This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zajGTW6JAuIpUqFCGt7_dA33F2M.roa File: zajGTW6JAuIpUqFCGt7_dA33F2M.roa (raw, json) Hash identifier: 7jJAQmiKhbyKdYB0z0cuMh9EiXy/WC1aYF9lX4/0fSA= Subject key identifier: CD:A8:C6:4D:6E:89:02:E2:29:52:A1:42:1A:DE:FF:74:0D:F7:17:63 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3EEB574080C67FBF596774B4BCA1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zajGTW6JAuIpUqFCGt7_dA33F2M.roa Signing time: Fri 02 Jan 2026 06:20:21 +0000 ROA not before: Fri 02 Jan 2026 06:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211486 IP address blocks: 2a0e:b107:dc6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3e:eb:57:40:80:c6:7f:bf:59:67:74:b4:bc:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cda8c64d6e8902e22952a1421adeff740df71763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b4:cb:9c:2a:eb:28:ef:4e:4f:2d:ce:57:bc: 0c:6a:ed:a5:0a:f4:84:57:57:aa:8e:d8:57:3d:e6: ec:0b:ad:c1:21:78:6a:98:20:c5:91:93:0b:14:cf: 16:7c:49:82:38:7a:94:2c:c3:f3:a7:75:69:dd:f0: b8:00:02:3c:66:aa:b3:cb:78:f8:64:14:f8:a3:49: 72:6e:2a:93:10:9b:19:5e:2a:7b:e6:ec:5d:4f:c5: 00:dc:4d:f3:d8:e3:fd:a2:84:d3:c8:e0:9b:04:69: 8a:e0:b5:00:20:af:05:02:d6:60:36:7c:79:d1:12: 60:72:29:27:2c:29:53:c4:d4:e3:a0:2c:dc:24:f3: d1:2e:45:bf:ac:39:41:e3:06:62:65:18:cf:e9:50: 79:c1:ea:5d:18:b4:97:fc:c9:ba:be:20:6b:2b:2e: ee:f2:2f:37:de:42:85:d8:75:bb:4e:e4:6d:cd:27: 89:4d:44:89:61:a3:9a:3e:69:be:55:39:94:21:d1: 71:35:12:17:43:b1:49:c7:4b:cd:2b:30:3a:a6:3f: aa:57:4f:a5:9e:ad:5c:52:c2:95:59:e0:2e:5e:8c: 6e:76:f7:1a:7d:23:24:46:67:56:1a:47:72:d2:cd: a1:ff:38:0a:a2:03:3a:06:04:24:27:6a:8c:33:17: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:C6:4D:6E:89:02:E2:29:52:A1:42:1A:DE:FF:74:0D:F7:17:63 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zajGTW6JAuIpUqFCGt7_dA33F2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:dc6::/48 Signature Algorithm: sha256WithRSAEncryption b3:64:ab:b1:f6:f2:01:f1:67:16:98:db:bb:1c:02:3c:78:c5: b3:7e:9c:27:20:1b:83:47:e8:58:93:8f:18:98:da:e9:57:e3: 40:56:25:93:d4:e0:62:5c:eb:17:75:4b:21:31:c4:5b:f8:ce: eb:e1:c4:97:11:8c:b2:34:e9:a6:e3:d0:11:7e:86:95:4f:53: 13:0b:9c:c1:8b:38:f0:07:4f:52:e5:c7:1a:d2:29:6e:e5:c7: 96:b6:0a:ac:bc:57:d6:d0:35:66:e7:68:f5:7d:01:0a:b3:0c: d3:52:22:25:ad:79:36:26:cb:d1:8c:7f:9c:bb:d6:ed:3f:f0: f6:4c:71:5e:ec:b6:4b:e1:21:31:ec:d8:84:98:d0:0c:a4:2f: fb:b9:3f:9b:bb:2b:4c:d6:37:73:e1:87:2b:32:ac:e8:88:6d: 67:90:4d:28:e9:ef:40:4b:55:1e:dc:68:b6:65:f2:15:e9:c1: 3e:55:86:28:19:15:4d:b3:73:0c:47:b1:61:21:ea:c6:e9:9a: 54:c0:62:28:0e:06:b8:78:40:fa:88:8b:4d:6d:38:98:d7:6e: a0:b8:3a:d9:73:1b:15:a8:78:23:42:18:81:2e:f7:36:18:c0: 48:8e:84:8b:0a:9b:6a:eb:dc:f2:e3:3d:e8:7b:0e:01:fd:81: 30:e4:1b:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XT7rV0CAxn+/WWd0tLyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGE4YzY0ZDZlODkwMmUyMjk1MmExNDIxYWRlZmY3NDBkZjcxNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rTLnCrrKO9OTy3OV7wMau2lCvSE V1eqjthXPebsC63BIXhqmCDFkZMLFM8WfEmCOHqULMPzp3Vp3fC4AAI8Zqqzy3j4 ZBT4o0lybiqTEJsZXip75uxdT8UA3E3z2OP9ooTTyOCbBGmK4LUAIK8FAtZgNnx5 0RJgciknLClTxNTjoCzcJPPRLkW/rDlB4wZiZRjP6VB5wepdGLSX/Mm6viBrKy7u 8i833kKF2HW7TuRtzSeJTUSJYaOaPmm+VTmUIdFxNRIXQ7FJx0vNKzA6pj+qV0+l nq1cUsKVWeAuXoxudvcafSMkRmdWGkdy0s2h/zgKogM6BgQkJ2qMMxdH2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM2oxk1uiQLiKVKhQhre/3QN9xdjMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvemFqR1RXNkpBdUlwVXFGQ0d0N19kQTMzRjJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBw3G MA0GCSqGSIb3DQEBCwUAA4IBAQCzZKux9vIB8WcWmNu7HAI8eMWzfpwnIBuDR+hY k48YmNrpV+NAViWT1OBiXOsXdUshMcRb+M7r4cSXEYyyNOmm49ARfoaVT1MTC5zB izjwB09S5cca0ilu5ceWtgqsvFfW0DVm52j1fQEKswzTUiIlrXk2JsvRjH+cu9bt P/D2THFe7LZL4SEx7NiEmNAMpC/7uT+buytM1jdz4YcrMqzoiG1nkE0o6e9AS1Ue 3Gi2ZfIV6cE+VYYoGRVNs3MMR7FhIerG6ZpUwGIoDga4eED6iItNbTiY126guDrZ cxsVqHgjQhiBLvc2GMBIjoSLCptq69zy4z3oew4B/YEw5Bus -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:07 2026 by rpki-client