This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZHtgRsXcVtLiC1OWRCPejmVmPhc.roa File: ZHtgRsXcVtLiC1OWRCPejmVmPhc.roa (raw, json) Hash identifier: UPWLnRx0bw6SLnhrXXDIpe/EYDEQsHa/BUFUdeONYgY= Subject key identifier: 64:7B:60:46:C5:DC:56:D2:E2:0B:53:96:44:23:DE:8E:65:66:3E:17 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12EC3DBF88E5296C7E0CCE03DBAF57 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZHtgRsXcVtLiC1OWRCPejmVmPhc.roa Signing time: Fri 02 Jan 2026 00:19:33 +0000 ROA not before: Fri 02 Jan 2026 00:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15398 IP address blocks: 2001:918:ff5d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ec:3d:bf:88:e5:29:6c:7e:0c:ce:03:db:af:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=647b6046c5dc56d2e20b53964423de8e65663e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:e5:2c:bd:36:68:b7:62:d8:c2:63:51:e7: cb:1a:a0:49:aa:38:ac:ad:ca:79:3e:88:42:f8:cc: ff:a2:5a:0e:b7:c1:73:ad:10:8f:fa:05:2e:4d:8b: be:61:c7:4a:f4:59:3a:8e:e0:f3:66:a0:93:71:97: eb:32:a9:cc:65:68:8c:9b:3a:88:e6:f9:87:b1:bf: 45:6b:e1:a4:e6:07:12:ab:25:9c:a2:47:ad:76:a8: 98:f9:74:04:63:fb:17:f8:5a:89:8d:91:33:2e:14: aa:24:c8:e3:3d:60:6b:d5:0e:dc:9f:37:6a:8f:83: 19:1f:76:37:64:05:f0:d3:4d:c6:31:d1:10:64:46: b1:02:c2:8f:df:86:80:6c:28:6a:20:16:ff:eb:cf: c8:9a:c2:f6:13:df:27:13:b9:37:89:f1:64:28:6c: 98:ef:6b:b6:62:af:2f:f9:c7:4c:b2:2f:3c:34:9c: e1:77:c2:3f:73:9c:2a:9b:42:73:ce:c3:ba:bb:31: 18:3f:a0:cc:19:41:3a:ad:df:49:49:b0:2f:47:34: 39:b8:de:92:aa:4e:04:a3:ea:e7:49:70:35:37:bf: e1:bb:d6:05:86:ea:b5:84:bc:8c:91:02:5f:49:5e: 45:83:69:5a:d5:d0:fa:35:eb:58:7c:ec:bd:69:8a: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7B:60:46:C5:DC:56:D2:E2:0B:53:96:44:23:DE:8E:65:66:3E:17 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ZHtgRsXcVtLiC1OWRCPejmVmPhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:918:ff5d::/48 Signature Algorithm: sha256WithRSAEncryption 6b:67:39:fd:07:52:e7:4d:4f:69:ba:5f:d6:bb:9b:ce:86:02: 9f:4e:d4:e9:aa:1b:a6:d5:a6:69:d1:3f:af:ec:bf:f6:1f:3c: 23:b9:70:f0:ed:8a:15:6d:e1:06:fb:7d:e0:5e:68:21:bf:43: 3d:9c:8e:0f:0a:c6:93:6a:a8:ce:50:50:48:e1:99:1b:5a:5d: 34:75:fd:3b:b4:07:f0:4c:47:86:a4:f6:20:81:45:86:ca:f0: 31:0b:b7:b0:5b:79:56:b5:92:c0:c7:d8:49:c0:90:cc:50:3f: b1:2b:38:2c:cf:05:4f:3a:ae:09:59:f2:78:69:b0:29:4a:96: 08:2a:e2:6b:ee:dc:68:63:d9:16:20:f1:8e:74:5e:3d:e8:ce: fa:dc:55:61:a8:6a:e2:a6:33:94:ec:97:6d:e4:99:47:16:b0: 19:64:7c:bb:3c:b0:1d:34:29:48:c7:66:7a:59:25:52:f5:cb: 6a:d8:15:c5:fc:59:8d:8e:6a:6b:61:36:db:a0:17:aa:99:b3: df:63:86:04:0a:a0:9d:50:f9:43:ac:02:f7:ba:26:6a:44:bd: 0f:37:93:b7:78:6c:55:e6:15:ab:dd:18:08:f4:6b:bd:6e:b1: 13:88:7a:4d:56:89:32:da:b5:ce:19:ee:ad:ef:02:ff:5c:72: ac:1c:b5:66 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Euw9v4jlKWx+DM4D269XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDdiNjA0NmM1ZGM1NmQyZTIwYjUzOTY0NDIzZGU4ZTY1NjYzZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBrlLL02aLdi2MJjUefLGqBJqjis rcp5PohC+Mz/oloOt8FzrRCP+gUuTYu+YcdK9Fk6juDzZqCTcZfrMqnMZWiMmzqI 5vmHsb9Fa+Gk5gcSqyWcoketdqiY+XQEY/sX+FqJjZEzLhSqJMjjPWBr1Q7cnzdq j4MZH3Y3ZAXw003GMdEQZEaxAsKP34aAbChqIBb/68/ImsL2E98nE7k3ifFkKGyY 72u2Yq8v+cdMsi88NJzhd8I/c5wqm0JzzsO6uzEYP6DMGUE6rd9JSbAvRzQ5uN6S qk4Eo+rnSXA1N7/hu9YFhuq1hLyMkQJfSV5Fg2la1dD6NetYfOy9aYq2IwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGR7YEbF3FbS4gtTlkQj3o5lZj4XMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvWkh0Z1JzWGNWdExpQzFPV1JDUGVqbVZtUGhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEJGP9d MA0GCSqGSIb3DQEBCwUAA4IBAQBrZzn9B1LnTU9pul/Wu5vOhgKfTtTpqhum1aZp 0T+v7L/2HzwjuXDw7YoVbeEG+33gXmghv0M9nI4PCsaTaqjOUFBI4ZkbWl00df07 tAfwTEeGpPYggUWGyvAxC7ewW3lWtZLAx9hJwJDMUD+xKzgszwVPOq4JWfJ4abAp SpYIKuJr7txoY9kWIPGOdF496M763FVhqGripjOU7Jdt5JlHFrAZZHy7PLAdNClI x2Z6WSVS9ctq2BXF/FmNjmprYTbboBeqmbPfY4YECqCdUPlDrAL3uiZqRL0PN5O3 eGxV5hWr3RgI9Gu9brETiHpNVoky2rXOGe6t7wL/XHKsHLVm -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:40 2026 by rpki-client