This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Z9v03Glll_6U7rPnPHeeMtOaRwo.roa File: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (raw, json) Hash identifier: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g= Subject key identifier: 67:DB:F4:DC:69:65:97:FE:94:EE:B3:E7:3C:77:9E:32:D3:9A:47:0A Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B94F62855D3240C1FC679071554201770 Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Z9v03Glll_6U7rPnPHeeMtOaRwo.roa Signing time: Tue 06 Jan 2026 20:18:38 +0000 ROA not before: Tue 06 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8987 IP address blocks: 159.254.205.0/24 maxlen: 24 159.254.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:f6:28:55:d3:24:0c:1f:c6:79:07:15:54:20:17:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Jan 6 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67dbf4dc696597fe94eeb3e73c779e32d39a470a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:87:56:a4:fb:17:7c:97:0c:e9:8f:2d:6e:1d: 99:ef:4d:49:74:69:f0:5c:9a:08:ce:4e:4e:5d:61: a8:2b:73:dd:57:92:b5:44:d0:45:25:bc:ff:a1:2b: 14:f8:56:61:71:1a:4f:d9:32:41:ee:3e:5c:3f:42: b8:4b:a2:47:16:f2:5a:4e:86:29:3e:51:35:56:83: 81:76:38:21:85:40:2b:8d:be:5a:b9:4a:d3:fc:47: 66:e9:aa:80:7e:eb:6c:34:60:23:39:66:aa:41:fc: 3c:80:68:32:a5:a0:7e:55:81:bd:9c:2a:d8:75:44: f3:0d:00:c3:28:89:3b:71:1d:a2:31:d5:da:ec:1e: 4c:67:83:b0:f9:c0:97:72:0d:f8:da:87:2c:a8:b4: 30:30:9c:a6:10:37:ff:17:e9:f1:aa:f9:bf:16:ba: 6f:b3:ae:4f:0d:4e:52:31:23:90:25:bc:f8:6d:70: 9c:80:6c:9b:15:a7:57:63:a6:cb:cd:be:01:3e:6a: 46:c7:24:36:35:62:e9:81:5b:74:dc:58:0a:0e:9e: 00:f6:c7:30:8b:97:76:70:1e:04:3a:b1:7e:83:77: 3c:07:de:a1:a2:99:8b:90:35:77:46:ea:02:a7:82: 46:ac:ec:52:71:0d:65:ba:ee:6e:93:f0:1c:4a:97: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DB:F4:DC:69:65:97:FE:94:EE:B3:E7:3C:77:9E:32:D3:9A:47:0A X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/Z9v03Glll_6U7rPnPHeeMtOaRwo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.254.205.0-159.254.206.255 Signature Algorithm: sha256WithRSAEncryption 4a:64:94:b1:a4:32:14:7b:7a:19:bb:d0:c8:9a:cb:b9:a3:28: e1:10:f8:83:00:ce:03:c9:0f:7f:f6:95:83:6f:da:79:2b:16: 13:cf:2b:33:5d:75:0b:3c:a5:80:af:1d:a6:55:fc:75:cf:d1: 83:de:e0:75:c2:b0:6f:1b:80:0c:49:12:e4:7c:02:ae:a6:1f: 5d:8a:f2:f9:35:70:8b:f9:a3:0e:35:47:65:7a:c1:ad:88:83: 5c:40:7f:0a:28:2e:37:17:56:55:87:15:ee:49:db:9e:22:36: 0b:4b:cc:a6:03:81:d0:a5:c4:53:d9:3c:dc:2e:0c:3a:0d:ab: 02:3c:02:25:f4:37:27:1a:d4:de:75:d2:af:99:14:2b:b5:01: 64:6e:69:48:ec:ea:36:4e:8e:75:b4:ea:8e:a5:93:aa:f3:82: 8d:be:f9:9d:17:b6:79:51:92:75:2d:b9:94:73:2b:9f:a3:75: 57:66:f1:f4:bb:88:81:45:16:3a:01:1c:7a:b5:62:e1:ba:8e: 0a:36:c3:18:2c:5b:a7:70:75:3e:29:d2:14:4c:04:d7:a5:d0: 50:50:dd:76:b5:45:fb:a8:3e:23:90:77:51:34:fa:cc:59:3e: be:c3:2d:20:f7:06:fb:92:46:2b:e3:4e:a2:a5:1f:e4:83:48: f0:ac:fe:c7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuU9ihV0yQMH8Z5BxVUIBdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjYwMTA2MjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2RiZjRkYzY5NjU5N2ZlOTRlZWIzZTczYzc3OWUzMmQzOWE0NzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkodWpPsXfJcM6Y8tbh2Z701JdGnw XJoIzk5OXWGoK3PdV5K1RNBFJbz/oSsU+FZhcRpP2TJB7j5cP0K4S6JHFvJaToYp PlE1VoOBdjghhUArjb5auUrT/Edm6aqAfutsNGAjOWaqQfw8gGgypaB+VYG9nCrY dUTzDQDDKIk7cR2iMdXa7B5MZ4Ow+cCXcg342ocsqLQwMJymEDf/F+nxqvm/Frpv s65PDU5SMSOQJbz4bXCcgGybFadXY6bLzb4BPmpGxyQ2NWLpgVt03FgKDp4A9scw i5d2cB4EOrF+g3c8B96hopmLkDV3RuoCp4JGrOxScQ1luu5uk/AcSpdzVQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGfb9NxpZZf+lO6z5zx3njLTmkcKMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvWjl2MDNHbGxsXzZVN3JQblBIZWVNdE9hUndvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACf/s0D BACf/s4wDQYJKoZIhvcNAQELBQADggEBAEpklLGkMhR7ehm70Miay7mjKOEQ+IMA zgPJD3/2lYNv2nkrFhPPKzNddQs8pYCvHaZV/HXP0YPe4HXCsG8bgAxJEuR8Aq6m H12K8vk1cIv5ow41R2V6wa2Ig1xAfwooLjcXVlWHFe5J254iNgtLzKYDgdClxFPZ PNwuDDoNqwI8AiX0Nyca1N510q+ZFCu1AWRuaUjs6jZOjnW06o6lk6rzgo2++Z0X tnlRknUtuZRzK5+jdVdm8fS7iIFFFjoBHHq1YuG6jgo2wxgsW6dwdT4p0hRMBNel 0FBQ3Xa1RfuoPiOQd1E0+sxZPr7DLSD3BvuSRivjTqKlH+SDSPCs/sc= -----END CERTIFICATE-----Generated at Mon Jan 19 09:49:36 2026 by rpki-client