This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/zw7G6rZ3OugQehoBP3QpVRIzHKs.roa File: zw7G6rZ3OugQehoBP3QpVRIzHKs.roa (raw, json) Hash identifier: Ywv0pQZLRrxCf8Y+ep3+4GqTg47V6bf1LboUdnUKZNM= Subject key identifier: CF:0E:C6:EA:B6:77:3A:E8:10:7A:1A:01:3F:74:29:55:12:33:1C:AB Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Certificate serial: 019B79105B5C7246B6E7E70E817FCF3ACC92 Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/zw7G6rZ3OugQehoBP3QpVRIzHKs.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 2a03:21e0::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5b:5c:72:46:b6:e7:e7:0e:81:7f:cf:3a:cc:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf0ec6eab6773ae8107a1a013f74295512331cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:94:47:db:06:0b:84:c4:0e:b6:8f:e9:00: 2d:47:81:05:7f:6f:31:1c:17:f7:69:54:eb:04:2c: 73:02:e7:17:6d:17:35:d5:f2:02:b4:88:d9:08:1d: 37:a3:f8:ba:26:b6:be:fc:23:36:3a:64:06:ca:7c: 38:02:77:c5:6f:39:cf:9b:3f:a6:ef:88:0a:ac:62: 51:00:95:29:fd:95:44:9f:3a:9f:d0:71:0b:b9:ec: e9:0e:d3:c6:31:d3:9d:8b:09:91:3b:3d:35:ba:6d: a2:57:ad:e4:ce:82:1d:87:f6:d4:50:f3:93:29:84: 68:5d:32:ea:f6:10:eb:d6:55:9c:f6:c8:77:21:c6: 1c:4f:b6:fe:97:c6:d0:09:35:0c:31:d9:a6:3c:19: d9:7a:db:b2:da:b0:0c:2e:cc:d3:3e:90:4c:17:98: d1:6b:09:9b:1d:a9:47:1f:99:bb:49:7b:d4:76:11: c3:6e:bf:c6:4e:e0:46:70:bd:87:b6:19:29:43:35: ec:3f:8a:ba:71:1a:e2:34:72:5a:37:35:af:1e:56: a4:ba:d9:9a:e3:c0:a0:fe:4b:8a:16:fb:9d:d1:20: 9f:98:a9:ad:ff:0e:f8:1e:87:f9:a8:34:fe:73:47: 88:84:62:d5:9e:de:37:97:d1:8e:3a:96:f6:a1:c0: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0E:C6:EA:B6:77:3A:E8:10:7A:1A:01:3F:74:29:55:12:33:1C:AB X509v3 Authority Key Identifier: keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/zw7G6rZ3OugQehoBP3QpVRIzHKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:21e0::/36 Signature Algorithm: sha256WithRSAEncryption 59:d1:22:48:bd:34:4c:9d:da:39:a0:f3:81:31:c4:b7:22:b5: fc:59:30:0c:2f:8a:3a:7c:52:6f:2c:70:4b:08:53:bb:67:bf: 9f:26:9f:22:8f:85:36:4a:32:91:7e:91:c7:56:36:c4:43:1b: 41:82:78:5b:c0:13:31:e0:d4:c4:d1:7b:ea:66:5a:45:1c:29: a1:24:e4:ce:20:2b:99:f5:91:e9:92:22:cc:f4:40:d7:05:ec: ea:31:cc:c0:41:a2:ed:9a:19:1d:e2:54:71:ae:05:bd:4f:22: 5b:4b:33:16:a3:2e:b1:bd:c2:3c:af:e4:91:98:94:dc:ef:f1: d4:63:e6:fc:46:12:d1:77:30:b0:ae:1a:b1:99:ca:35:ec:6a: b2:1e:cd:92:11:68:2e:b6:67:5b:b8:ed:29:93:72:a8:c6:f0: f5:16:ea:e8:2e:e6:9e:b6:90:a4:fb:82:05:49:b8:60:30:18: ca:1c:2e:e2:07:ed:76:a0:1b:25:ee:ae:69:06:f1:e5:9b:8a: 41:21:9d:ba:76:fe:49:2e:b2:98:ea:6f:17:99:d4:aa:fe:1e: 7e:08:b4:b5:d5:b2:a6:1d:cb:c5:fc:72:03:55:ab:fd:30:63: 14:8b:1a:a5:66:ec:f8:57:ea:62:20:ad:55:07:62:13:7a:86: 95:d8:ba:69 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5EFtccka25+cOgX/POsySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz YWNjZjIwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjBlYzZlYWI2NzczYWU4MTA3YTFhMDEzZjc0Mjk1NTEyMzMxY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkiUR9sGC4TEDraP6QAtR4EFf28x HBf3aVTrBCxzAucXbRc11fICtIjZCB03o/i6Jra+/CM2OmQGynw4AnfFbznPmz+m 74gKrGJRAJUp/ZVEnzqf0HELuezpDtPGMdOdiwmROz01um2iV63kzoIdh/bUUPOT KYRoXTLq9hDr1lWc9sh3IcYcT7b+l8bQCTUMMdmmPBnZetuy2rAMLszTPpBMF5jR awmbHalHH5m7SXvUdhHDbr/GTuBGcL2HthkpQzXsP4q6cRriNHJaNzWvHlakutma 48Cg/kuKFvud0SCfmKmt/w74Hof5qDT+c0eIhGLVnt43l9GOOpb2ocDYEwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFM8Oxuq2dzroEHoaAT90KVUSMxyrMB8GA1UdIwQY MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt ODlkNWM2MGY1MDFmLzEvenc3RzZyWjNPdWdRZWhvQlAzUXBWUkl6SEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgMh4AAw DQYJKoZIhvcNAQELBQADggEBAFnRIki9NEyd2jmg84ExxLcitfxZMAwvijp8Um8s cEsIU7tnv58mnyKPhTZKMpF+kcdWNsRDG0GCeFvAEzHg1MTRe+pmWkUcKaEk5M4g K5n1kemSIsz0QNcF7OoxzMBBou2aGR3iVHGuBb1PIltLMxajLrG9wjyv5JGYlNzv 8dRj5vxGEtF3MLCuGrGZyjXsarIezZIRaC62Z1u47SmTcqjG8PUW6ugu5p62kKT7 ggVJuGAwGMocLuIH7XagGyXurmkG8eWbikEhnbp2/kkuspjqbxeZ1Kr+Hn4ItLXV sqYdy8X8cgNVq/0wYxSLGqVm7PhX6mIgrVUHYhN6hpXYumk= -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:27 2026 by rpki-client