:85:9b:78:58:78:c9:42:00:bf:82: 7d:88:bd:5d:78:e3:66:1e:48:d1:21:93:37:eb:68:c1:a0:5e: d5:bc:16:04:d7:0c:c3:73:92:a5:68:f3:90:0d:19:ed:7a:c5: 67:75:03:62:0d:10:50:07:ea:88:19:b8:59:2c:dd:bf:3e:c1: 29:ae:3c:36:0d:b7:01:df:94:36:de:10:a8:66:56:26:fa:db: 17:0f:65:ff:40:48:f5:a2:4c:99:50:6c:f6:d8:f4:18:d2:30: 27:ac:f0:0b:e5:7d:25:77:a8:41:12:0a:2f:1d:e4:de:2a:09: ab:a7:76:7f:1f:a0:26:e3:94:be:f2:04:0a:b6:0e:04:0e:40: 60:fe:de:4a:a7:7d:d3:88:07:58:9b:45:41:6e:49:e0:b4:1b: 48:43:ab:c2:8e:4b:4f:c3:06:f1:19:99:57:33:ab:64:db:50: 01:71:99:40:2d:1d:fe:58:f7:16:23:88:0d:7c:ae:cc:db:0c: 83:ea:00:95:6f:b0:62:39:d9:bb:d3:da:7b:62:bd:ee:25:c6: 07:87:f3:7d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XH9T/r5OG/U/F7F8WQ07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWZjNWM5ZmYxODNmM2Y4NTQyNTcxODYyN2JhZTMxNDVjMDA0MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYmjjkM4qHgJ698T2rl2ehCaX/3S OtUt3DSDgcoyFEo7R3JyXkvwXlKPpZNxKSkMlxT7Gkt9zkyjB/NvpxsrNj58Cw9V 8V1eR6OnCpM8S7/iWa9qGap8+3jooT0fzbYwiwnKdCasyyFzo92WVzl+Pnue9sPb uHzPoAdJAELuhHtVbCYeLN7cumhx3S30yNYgl2t7zdQ5GlaWpyQ2sUnP4sffUwNR SHc4dGOZZfXn9pM8VS4nc3qme5oHZVaDBc9NUrI76YJD99uzGT3osNu/xLoY1TA+ TJ2Z/1r/rOVBfmse06R2jx9t+vPJL5bMxkbnp73QP2xIQxLj+V2MW53PvQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFM78XJ/xg/P4VCVxhie64xRcAEAeMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvenZ4Y25fR0Q4X2hVSlhHR0o3cmpGRndBUUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0h1Mw DQYJKoZIhvcNAQELBQADggEBAIAkQ3SHtagN92xTSvprL8EaHwffEJYNoKPe1bq7 nbGiRq4VBIqMngcpX6oVhZt4WHjJQgC/gn2IvV1442YeSNEhkzfraMGgXtW8FgTX DMNzkqVo85ANGe16xWd1A2INEFAH6ogZuFks3b8+wSmuPDYNtwHflDbeEKhmVib6 2xcPZf9ASPWiTJlQbPbY9BjSMCes8AvlfSV3qEESCi8d5N4qCaundn8foCbjlL7y BAq2DgQOQGD+3kqnfdOIB1ibRUFuSeC0G0hDq8KOS0/DBvEZmVczq2TbUAFxmUAt Hf5Y9xYjiA18rszbDIPqAJVvsGI52bvT2ntive4lxgeH830= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:40 2026 by rpki-client