This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/v97ZxeBIsc_Jyv7evUvqhpxJVas.roa File: v97ZxeBIsc_Jyv7evUvqhpxJVas.roa (raw, json) Hash identifier: 3zOyCX5+Vtc/1pLaQZ9YLJxnVOsJJtmXXOgmbp8dNZY= Subject key identifier: BF:DE:D9:C5:E0:48:B1:CF:C9:CA:FE:DE:BD:4B:EA:86:9C:49:55:AB Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6C6F6773D18E1B80945E18FC190A0 Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/v97ZxeBIsc_Jyv7evUvqhpxJVas.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a01:e281:a200::/40 maxlen: 40 2a01:e281:a774::/48 maxlen: 48 2a01:e281:af00::/40 maxlen: 48 2a01:e281:b100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c6:f6:77:3d:18:e1:b8:09:45:e1:8f:c1:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfded9c5e048b1cfc9cafedebd4bea869c4955ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:da:bc:68:05:6f:8a:d6:c4:4b:e6:82:d8: 75:a6:5f:b9:03:05:43:ae:89:98:67:fd:01:17:13: 8b:cb:2f:62:14:08:70:fa:ad:f0:db:a4:34:5c:fa: ee:a4:a0:7e:81:c0:87:e6:29:24:32:70:f9:7d:5e: 79:28:19:6f:64:a5:9c:3d:c1:e8:36:32:b4:e6:e2: db:65:99:17:22:ce:01:b0:fc:50:12:5f:21:b3:64: 56:e5:8c:6a:43:ee:00:36:0e:80:bb:13:c9:f7:94: e2:4c:94:5e:75:c0:a2:5b:5a:26:30:58:36:09:41: 80:c5:79:c4:4c:b6:87:26:40:9d:55:81:ad:2d:2f: 61:55:85:59:69:55:e2:37:a9:80:d3:0a:78:df:55: 47:b0:1d:fc:30:7e:fe:d6:32:a2:01:fb:88:50:46: 2a:a3:55:62:bd:aa:c9:46:06:cc:9d:83:26:eb:8f: 4f:2a:e8:54:ec:72:03:04:d4:df:b1:cb:23:89:1d: ad:be:ba:11:b5:a5:0a:54:d3:03:41:97:59:0f:53: be:f9:ef:48:25:8f:3a:d8:da:af:1d:16:be:0b:af: b3:71:8b:65:c1:c3:6a:2e:25:73:06:a0:a6:fd:f1: e5:fb:03:84:c8:52:0d:ba:93:d9:70:ba:7e:80:7d: c0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DE:D9:C5:E0:48:B1:CF:C9:CA:FE:DE:BD:4B:EA:86:9C:49:55:AB X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/v97ZxeBIsc_Jyv7evUvqhpxJVas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:a200::/40 2a01:e281:a774::/48 2a01:e281:af00::/40 2a01:e281:b100::/40 Signature Algorithm: sha256WithRSAEncryption 8a:df:27:a4:d3:b0:1c:3c:48:a9:39:20:df:9e:45:c3:8f:e4: d8:c2:b3:93:84:d2:8e:2f:8d:b5:f8:d0:71:a1:8a:1f:da:20: 32:56:55:1d:f9:e7:09:a1:60:88:5a:c9:80:0d:d8:e7:cf:fb: 6f:fc:0c:fe:8d:ca:fc:c3:c7:43:bb:04:37:dd:81:35:e3:b0: a4:77:d0:c8:b5:12:50:93:2a:bb:3a:36:ff:bb:6f:7c:65:e0: e4:2f:38:ec:86:5f:c3:85:bb:17:ce:e8:bf:b2:bf:b3:03:b4: e7:c0:e3:6a:1e:6d:c4:fd:02:33:ef:aa:48:23:a3:b0:b0:c1: 23:3d:dd:2a:90:27:8c:49:4a:fc:69:9b:4a:ed:63:f8:21:10: 3d:92:10:8e:9d:aa:e9:6e:0d:63:6a:be:c8:95:b5:4f:9e:02: 85:29:7b:89:fb:6c:fc:17:49:fa:a7:48:c2:f2:92:d6:62:8e: 84:46:35:fe:d8:36:57:08:08:12:54:92:22:60:fa:97:d1:15: e0:57:06:a3:16:7d:5f:c6:43:59:c7:c3:98:53:e2:d9:19:ba: d1:4f:97:ef:eb:c7:80:f0:70:4a:76:e0:7b:bb:4a:d3:b6:63: db:ba:28:f1:a7:e7:a8:3b:9e:6d:08:f5:ed:24:04:13:0d:46: 08:4d:0e:37 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+psb2dz0Y4bgJReGPwZCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmRlZDljNWUwNDhiMWNmYzljYWZlZGViZDRiZWE4NjljNDk1NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxefavGgFb4rWxEvmgth1pl+5AwVD romYZ/0BFxOLyy9iFAhw+q3w26Q0XPrupKB+gcCH5ikkMnD5fV55KBlvZKWcPcHo NjK05uLbZZkXIs4BsPxQEl8hs2RW5YxqQ+4ANg6AuxPJ95TiTJRedcCiW1omMFg2 CUGAxXnETLaHJkCdVYGtLS9hVYVZaVXiN6mA0wp431VHsB38MH7+1jKiAfuIUEYq o1VivarJRgbMnYMm649PKuhU7HIDBNTfscsjiR2tvroRtaUKVNMDQZdZD1O++e9I JY862NqvHRa+C6+zcYtlwcNqLiVzBqCm/fHl+wOEyFINupPZcLp+gH3AEQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFL/e2cXgSLHPycr+3r1L6oacSVWrMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvdjk3WnhlQklzY19KeXY3ZXZVdnFocHhKVmFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAAjAhAwYAKgHigaID BwAqAeKBp3QDBgAqAeKBrwMGACoB4oGxMA0GCSqGSIb3DQEBCwUAA4IBAQCK3yek 07AcPEipOSDfnkXDj+TYwrOThNKOL421+NBxoYof2iAyVlUd+ecJoWCIWsmADdjn z/tv/Az+jcr8w8dDuwQ33YE147Ckd9DItRJQkyq7Ojb/u298ZeDkLzjshl/DhbsX zui/sr+zA7TnwONqHm3E/QIz76pII6OwsMEjPd0qkCeMSUr8aZtK7WP4IRA9khCO narpbg1jar7IlbVPngKFKXuJ+2z8F0n6p0jC8pLWYo6ERjX+2DZXCAgSVJIiYPqX 0RXgVwajFn1fxkNZx8OYU+LZGbrRT5fv68eA8HBKduB7u0rTtmPbuijxp+eoO55t CPXtJAQTDUYITQ43 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:40 2026 by rpki-client