This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Zes9PUIGZdo_9LrDP7M15p5oawc.roa File: Zes9PUIGZdo_9LrDP7M15p5oawc.roa (raw, json) Hash identifier: 6bUtaGElpOGGE63DLlZtFA5PJo8DtZ4UODrtR53uq4o= Subject key identifier: 65:EB:3D:3D:42:06:65:DA:3F:F4:BA:C3:3F:B3:35:E6:9E:68:6B:07 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C8094AE25B2D47075E782634181C728 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Zes9PUIGZdo_9LrDP7M15p5oawc.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39107 IP address blocks: 2001:7f8:64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:94:ae:25:b2:d4:70:75:e7:82:63:41:81:c7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65eb3d3d420665da3ff4bac33fb335e69e686b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:7b:fd:63:0c:b6:65:e7:04:57:c8:ab:a7: 4e:e9:7c:4b:ec:fc:62:b7:8d:f8:bc:44:65:7d:2a: 78:16:5a:07:15:27:dd:79:99:25:8f:6a:0e:51:62: 13:bd:93:69:3a:86:bf:1a:2d:1a:48:7c:30:47:3d: 30:6c:07:8a:8c:b1:1b:69:29:93:db:69:9e:05:f4: f9:ed:99:bf:68:23:27:2c:90:09:74:2b:4e:76:98: 4c:f9:63:2a:97:52:b6:29:e6:50:80:83:1c:bb:5c: d9:d9:e8:35:14:73:18:81:cd:eb:da:b2:8c:dd:36: ba:a6:c3:32:54:3d:d8:bc:4d:56:ee:04:83:a9:db: 47:11:f3:db:8b:5a:31:42:d4:bc:ac:5c:74:f3:8b: e2:dc:38:e7:e1:f6:19:be:a9:a5:34:90:ba:5e:a5: a1:58:ce:b0:25:97:9e:49:a1:39:3c:f4:6b:10:27: 75:a2:15:8a:6c:fc:0b:86:8e:73:17:66:a6:b6:6b: 2a:fd:0c:a6:5a:39:43:b3:b9:6a:0e:15:57:16:7e: 55:02:e6:7c:f6:67:5d:a8:5d:13:05:a5:69:95:f1: ed:3a:f8:8d:38:3a:29:cd:b6:a9:95:0f:49:a8:0a: 28:9f:fd:7a:9e:9e:43:6e:c3:53:e2:3f:d6:68:b9: a4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EB:3D:3D:42:06:65:DA:3F:F4:BA:C3:3F:B3:35:E6:9E:68:6B:07 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/Zes9PUIGZdo_9LrDP7M15p5oawc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:7f8:64::/48 Signature Algorithm: sha256WithRSAEncryption 2c:37:33:3d:be:9c:85:a6:72:aa:07:ba:c0:83:a9:81:aa:80: 56:8e:fb:90:f2:59:13:39:11:40:5a:a7:c1:81:19:de:e8:4c: 24:fb:b6:81:07:fb:55:5e:06:2d:80:29:d1:52:f5:17:8e:cd: 9e:88:3d:5d:6c:38:9b:a0:8d:ff:f6:41:c1:f3:32:e1:05:fc: e0:f3:1f:58:34:11:d1:8a:01:66:f4:49:4b:fc:09:59:d4:8f: 9c:8c:c9:38:38:2c:e3:6a:eb:db:02:15:f0:48:ac:74:b9:2a: b7:2c:28:49:c1:dd:a5:d8:d2:8b:f2:bc:91:de:da:d4:94:51: 3d:a9:e6:c5:8c:dc:3f:36:6c:1a:39:34:a9:a5:dd:a1:5e:e3: 11:8c:97:c9:18:0a:20:fe:03:4d:96:b1:2a:7f:f0:34:0c:c8: 3c:98:e7:4a:59:3a:6d:7a:c5:e3:8e:3e:13:a3:25:9d:c3:11: 97:3f:0b:3e:9e:8d:0b:3e:79:47:25:8b:b4:18:0a:e2:6a:b8: c3:ec:02:8a:15:23:55:ca:8b:0c:3e:b9:e5:4b:77:e3:75:ef: 5f:52:2c:d9:d5:43:07:e2:4e:88:9e:9d:01:e9:55:19:80:e8: df:6c:2c:29:a0:f4:88:f4:85:66:a9:ca:e7:cf:06:f2:de:5b: 8a:82:8a:e6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gJSuJbLUcHXngmNBgccoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWViM2QzZDQyMDY2NWRhM2ZmNGJhYzMzZmIzMzVlNjllNjg2YjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4t7/WMMtmXnBFfIq6dO6XxL7Pxi t434vERlfSp4FloHFSfdeZklj2oOUWITvZNpOoa/Gi0aSHwwRz0wbAeKjLEbaSmT 22meBfT57Zm/aCMnLJAJdCtOdphM+WMql1K2KeZQgIMcu1zZ2eg1FHMYgc3r2rKM 3Ta6psMyVD3YvE1W7gSDqdtHEfPbi1oxQtS8rFx084vi3Djn4fYZvqmlNJC6XqWh WM6wJZeeSaE5PPRrECd1ohWKbPwLho5zF2amtmsq/QymWjlDs7lqDhVXFn5VAuZ8 9mddqF0TBaVplfHtOviNODopzbaplQ9JqAoon/16np5DbsNT4j/WaLmkxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGXrPT1CBmXaP/S6wz+zNeaeaGsHMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvWmVzOVBVSUdaZG9fOUxyRFA3TTE1cDVvYXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEH+ABk MA0GCSqGSIb3DQEBCwUAA4IBAQAsNzM9vpyFpnKqB7rAg6mBqoBWjvuQ8lkTORFA WqfBgRne6Ewk+7aBB/tVXgYtgCnRUvUXjs2eiD1dbDiboI3/9kHB8zLhBfzg8x9Y NBHRigFm9ElL/AlZ1I+cjMk4OCzjauvbAhXwSKx0uSq3LChJwd2l2NKL8ryR3trU lFE9qebFjNw/NmwaOTSppd2hXuMRjJfJGAog/gNNlrEqf/A0DMg8mOdKWTptesXj jj4ToyWdwxGXPws+no0LPnlHJYu0GAriarjD7AKKFSNVyosMPrnlS3fjde9fUizZ 1UMH4k6Inp0B6VUZgOjfbCwpoPSI9IVmqcrnzwby3luKgorm -----END CERTIFICATE-----Generated at Wed Jan 21 10:47:22 2026 by rpki-client