This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zGJu0AiCRxdY_575GEI6NzET-jI.roa File: zGJu0AiCRxdY_575GEI6NzET-jI.roa (raw, json) Hash identifier: 0IUpWM9K8gw8qRjl+Vvgt6DNBXm96CD16sfRo4Y1QNc= Subject key identifier: CC:62:6E:D0:08:82:47:17:58:FF:9E:F9:18:42:3A:37:31:13:FA:32 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D258AB6E7D1F9D963B886EA25C013 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zGJu0AiCRxdY_575GEI6NzET-jI.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210397 IP address blocks: 2a0e:97c0:780::/44 maxlen: 48 2a0e:97c0:780::/48 maxlen: 48 2a0e:97c0:781::/48 maxlen: 48 2a0e:97c0:78b::/48 maxlen: 48 2a0e:97c0:78c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:25:8a:b6:e7:d1:f9:d9:63:b8:86:ea:25:c0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc626ed00882471758ff9ef918423a373113fa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:88:50:f9:cf:d5:f5:1d:c9:27:e2:10:0a:0b: 9d:05:70:3d:47:3d:c2:fe:a9:7a:24:35:87:28:93: 20:74:82:c1:de:73:73:28:77:bc:da:33:dc:3e:34: ca:b9:15:d6:34:ea:fe:60:06:20:db:eb:36:74:4b: 7e:48:7f:d5:53:f2:bb:25:7a:73:c4:02:5a:41:ac: 6a:16:b6:9f:7e:49:3e:8e:9d:f4:66:34:de:86:3c: a6:57:6c:65:da:73:76:f8:67:11:f1:8b:da:2e:58: 88:58:34:d3:ba:47:85:ff:57:e4:d9:b8:11:20:bb: 29:38:ba:06:41:a5:7c:12:f8:4c:5d:fa:7a:5d:61: 44:3c:98:ba:c9:46:c4:0c:14:dd:1f:5d:4f:26:88: f9:14:f5:26:5e:11:51:82:4f:bd:1a:da:a0:bc:7f: b8:24:1d:f2:ad:a8:68:2b:d0:0f:98:f8:e3:a8:a1: 24:82:4d:10:c8:a3:47:71:51:40:39:af:31:c9:3c: b1:e4:bd:d7:03:b1:4b:54:bd:50:8c:6c:0c:c4:5e: 00:c7:2e:31:d1:01:3a:d2:33:83:6f:25:25:be:fa: 05:8e:d9:28:6e:12:e0:a9:fd:0b:94:c7:51:fc:cf: 3e:cf:b2:01:ef:8f:11:93:91:f8:cf:a4:f3:9c:9c: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:62:6E:D0:08:82:47:17:58:FF:9E:F9:18:42:3A:37:31:13:FA:32 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zGJu0AiCRxdY_575GEI6NzET-jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:780::/44 Signature Algorithm: sha256WithRSAEncryption 81:03:b4:a8:92:db:32:3f:41:0f:7b:af:3e:bf:87:04:13:72: bf:2a:8e:b8:02:30:98:3c:a4:af:a5:33:3f:31:d9:a0:15:5b: 1a:6e:03:77:e5:f9:21:84:75:00:49:7e:1c:a6:1d:c8:95:9a: 93:92:e2:53:13:ee:96:b3:ee:fd:79:c3:7f:10:1d:aa:15:8e: 44:6f:fd:86:24:18:ee:98:26:53:6e:e0:6c:36:03:08:24:df: a6:a5:75:53:ef:67:c3:81:1e:71:3b:b0:e4:f0:31:3f:7b:87: 52:d6:96:4d:fb:4d:24:72:15:df:49:b6:91:85:53:39:6b:87: 99:e7:2b:ac:bf:2c:4d:ab:c1:01:b7:c1:23:ab:fa:53:53:59: 9f:a1:c9:58:cd:f6:0f:9a:ed:a6:8a:be:92:11:c4:1a:63:2b: e2:f9:d1:4e:27:e8:9e:eb:fa:b8:f6:3d:06:24:58:a1:30:66: 63:69:73:f5:3a:de:95:d9:73:b1:ec:3e:9c:2c:6a:bd:5d:c9: cf:e1:a4:6b:06:99:4d:4c:ad:4b:8c:3b:90:34:2c:e5:0f:92: e4:92:86:41:e0:2c:6d:79:4a:0d:40:cc:c8:a5:e8:38:32:e6: 83:c2:d5:21:4b:1d:63:8b:43:db:70:4f:78:dd:b1:56:75:b9: 96:bf:a5:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSWKtufR+dljuIbqJcATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzYyNmVkMDA4ODI0NzE3NThmZjllZjkxODQyM2EzNzMxMTNmYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYhQ+c/V9R3JJ+IQCgudBXA9Rz3C /ql6JDWHKJMgdILB3nNzKHe82jPcPjTKuRXWNOr+YAYg2+s2dEt+SH/VU/K7JXpz xAJaQaxqFraffkk+jp30ZjTehjymV2xl2nN2+GcR8YvaLliIWDTTukeF/1fk2bgR ILspOLoGQaV8EvhMXfp6XWFEPJi6yUbEDBTdH11PJoj5FPUmXhFRgk+9GtqgvH+4 JB3yrahoK9APmPjjqKEkgk0QyKNHcVFAOa8xyTyx5L3XA7FLVL1QjGwMxF4Axy4x 0QE60jODbyUlvvoFjtkobhLgqf0LlMdR/M8+z7IB748Rk5H4z6TznJxZbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMxibtAIgkcXWP+e+RhCOjcxE/oyMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvekdKdTBBaUNSeGRZXzU3NUdFSTZOekVULWpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAeA MA0GCSqGSIb3DQEBCwUAA4IBAQCBA7SoktsyP0EPe68+v4cEE3K/Ko64AjCYPKSv pTM/MdmgFVsabgN35fkhhHUASX4cph3IlZqTkuJTE+6Ws+79ecN/EB2qFY5Eb/2G JBjumCZTbuBsNgMIJN+mpXVT72fDgR5xO7Dk8DE/e4dS1pZN+00kchXfSbaRhVM5 a4eZ5yusvyxNq8EBt8Ejq/pTU1mfoclYzfYPmu2mir6SEcQaYyvi+dFOJ+ie6/q4 9j0GJFihMGZjaXP1Ot6V2XOx7D6cLGq9XcnP4aRrBplNTK1LjDuQNCzlD5LkkoZB 4CxteUoNQMzIpeg4MuaDwtUhSx1ji0PbcE943bFWdbmWv6WJ -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:46 2026 by rpki-client