This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RZZNyoP4tTrKA-30_3GM87QIF-U.roa File: RZZNyoP4tTrKA-30_3GM87QIF-U.roa (raw, json) Hash identifier: YUFQ4XmJmfXIzIG9eWHZD6hb6+9du39n/b6DQBUDwQo= Subject key identifier: 45:96:4D:CA:83:F8:B5:3A:CA:03:ED:F4:FF:71:8C:F3:B4:08:17:E5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B5B3446FB1022E14CAB77693DBC30866B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RZZNyoP4tTrKA-30_3GM87QIF-U.roa Signing time: Fri 26 Dec 2025 15:08:31 +0000 ROA not before: Fri 26 Dec 2025 15:08:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212094 IP address blocks: 2a06:de01:e0::/44 maxlen: 48 2a0e:97c0:480::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:34:46:fb:10:22:e1:4c:ab:77:69:3d:bc:30:86:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 26 15:08:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45964dca83f8b53aca03edf4ff718cf3b40817e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:b0:b9:d4:56:39:19:59:81:00:aa:ff:0d: 79:20:99:6c:c0:2f:52:ee:02:f3:da:2b:2d:53:14: 74:98:39:e4:70:9e:36:82:72:f7:87:d2:de:00:77: 46:d4:53:8b:be:c0:b4:4b:44:8f:62:eb:e5:c9:57: 18:d8:ac:86:a2:4c:7c:d6:81:df:6f:6f:3a:84:d1: 3e:45:e9:ef:a6:6f:b1:f6:b6:12:cf:a3:b5:2e:82: be:23:80:53:42:5b:66:b6:e3:69:c1:ea:f9:70:81: 7f:17:51:a4:43:33:15:80:cc:38:7a:e6:03:3c:a8: 7f:2e:72:4a:6e:ae:ec:3f:84:d6:0c:39:74:8f:37: e9:ea:48:7f:87:36:44:4c:57:11:d5:a0:62:6e:cb: dc:75:01:09:62:9e:3b:b4:22:71:d7:89:67:9a:08: 82:73:76:93:08:51:76:ad:e4:b0:4d:94:b7:a6:d3: 86:e2:18:bd:49:54:d1:92:33:21:f6:86:6e:20:6c: af:79:74:82:35:e1:83:4e:e3:13:30:0a:d8:03:a5: 7c:a8:be:a4:43:4f:ba:c7:8c:42:61:19:0c:b0:5f: 74:99:51:9a:40:26:cd:32:37:6c:55:ec:6f:6f:ac: 73:12:cc:57:ed:14:dc:ec:98:e9:9a:15:ab:ef:96: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:96:4D:CA:83:F8:B5:3A:CA:03:ED:F4:FF:71:8C:F3:B4:08:17:E5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RZZNyoP4tTrKA-30_3GM87QIF-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:e0::/44 2a0e:97c0:480::/44 Signature Algorithm: sha256WithRSAEncryption 2e:68:fe:08:df:08:9a:eb:eb:5b:a1:c1:ad:7e:56:e5:ca:f2: c7:b1:0b:6f:d2:4c:02:11:61:59:fd:a4:4b:7f:7d:b5:c4:7b: ae:95:b5:fb:56:5d:7b:65:d1:4f:bb:f4:86:27:c7:be:cf:83: 71:de:dc:41:ca:0d:a5:ea:0d:76:e5:e0:1b:70:e7:51:ef:25: ab:75:29:c7:0d:45:d9:5a:b1:33:3b:8e:9b:41:cb:2e:1c:93: df:bd:a4:2a:eb:8b:11:45:d7:02:c7:c7:17:2b:89:46:aa:1b: c8:32:6a:9e:ec:84:09:61:72:45:0b:98:7d:b6:d3:52:42:20: 7c:23:ea:23:38:ea:b8:b0:b6:d2:af:86:20:8d:c9:68:4b:f6: 65:c3:99:13:17:e4:04:06:74:e7:f9:dc:b0:40:bd:68:93:f5: 6f:bc:32:75:37:41:ed:ac:71:c7:d2:c4:6d:7c:e4:19:69:6a: 82:79:6d:ce:e6:06:fe:b2:d2:ba:db:06:bc:08:42:1d:fc:f5: d9:5a:3b:24:2f:f0:13:9c:49:81:f9:44:00:c0:84:a9:15:2a: 30:6e:9c:f1:24:47:d7:29:e6:97:a1:a7:b2:c0:3a:96:a0:32: 4f:c3:db:a3:e5:4a:ec:a4:e4:36:0b:ed:c2:d3:39:05:be:84: 81:64:67:00 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZtbNEb7ECLhTKt3aT28MIZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjI2MTUwODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTk2NGRjYTgzZjhiNTNhY2EwM2VkZjRmZjcxOGNmM2I0MDgxN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNiwudRWORlZgQCq/w15IJlswC9S 7gLz2istUxR0mDnkcJ42gnL3h9LeAHdG1FOLvsC0S0SPYuvlyVcY2KyGokx81oHf b286hNE+Renvpm+x9rYSz6O1LoK+I4BTQltmtuNpwer5cIF/F1GkQzMVgMw4euYD PKh/LnJKbq7sP4TWDDl0jzfp6kh/hzZETFcR1aBibsvcdQEJYp47tCJx14lnmgiC c3aTCFF2reSwTZS3ptOG4hi9SVTRkjMh9oZuIGyveXSCNeGDTuMTMArYA6V8qL6k Q0+6x4xCYRkMsF90mVGaQCbNMjdsVexvb6xzEsxX7RTc7JjpmhWr75YDcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEWWTcqD+LU6ygPt9P9xjPO0CBflMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUlpaTnlvUDR0VHJLQS0zMF8zR004N1FJRi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAQDg AwcEKg6XwASAMA0GCSqGSIb3DQEBCwUAA4IBAQAuaP4I3wia6+tbocGtflblyvLH sQtv0kwCEWFZ/aRLf321xHuulbX7Vl17ZdFPu/SGJ8e+z4Nx3txByg2l6g125eAb cOdR7yWrdSnHDUXZWrEzO46bQcsuHJPfvaQq64sRRdcCx8cXK4lGqhvIMmqe7IQJ YXJFC5h9ttNSQiB8I+ojOOq4sLbSr4YgjcloS/Zlw5kTF+QEBnTn+dywQL1ok/Vv vDJ1N0HtrHHH0sRtfOQZaWqCeW3O5gb+stK62wa8CEId/PXZWjskL/ATnEmB+UQA wISpFSowbpzxJEfXKeaXoaeywDqWoDJPw9uj5UrspOQ2C+3C0zkFvoSBZGcA -----END CERTIFICATE-----Generated at Fri Dec 26 23:59:20 2025 by rpki-client