This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zAkEen_L_zixxOUFNlDy059LzKA.roa File: zAkEen_L_zixxOUFNlDy059LzKA.roa (raw, json) Hash identifier: zvFQ35gQcP1qgQPwhMjatFJImLFx+n5c5DW74+INZBo= Subject key identifier: CC:09:04:7A:7F:CB:FF:38:B1:C4:E5:05:36:50:F2:D3:9F:4B:CC:A0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D28B0DA15D7A873A064E5C85527D2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zAkEen_L_zixxOUFNlDy059LzKA.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210617 IP address blocks: 2a0e:97c0:5a0::/48 maxlen: 48 2a0e:97c0:5a1::/48 maxlen: 48 2a0e:97c0:5af::/48 maxlen: 48 2a0e:b107:cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:28:b0:da:15:d7:a8:73:a0:64:e5:c8:55:27:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc09047a7fcbff38b1c4e5053650f2d39f4bcca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:9d:cf:c7:c5:7d:fc:a8:36:d4:59:b9:0c: 05:4d:32:8f:19:ac:b2:0b:ad:71:ea:81:18:52:ab: 3c:f0:01:21:87:f4:ec:fc:51:cb:a3:3e:0f:76:a3: ea:0f:89:fe:ec:1a:82:a0:41:5d:93:1c:b4:c3:70: 57:1d:9c:b3:45:8e:3b:9e:f7:3f:f1:bf:d5:64:d6: 1f:8f:6e:13:1d:fd:64:64:90:9e:9e:99:05:a2:2e: eb:2e:95:38:69:65:53:6d:5d:e0:ce:4d:01:a1:68: 3b:82:e7:05:f1:47:0f:7a:c3:36:18:f9:e2:89:0c: 37:d3:a7:a2:2f:a1:5d:a4:e9:df:64:af:0a:8d:5d: 82:52:da:14:4e:39:93:07:6f:49:08:73:99:5a:25: f8:51:57:71:e4:f2:c5:59:0a:2a:d6:55:aa:82:e4: f1:f1:d3:54:fa:f2:6b:46:be:3c:c7:3f:98:a0:86: 74:ef:b9:83:31:4b:7e:b4:3d:d4:04:cd:f7:f6:0b: d1:9d:d5:78:f6:1b:e0:27:22:01:fc:b0:21:85:6e: 61:b4:c8:1a:c0:2a:ea:09:23:47:2a:03:f1:a0:d4: aa:2e:4d:e2:9c:81:5c:07:44:9e:8c:9d:4f:4e:98: c2:69:ad:80:32:c2:5c:c0:82:c7:9e:58:b4:62:ff: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:09:04:7A:7F:CB:FF:38:B1:C4:E5:05:36:50:F2:D3:9F:4B:CC:A0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zAkEen_L_zixxOUFNlDy059LzKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:5a0::/47 2a0e:97c0:5af::/48 2a0e:b107:cc0::/48 Signature Algorithm: sha256WithRSAEncryption ad:b7:c7:f2:b0:fa:ab:76:9c:4b:34:a5:7a:b1:b8:f4:50:16: fb:a8:cf:80:43:b0:ad:1f:71:45:c2:c6:7a:e2:ff:9d:a8:4f: 62:a1:ed:2f:18:1a:63:b4:2b:b5:6e:57:72:b8:ce:b5:96:cf: 22:4c:38:2b:6f:a1:08:37:68:2f:b2:77:96:d7:5e:cc:de:bd: 25:14:9a:54:b6:16:13:c8:c3:69:89:8b:5b:73:22:72:f9:07: 3e:18:fb:6f:59:0e:a4:5c:4d:c3:a6:b9:0d:14:2f:3f:a6:ad: f8:7d:ce:2e:a8:e6:bc:cb:18:fd:8c:6e:4c:4e:13:11:a4:5e: e4:db:4d:4e:69:ea:1c:7b:98:ef:8d:3e:d9:22:dd:91:23:fd: b5:39:de:17:33:74:42:eb:71:c0:2b:d5:3c:08:56:9d:14:7f: e2:b8:97:15:13:a0:69:26:53:be:b1:92:f7:2e:de:e4:a1:b4: 64:6b:c2:0d:b2:03:b9:5d:23:8c:89:5c:49:ea:90:b6:8e:c3: e8:76:5f:c4:f5:65:76:15:25:7a:ff:6f:9a:ec:f4:b2:27:41: fb:84:9a:19:49:47:c6:f0:35:b2:d6:62:a4:b0:a7:36:9b:52: 4c:1f:d2:9d:2d:96:29:d1:4a:f3:54:53:d0:e5:cf:60:94:ef: d3:bb:9e:fd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XSiw2hXXqHOgZOXIVSfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzA5MDQ3YTdmY2JmZjM4YjFjNGU1MDUzNjUwZjJkMzlmNGJjY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Cdz8fFffyoNtRZuQwFTTKPGayy C61x6oEYUqs88AEhh/Ts/FHLoz4PdqPqD4n+7BqCoEFdkxy0w3BXHZyzRY47nvc/ 8b/VZNYfj24THf1kZJCenpkFoi7rLpU4aWVTbV3gzk0BoWg7gucF8UcPesM2GPni iQw306eiL6FdpOnfZK8KjV2CUtoUTjmTB29JCHOZWiX4UVdx5PLFWQoq1lWqguTx 8dNU+vJrRr48xz+YoIZ077mDMUt+tD3UBM339gvRndV49hvgJyIB/LAhhW5htMga wCrqCSNHKgPxoNSqLk3inIFcB0SejJ1PTpjCaa2AMsJcwILHnli0Yv9CLwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMwJBHp/y/84scTlBTZQ8tOfS8ygMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvekFrRWVuX0xfeml4eE9VRk5sRHkwNTlMektBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcBKg6XwAWg AwcAKg6XwAWvAwcAKg6xBwzAMA0GCSqGSIb3DQEBCwUAA4IBAQCtt8fysPqrdpxL NKV6sbj0UBb7qM+AQ7CtH3FFwsZ64v+dqE9ioe0vGBpjtCu1bldyuM61ls8iTDgr b6EIN2gvsneW117M3r0lFJpUthYTyMNpiYtbcyJy+Qc+GPtvWQ6kXE3DprkNFC8/ pq34fc4uqOa8yxj9jG5MThMRpF7k201Oaeoce5jvjT7ZIt2RI/21Od4XM3RC63HA K9U8CFadFH/iuJcVE6BpJlO+sZL3Lt7kobRka8INsgO5XSOMiVxJ6pC2jsPodl/E 9WV2FSV6/2+a7PSyJ0H7hJoZSUfG8DWy1mKksKc2m1JMH9KdLZYp0UrzVFPQ5c9g lO/Tu579 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:06 2026 by rpki-client