This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa File: 01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa (raw, json) Hash identifier: krV70iW09YOJwAzEmvYrpBPuNGdijVHEbPaa0HE/jsM= Subject key identifier: D3:56:64:BC:D8:16:88:5A:F6:5E:57:B5:96:03:41:69:86:63:F9:7F Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019B7A5B728CBB35812B4393FCD71E4FE825 Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48606 IP address blocks: 2a0c:5705::/32 maxlen: 48 2a0c:5705:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:72:8c:bb:35:81:2b:43:93:fc:d7:1e:4f:e8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d35664bcd816885af65e57b5960341698663f97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:43:3a:69:8a:7a:51:33:14:9b:ed:24:46: 95:4a:5d:82:65:4c:fb:d8:70:55:d2:cb:6f:01:4d: 65:99:5c:bf:85:1d:88:d6:1c:ff:46:fa:20:3f:87: 1a:fd:99:6d:a7:fb:23:32:38:bf:a8:c3:60:b2:0b: ff:05:2c:00:30:3d:16:b8:6e:b4:05:38:e1:78:8d: cc:c1:9d:6c:63:79:46:4b:d5:c3:d5:5c:a3:0e:b6: 14:f0:f7:11:08:ea:48:d4:68:3a:fa:77:b3:23:77: a4:09:5b:9b:be:4c:d3:a6:f0:a6:b7:52:28:68:93: 5d:7f:cc:1e:61:16:7e:55:11:16:c4:ae:a1:b8:59: 8a:0f:9d:ee:79:95:4b:d4:e4:f2:2d:e2:55:29:93: 1e:b6:58:9f:80:fe:25:e2:f9:2d:68:f6:ed:63:b9: 47:7f:fa:36:f8:41:33:6c:6f:6a:13:06:d2:57:38: 8b:10:c9:9b:ad:1e:d6:af:9b:25:9e:5f:36:ea:b0: 18:8d:7e:f6:3c:3b:f0:7a:5d:0b:88:ab:9f:08:09: b8:aa:82:36:44:f3:1b:2f:3d:9e:17:86:eb:02:56: 62:65:0b:c3:08:c2:69:12:d6:63:87:63:c3:70:19: 18:16:c2:37:b5:2b:81:bc:d3:9c:71:1e:bf:a8:d2: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:56:64:BC:D8:16:88:5A:F6:5E:57:B5:96:03:41:69:86:63:F9:7F X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/01ZkvNgWiFr2Xle1lgNBaYZj-X8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:5705::/32 Signature Algorithm: sha256WithRSAEncryption 2f:27:65:17:8e:63:f0:6f:ce:96:f6:ca:4f:d9:07:9f:0c:30: fd:2f:13:f5:72:c4:b6:07:f2:b8:8b:1a:63:51:e0:f0:d2:11: 79:d6:a2:0b:3c:3c:9d:9b:51:5d:ee:b8:21:d9:e4:bd:2f:1e: 61:0b:dd:86:38:b0:c5:7f:fc:f0:55:28:a2:7a:08:16:25:fb: 1e:76:91:58:a8:a1:f4:8d:a3:c2:8d:c9:3e:a9:bb:c7:fa:0d: fb:86:bf:4e:04:f5:4e:3d:01:a3:b3:a7:e4:56:94:0a:af:26: ff:44:da:a5:a8:f8:1e:89:b8:9a:fe:b0:15:93:fa:9d:74:a9: 7c:69:7d:dc:46:c4:d4:18:48:99:24:81:72:45:09:23:ff:ea: b9:ae:2d:ca:f0:ea:1b:3c:11:12:bd:ca:aa:e0:0f:f7:f4:3a: d5:fc:9c:d9:42:ea:85:01:fc:1e:69:69:17:44:6a:a1:9a:df: d2:9e:b8:20:fc:0b:ab:a6:3d:56:fb:11:d1:75:f8:cc:e8:77: b4:0d:36:3e:07:e0:8f:00:00:2b:09:92:e3:4c:31:4b:5d:9d: 8c:e2:83:b1:5f:91:71:26:a5:56:a7:f3:75:aa:d9:2c:48:be: a1:81:91:64:48:08:98:77:d0:0e:a2:f9:34:f8:cf:36:88:ad: 5f:80:6f:8f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6W3KMuzWBK0OT/NceT+glMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzU2NjRiY2Q4MTY4ODVhZjY1ZTU3YjU5NjAzNDE2OTg2NjNmOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAputDOmmKelEzFJvtJEaVSl2CZUz7 2HBV0stvAU1lmVy/hR2I1hz/RvogP4ca/Zltp/sjMji/qMNgsgv/BSwAMD0WuG60 BTjheI3MwZ1sY3lGS9XD1VyjDrYU8PcRCOpI1Gg6+nezI3ekCVubvkzTpvCmt1Io aJNdf8weYRZ+VREWxK6huFmKD53ueZVL1OTyLeJVKZMetlifgP4l4vktaPbtY7lH f/o2+EEzbG9qEwbSVziLEMmbrR7Wr5slnl826rAYjX72PDvwel0LiKufCAm4qoI2 RPMbLz2eF4brAlZiZQvDCMJpEtZjh2PDcBkYFsI3tSuBvNOccR6/qNKdHwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNNWZLzYFoha9l5XtZYDQWmGY/l/MB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEvMDFaa3ZOZ1dpRnIyWGxlMWxnTkJhWVpqLVg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgxXBTAN BgkqhkiG9w0BAQsFAAOCAQEALydlF45j8G/OlvbKT9kHnwww/S8T9XLEtgfyuIsa Y1Hg8NIRedaiCzw8nZtRXe64IdnkvS8eYQvdhjiwxX/88FUoonoIFiX7HnaRWKih 9I2jwo3JPqm7x/oN+4a/TgT1Tj0Bo7On5FaUCq8m/0Tapaj4Hom4mv6wFZP6nXSp fGl93EbE1BhImSSBckUJI//qua4tyvDqGzwREr3KquAP9/Q61fyc2ULqhQH8Hmlp F0RqoZrf0p64IPwLq6Y9VvsR0XX4zOh3tA02PgfgjwAAKwmS40wxS12djOKDsV+R cSalVqfzdarZLEi+oYGRZEgImHfQDqL5NPjPNoitX4Bvjw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:34:01 2026 by rpki-client