This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ZABi67pRVL8cGgXbJc7q7dfuJRM.roa File: ZABi67pRVL8cGgXbJc7q7dfuJRM.roa (raw, json) Hash identifier: 7i15WBJ+8DFXuDbT1I5EsCl1voJXtC9EX0LchDMxjJA= Subject key identifier: 64:00:62:EB:BA:51:54:BF:1C:1A:05:DB:25:CE:EA:ED:D7:EE:25:13 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C132CC43BB968DDA21F3B274BC28F30 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ZABi67pRVL8cGgXbJc7q7dfuJRM.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204628 IP address blocks: 2001:4030::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2c:c4:3b:b9:68:dd:a2:1f:3b:27:4b:c2:8f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=640062ebba5154bf1c1a05db25ceeaedd7ee2513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:52:fa:12:06:d1:75:89:7a:16:f9:6f:c8: d8:0c:17:2c:11:de:bb:ed:66:a4:d2:dd:d3:73:c8: 0b:b9:09:bc:8a:78:40:13:d1:84:74:74:99:5c:f9: d4:b8:90:03:ad:de:c4:1b:76:6b:eb:51:55:4d:6f: 50:ce:1a:63:04:b4:4c:fb:ec:03:76:80:be:62:a3: f7:65:2f:f5:94:fc:5b:a8:7e:6c:fe:43:f3:7d:d5: 06:71:60:c6:f1:6b:67:f1:69:56:e1:50:5e:33:8a: 10:fb:00:18:41:e6:72:b4:e9:3e:e0:6c:94:5a:28: 67:f8:c7:38:e4:07:54:44:52:e5:f0:ea:1d:20:6f: 22:9c:db:93:d9:fe:7a:27:c6:13:60:ea:e2:04:2c: 93:b1:4f:91:9d:b0:c8:d2:67:96:f9:27:67:07:d6: 96:b5:88:e2:09:6a:d6:d6:81:5a:2d:2a:e3:66:d4: 3e:f3:97:cb:f5:ca:30:83:1e:5f:b5:2d:f2:24:a9: 57:ab:c1:8c:da:d7:6b:7a:c1:a3:fe:6d:b7:48:0b: 48:b9:99:34:89:27:9e:43:99:18:67:8e:27:d2:01: 8b:97:f6:e4:81:9b:03:84:78:43:ea:06:e9:3c:14: eb:83:06:d2:02:85:95:dc:a6:9c:8e:1d:08:d7:33: 2a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:00:62:EB:BA:51:54:BF:1C:1A:05:DB:25:CE:EA:ED:D7:EE:25:13 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ZABi67pRVL8cGgXbJc7q7dfuJRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4030::/32 Signature Algorithm: sha256WithRSAEncryption 42:87:10:ca:be:46:01:44:f5:c4:51:99:5e:cc:ca:85:1f:b6: ad:41:2d:83:97:a8:6a:52:ca:56:68:29:4a:b6:3f:58:1b:37: 8c:02:5c:3d:00:e6:45:35:cb:45:57:4a:2d:9f:3e:9d:54:2f: 7b:4a:29:19:fd:8f:a2:dd:94:e7:f2:89:80:fb:11:c4:fb:a6: 52:f1:88:ba:79:b1:73:90:37:9e:9f:f8:d7:c8:9c:e4:c0:df: b5:a8:1d:b0:5b:22:b4:8f:54:3c:29:61:2d:4a:e5:ff:23:29: 70:f8:ce:6c:c1:5d:c4:2f:a4:af:22:d9:99:9d:39:b4:02:3e: 0b:3f:50:e6:4b:81:b4:bc:e3:20:dd:40:f6:54:12:7c:da:b6: 04:36:d7:e3:82:2f:13:b1:da:01:6b:6c:cc:0c:ad:cb:4c:ae: 22:e6:7a:d8:c5:65:02:60:c0:6d:bf:4f:b5:85:3b:b7:75:64: 60:4e:12:b2:5d:df:bb:69:d6:0c:35:ef:fa:3b:8c:e8:e6:36: 5e:f8:7c:6b:06:c3:d5:bd:ec:7e:48:f0:97:2c:e5:b1:60:17: a6:ec:33:c4:0b:8a:fc:0f:10:2d:2e:49:e6:2d:fb:37:37:15: c9:97:89:17:ca:c1:5d:3c:47:76:e8:d1:4b:be:05:06:5e:bd: 68:54:de:95 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EyzEO7lo3aIfOydLwo8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDAwNjJlYmJhNTE1NGJmMWMxYTA1ZGIyNWNlZWFlZGQ3ZWUyNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/hS+hIG0XWJehb5b8jYDBcsEd67 7Wak0t3Tc8gLuQm8inhAE9GEdHSZXPnUuJADrd7EG3Zr61FVTW9QzhpjBLRM++wD doC+YqP3ZS/1lPxbqH5s/kPzfdUGcWDG8Wtn8WlW4VBeM4oQ+wAYQeZytOk+4GyU Wihn+Mc45AdURFLl8OodIG8inNuT2f56J8YTYOriBCyTsU+RnbDI0meW+SdnB9aW tYjiCWrW1oFaLSrjZtQ+85fL9cowgx5ftS3yJKlXq8GM2tdresGj/m23SAtIuZk0 iSeeQ5kYZ44n0gGLl/bkgZsDhHhD6gbpPBTrgwbSAoWV3Kacjh0I1zMqRwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGQAYuu6UVS/HBoF2yXO6u3X7iUTMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvWkFCaTY3cFJWTDhjR2dYYkpjN3E3ZGZ1SlJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFAMDAN BgkqhkiG9w0BAQsFAAOCAQEAQocQyr5GAUT1xFGZXszKhR+2rUEtg5eoalLKVmgp SrY/WBs3jAJcPQDmRTXLRVdKLZ8+nVQve0opGf2Pot2U5/KJgPsRxPumUvGIunmx c5A3np/418ic5MDftagdsFsitI9UPClhLUrl/yMpcPjObMFdxC+kryLZmZ05tAI+ Cz9Q5kuBtLzjIN1A9lQSfNq2BDbX44IvE7HaAWtszAyty0yuIuZ62MVlAmDAbb9P tYU7t3VkYE4Ssl3fu2nWDDXv+juM6OY2Xvh8awbD1b3sfkjwlyzlsWAXpuwzxAuK /A8QLS5J5i37NzcVyZeJF8rBXTxHdujRS74FBl69aFTelQ== -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:04 2026 by rpki-client