This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zL_xfB55X1-7bdVX55R9a91TzBY.roa File: zL_xfB55X1-7bdVX55R9a91TzBY.roa (raw, json) Hash identifier: NJAur9NqtNVGgU3yO68Hc9J77XHR/xjQKZxm/wtzTgA= Subject key identifier: CC:BF:F1:7C:1E:79:5F:5F:BB:6D:D5:57:E7:94:7D:6B:DD:53:CC:16 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D434F3C99B53DD37E3A4B11C40FA3 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zL_xfB55X1-7bdVX55R9a91TzBY.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211704 IP address blocks: 2a0e:b107:fb3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:43:4f:3c:99:b5:3d:d3:7e:3a:4b:11:c4:0f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccbff17c1e795f5fbb6dd557e7947d6bdd53cc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:32:d4:f5:02:31:d6:45:e6:75:ec:a3:59: b9:3c:ca:23:ae:59:70:54:1f:78:24:bc:8b:80:ff: 6b:a6:35:3e:4f:74:b6:26:a8:91:af:96:6e:e6:85: 9d:7c:d5:6f:6a:c2:b7:ad:fe:da:dd:2f:fe:fa:99: 11:aa:fa:d2:36:56:b0:71:76:46:f4:bd:f5:b6:bf: 96:6d:c1:62:f7:93:cc:41:2f:8a:45:ab:48:7e:42: 75:24:67:5a:ae:50:a3:f7:6e:8e:55:a6:06:be:5b: 4d:a2:b1:a4:61:27:79:6b:4b:51:d1:fe:02:61:18: 47:26:b2:6d:1d:dd:c4:b5:b9:58:7d:71:c4:a5:9d: 83:43:d4:7d:37:f7:5f:ab:e7:95:52:c5:f4:1c:dd: 67:e5:20:0f:30:d5:b2:1e:e3:8c:08:30:1f:1a:90: 04:8c:9b:f0:ce:3f:ba:50:e5:ea:e6:f9:a5:6a:21: 17:60:e1:d3:36:24:77:cb:65:d1:14:4f:8a:fd:11: 38:b9:eb:f9:b5:32:27:74:70:08:8f:ca:41:6b:63: 8c:e3:f6:91:e8:73:56:8b:a2:53:4d:87:8c:84:97: 95:dd:9a:82:df:6b:14:25:ed:b6:1f:bd:9d:5d:88: 2b:b3:42:37:80:23:1f:11:65:96:2c:37:6a:d2:7a: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BF:F1:7C:1E:79:5F:5F:BB:6D:D5:57:E7:94:7D:6B:DD:53:CC:16 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zL_xfB55X1-7bdVX55R9a91TzBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:fb3::/48 Signature Algorithm: sha256WithRSAEncryption 59:82:70:e7:37:5b:e5:1e:cb:3c:fb:30:16:17:c7:07:2e:a6: b0:cb:e0:c6:18:8b:f0:18:8c:f1:28:a4:40:c3:71:f5:b4:67: a1:42:48:ed:43:72:6c:c0:51:26:88:f6:50:52:ba:7c:02:ab: a5:22:4b:21:c1:ba:5d:13:43:26:49:cb:73:a3:99:23:33:96: b9:76:6c:31:16:32:d2:61:6e:c8:23:eb:1e:ee:a1:b4:f2:42: a3:81:90:fc:37:ee:e7:96:3c:76:aa:6e:3c:6c:95:32:97:ce: c8:7e:4a:5c:c4:69:ba:8c:d6:87:73:3e:da:8b:78:08:cc:82: ae:f9:11:94:80:7e:b3:9e:a5:62:1a:6e:ba:41:1e:e0:93:d3: 72:ad:cb:0b:0b:ac:1d:38:84:76:45:59:41:c3:64:bf:c6:b9: e3:df:f0:be:96:c2:f9:be:e7:ae:03:04:22:13:5d:39:f0:a3: b1:d6:2e:2c:24:36:92:ce:fb:4d:c9:c4:f9:7f:08:4c:22:86: eb:39:47:b4:33:d6:41:6d:78:5a:32:36:d4:b3:fa:24:b2:d6: a0:31:4b:a6:e6:95:d3:71:d9:c3:d1:ac:8f:bc:7e:af:b0:53: b4:0f:1a:57:20:e5:c5:e0:4d:cd:20:85:18:14:7b:ce:d3:6a: 3b:68:c1:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUNPPJm1PdN+OksRxA+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2JmZjE3YzFlNzk1ZjVmYmI2ZGQ1NTdlNzk0N2Q2YmRkNTNjYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Qy1PUCMdZF5nXso1m5PMojrllw VB94JLyLgP9rpjU+T3S2JqiRr5Zu5oWdfNVvasK3rf7a3S/++pkRqvrSNlawcXZG 9L31tr+WbcFi95PMQS+KRatIfkJ1JGdarlCj926OVaYGvltNorGkYSd5a0tR0f4C YRhHJrJtHd3EtblYfXHEpZ2DQ9R9N/dfq+eVUsX0HN1n5SAPMNWyHuOMCDAfGpAE jJvwzj+6UOXq5vmlaiEXYOHTNiR3y2XRFE+K/RE4uev5tTIndHAIj8pBa2OM4/aR 6HNWi6JTTYeMhJeV3ZqC32sUJe22H72dXYgrs0I3gCMfEWWWLDdq0nov1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMy/8XweeV9fu23VV+eUfWvdU8wWMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvekxfeGZCNTVYMS03YmRWWDU1UjlhOTFUekJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBw+z MA0GCSqGSIb3DQEBCwUAA4IBAQBZgnDnN1vlHss8+zAWF8cHLqawy+DGGIvwGIzx KKRAw3H1tGehQkjtQ3JswFEmiPZQUrp8AqulIkshwbpdE0MmSctzo5kjM5a5dmwx FjLSYW7II+se7qG08kKjgZD8N+7nljx2qm48bJUyl87IfkpcxGm6jNaHcz7ai3gI zIKu+RGUgH6znqViGm66QR7gk9NyrcsLC6wdOIR2RVlBw2S/xrnj3/C+lsL5vueu AwQiE1058KOx1i4sJDaSzvtNycT5fwhMIobrOUe0M9ZBbXhaMjbUs/okstagMUum 5pXTcdnD0ayPvH6vsFO0DxpXIOXF4E3NIIUYFHvO02o7aMGJ -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:54 2026 by rpki-client