This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zJi0ScmCW_sbX-ZFiw-sVSYjgg8.roa File: zJi0ScmCW_sbX-ZFiw-sVSYjgg8.roa (raw, json) Hash identifier: lyJNTW71xSyZ0VpcAYprD9lvN6jE+C9og8JjXU1XrTI= Subject key identifier: CC:98:B4:49:C9:82:5B:FB:1B:5F:E6:45:8B:0F:AC:55:26:23:82:0F Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A5F99BF3E47203216AB7AF77F678 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zJi0ScmCW_sbX-ZFiw-sVSYjgg8.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63949 IP address blocks: 2a02:26f0:1280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a5:f9:9b:f3:e4:72:03:21:6a:b7:af:77:f6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc98b449c9825bfb1b5fe6458b0fac552623820f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:ad:28:87:69:95:34:c5:f2:77:fb:4d:e9: b0:1c:2f:56:7f:2f:fc:92:99:e8:66:93:75:2a:45: 03:86:ea:ca:81:a9:93:cc:97:59:06:45:ae:c0:2b: 69:7b:00:3d:32:f5:3e:c5:52:2a:3e:fd:d8:d0:4f: 5d:e7:0c:aa:08:2d:1a:85:2a:02:9f:5e:f9:64:79: ec:b1:c6:27:cf:5e:c7:6d:f3:d9:96:6a:7f:80:d4: cf:89:f4:09:d6:4c:7b:e2:4d:6d:71:9b:f2:f3:02: 8b:ce:3c:f7:e8:df:70:b9:fb:ec:06:be:57:df:87: 53:14:a7:f9:3a:98:20:1b:4d:ef:71:60:37:17:39: e9:75:e4:c3:62:fc:23:07:15:2a:41:7e:1f:47:04: d8:46:99:c5:d5:8d:b3:26:ea:30:5b:c1:ed:e7:90: ca:ab:a7:fe:ed:44:7f:9f:cd:1f:e6:5c:b5:0a:e0: 98:cb:98:fc:a8:3a:b1:1c:33:12:23:7c:62:1d:77: 10:bd:fa:e7:f2:26:38:54:6c:d5:89:f3:6b:97:51: 32:2d:ef:8e:f0:ee:0d:5d:77:50:94:f2:13:14:d0: 5c:05:e4:06:38:1e:6e:3e:80:3a:88:13:9f:3f:b9: eb:26:28:2d:a2:71:75:f8:a3:f9:61:f0:62:05:02: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:98:B4:49:C9:82:5B:FB:1B:5F:E6:45:8B:0F:AC:55:26:23:82:0F X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zJi0ScmCW_sbX-ZFiw-sVSYjgg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:26f0:1280::/48 Signature Algorithm: sha256WithRSAEncryption 80:69:b5:14:df:af:e1:a7:e6:dc:a5:2d:fe:bc:e8:8d:65:52: 66:9b:1b:85:d6:ae:71:a4:59:a1:e4:77:f5:e9:2d:f6:83:e2: 62:15:af:7e:18:23:13:30:57:f7:09:8d:f6:46:3a:61:ce:88: 01:68:6f:78:1e:26:66:f8:9f:66:d8:7f:38:ea:13:af:a0:05: 76:31:9f:45:5d:46:8b:1f:0c:f8:6b:d3:f5:0a:fa:32:76:c6: 5c:4b:f7:5a:41:d9:18:cf:42:20:b6:f3:d7:46:63:13:a6:3c: cd:c9:fb:3e:90:27:96:b9:ed:28:64:b3:51:af:08:5d:1c:15: b6:b6:3a:40:06:ae:fa:94:05:3c:86:73:61:b7:a6:42:57:6d: b7:ae:e8:b2:4f:d0:35:da:e2:9a:06:d6:0f:b5:dc:b8:69:ed: 1b:89:cc:fd:ed:9c:67:65:db:fc:e0:90:04:8e:89:84:87:e1: 73:56:79:83:78:c4:cd:2c:3d:62:dc:56:36:8a:02:8c:63:5e: 3b:5c:75:80:6d:15:7e:a3:76:90:56:0e:cf:74:26:14:10:18: 87:e9:9a:52:33:69:cd:22:95:5f:1c:db:04:1a:d2:0b:b9:03: 2a:17:3d:7e:7d:3e:06:c2:88:10:05:0d:dc:cd:5f:82:35:24: 8f:7a:05:8c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FaX5m/PkcgMharevd/Z4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzk4YjQ0OWM5ODI1YmZiMWI1ZmU2NDU4YjBmYWM1NTI2MjM4MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKStKIdplTTF8nf7TemwHC9Wfy/8 kpnoZpN1KkUDhurKgamTzJdZBkWuwCtpewA9MvU+xVIqPv3Y0E9d5wyqCC0ahSoC n175ZHnsscYnz17HbfPZlmp/gNTPifQJ1kx74k1tcZvy8wKLzjz36N9wufvsBr5X 34dTFKf5OpggG03vcWA3FznpdeTDYvwjBxUqQX4fRwTYRpnF1Y2zJuowW8Ht55DK q6f+7UR/n80f5ly1CuCYy5j8qDqxHDMSI3xiHXcQvfrn8iY4VGzVifNrl1EyLe+O 8O4NXXdQlPITFNBcBeQGOB5uPoA6iBOfP7nrJigtonF1+KP5YfBiBQLHgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMyYtEnJglv7G1/mRYsPrFUmI4IPMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvekppMFNjbUNXX3NiWC1aRml3LXNWU1lqZ2c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIm8BKA MA0GCSqGSIb3DQEBCwUAA4IBAQCAabUU36/hp+bcpS3+vOiNZVJmmxuF1q5xpFmh 5Hf16S32g+JiFa9+GCMTMFf3CY32RjphzogBaG94HiZm+J9m2H846hOvoAV2MZ9F XUaLHwz4a9P1CvoydsZcS/daQdkYz0IgtvPXRmMTpjzNyfs+kCeWue0oZLNRrwhd HBW2tjpABq76lAU8hnNht6ZCV223ruiyT9A12uKaBtYPtdy4ae0bicz97ZxnZdv8 4JAEjomEh+FzVnmDeMTNLD1i3FY2igKMY147XHWAbRV+o3aQVg7PdCYUEBiH6ZpS M2nNIpVfHNsEGtILuQMqFz1+fT4GwogQBQ3czV+CNSSPegWM -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:16 2026 by rpki-client