This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa File: 3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa (raw, json) Hash identifier: H+Z/PRkwZjADwWAUsIyypSlyitD2tqhuhKd4mwOypxw= Subject key identifier: DF:36:4C:47:9C:7A:00:81:43:D5:D2:4A:DA:75:33:6F:B1:60:83:5A Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Certificate serial: 019B7DCB011ECB7DDCBD4099D6030EC4932E Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa Signing time: Fri 02 Jan 2026 08:20:14 +0000 ROA not before: Fri 02 Jan 2026 08:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 2a14:4e87:1000::/48 maxlen: 48 2a14:4e87:1001::/48 maxlen: 48 2a14:4e87:1010::/48 maxlen: 48 2a14:4e87:1020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:01:1e:cb:7d:dc:bd:40:99:d6:03:0e:c4:93:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Validity Not Before: Jan 2 08:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df364c479c7a008143d5d24ada75336fb160835a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:00:47:00:7a:09:03:a5:98:ed:4b:63:1e: 0d:d4:2b:4a:57:ce:dd:24:65:7b:e2:fd:a2:1a:97: f8:04:01:cd:1d:68:09:38:34:fb:2d:ea:4b:d7:5e: 9f:be:fb:17:87:69:e8:2f:74:7a:b8:db:24:ed:ea: 0e:56:5d:f9:6e:7f:e8:25:87:3f:23:55:af:db:96: 86:cf:d1:c0:f1:8d:57:9a:0f:2f:c6:fb:db:2e:0d: 10:10:f0:bd:18:3e:1d:e1:12:12:f1:9d:e2:cd:bd: 5a:8a:09:2c:b4:96:5f:50:96:93:cd:1f:6c:28:72: 21:96:a9:09:c5:38:45:ec:8a:45:23:57:20:50:1f: 51:21:e9:0b:e0:04:83:5d:f7:63:d4:1b:cc:a1:30: 54:17:58:0a:61:ae:46:db:72:ab:1b:70:7f:ec:7d: 63:ec:9e:48:44:a5:a9:f5:38:25:bc:ce:ff:6c:9b: 6f:64:67:2d:89:d9:dc:1b:77:69:8f:aa:d5:1d:4c: 59:ff:4b:f7:b0:28:d7:f5:c4:3a:f2:aa:30:b5:70: d8:1f:4e:0e:fb:cf:c1:f5:91:18:07:e0:8f:32:68: 9f:fc:9e:e4:83:c7:c8:f6:61:0d:2b:e1:13:b9:36: d1:c2:c1:0c:0e:25:0b:9a:aa:bc:7e:de:58:38:f0: a8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:4C:47:9C:7A:00:81:43:D5:D2:4A:DA:75:33:6F:B1:60:83:5A X509v3 Authority Key Identifier: keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/3zZMR5x6AIFD1dJK2nUzb7Fgg1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:4e87:1000::/47 2a14:4e87:1010::/48 2a14:4e87:1020::/48 Signature Algorithm: sha256WithRSAEncryption 79:bc:35:c9:7f:5f:28:c8:ad:de:a1:9b:ac:bc:bb:ac:9d:51: 6a:59:d0:f9:5c:a2:28:cc:76:eb:0d:8a:41:5c:4b:37:13:58: 6a:9f:e1:2a:9e:3d:18:10:c0:4e:3d:13:14:de:e2:a7:5d:4c: e8:f4:d6:35:82:c6:76:1f:7d:8f:78:bb:45:f2:a3:34:69:0d: e5:58:7b:e9:99:a1:49:5b:44:ed:55:90:df:d4:b7:04:fd:a0: 2c:91:d8:69:02:c8:8c:0f:26:03:db:f1:3c:24:47:46:51:89: c4:60:bf:60:5e:ce:b6:e0:43:16:f7:9e:0f:48:4a:ba:2a:8b: 8f:bc:7f:6d:20:d8:2b:89:da:51:f0:97:c7:97:dd:b5:5b:76: b2:dc:a0:a0:aa:eb:98:74:59:3a:af:78:a4:95:1c:c6:ab:29: ec:7b:81:db:09:11:48:a0:c8:43:39:fe:7f:ec:2a:ec:d6:c2: 98:fe:32:58:10:95:55:c8:bf:d3:ac:61:b0:01:16:70:26:43: 9e:de:38:2e:cf:e3:ad:6e:2b:b8:24:e9:de:48:2c:57:ba:1b: 31:ab:e4:00:21:c1:4c:d0:63:5e:c8:a0:21:06:25:c8:63:e9: 26:f2:66:3d:a7:23:be:27:df:31:27:91:44:19:bc:9f:42:c0: 2b:ca:18:79 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ywEey33cvUCZ1gMOxJMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4 MTk5ZTYwHhcNMjYwMTAyMDgyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjM2NGM0NzljN2EwMDgxNDNkNWQyNGFkYTc1MzM2ZmIxNjA4MzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1EARwB6CQOlmO1LYx4N1CtKV87d JGV74v2iGpf4BAHNHWgJODT7LepL116fvvsXh2noL3R6uNsk7eoOVl35bn/oJYc/ I1Wv25aGz9HA8Y1Xmg8vxvvbLg0QEPC9GD4d4RIS8Z3izb1aigkstJZfUJaTzR9s KHIhlqkJxThF7IpFI1cgUB9RIekL4ASDXfdj1BvMoTBUF1gKYa5G23KrG3B/7H1j 7J5IRKWp9TglvM7/bJtvZGctidncG3dpj6rVHUxZ/0v3sCjX9cQ68qowtXDYH04O +8/B9ZEYB+CPMmif/J7kg8fI9mENK+ETuTbRwsEMDiULmqq8ft5YOPCo+wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN82TEecegCBQ9XSStp1M2+xYINaMB8GA1UdIwQY MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt ZGYyN2YxMGM3MDk3LzEvM3paTVI1eDZBSUZEMWRKSzJuVXpiN0ZnZzFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3 LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcBKhROhxAA AwcAKhROhxAQAwcAKhROhxAgMA0GCSqGSIb3DQEBCwUAA4IBAQB5vDXJf18oyK3e oZusvLusnVFqWdD5XKIozHbrDYpBXEs3E1hqn+Eqnj0YEMBOPRMU3uKnXUzo9NY1 gsZ2H32PeLtF8qM0aQ3lWHvpmaFJW0TtVZDf1LcE/aAskdhpAsiMDyYD2/E8JEdG UYnEYL9gXs624EMW954PSEq6KouPvH9tINgridpR8JfHl921W3ay3KCgquuYdFk6 r3iklRzGqynse4HbCRFIoMhDOf5/7Crs1sKY/jJYEJVVyL/TrGGwARZwJkOe3jgu z+Otbiu4JOneSCxXuhsxq+QAIcFM0GNeyKAhBiXIY+km8mY9pyO+J98xJ5FEGbyf QsAryhh5 -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:38 2026 by rpki-client