This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/rz6-rsbx5qAXWZK1lflQBq85gpA.roa File: rz6-rsbx5qAXWZK1lflQBq85gpA.roa (raw, json) Hash identifier: xKQhmoOta01iFvpGrvDgJZEcGx54Mj2U+SALSwttG3k= Subject key identifier: AF:3E:BE:AE:C6:F1:E6:A0:17:59:92:B5:95:F9:50:06:AF:39:82:90 Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019B77591772CE8802E08E89FAEB867E7334 Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/rz6-rsbx5qAXWZK1lflQBq85gpA.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3223 IP address blocks: 2a03:efc0:6200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:17:72:ce:88:02:e0:8e:89:fa:eb:86:7e:73:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af3ebeaec6f1e6a0175992b595f95006af398290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:df:22:5b:6a:0c:2a:3b:56:d2:1a:64:0f: b8:49:90:32:9d:fd:a5:35:5b:29:59:a3:26:2b:83: b6:d8:51:09:f8:0e:2b:6b:34:8c:39:05:02:fc:51: 0e:80:d2:99:ca:e5:c7:90:39:f8:5a:0e:cf:3b:03: 9b:3a:01:1a:8c:57:33:7a:49:43:bb:e8:ce:8e:45: 28:33:2e:4e:bb:22:25:e3:ed:b8:2a:e6:70:fd:ea: 48:d9:47:57:56:47:0a:ad:35:a0:3f:9b:d2:42:fd: 03:00:15:03:b1:a3:be:67:0c:8f:d0:13:e7:c7:34: a1:48:5a:38:f7:67:8e:7f:90:aa:b7:2d:69:16:aa: a3:96:ee:6f:15:d0:9a:fd:09:e4:2b:fc:86:59:61: ca:92:b1:8d:57:f9:42:40:be:f7:45:70:c0:f6:58: 39:37:2e:be:ed:48:72:d6:90:74:08:35:f4:a6:98: 4b:b4:d6:2b:f3:e9:00:68:08:d7:00:2b:9b:57:83: be:52:ef:07:fb:7b:ef:38:b0:ec:10:19:86:46:ea: 9a:05:b1:16:5d:f3:69:b4:79:ef:55:a2:7f:79:2a: 89:06:75:58:3a:fb:6f:19:ef:82:bb:7c:5c:b2:a2: 8c:d8:5c:38:68:cd:98:ce:e4:7d:f8:9d:59:b7:f4: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3E:BE:AE:C6:F1:E6:A0:17:59:92:B5:95:F9:50:06:AF:39:82:90 X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/rz6-rsbx5qAXWZK1lflQBq85gpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:efc0:6200::/40 Signature Algorithm: sha256WithRSAEncryption 16:4c:e2:22:67:27:0f:e5:67:ba:49:02:2f:b9:13:9d:fa:04: 97:bd:d2:95:08:c8:6d:50:de:e2:e1:0f:81:d3:01:2c:70:c3: 84:fb:a3:b2:ae:c3:1a:73:2e:3b:98:79:ce:17:fb:c5:f6:da: ee:d6:ad:b7:52:93:1f:f8:40:fa:72:6f:bd:1d:b4:d3:e0:01: 74:b7:2d:29:fe:2a:c8:36:c9:c8:20:d1:18:8e:55:88:38:31: 8e:64:e8:60:dd:a5:ca:5e:99:43:03:28:15:6c:53:7e:3b:46: c9:ad:8b:cf:62:3d:a5:bd:a1:b4:c1:b6:f3:40:1e:05:f7:9b: 3e:b1:3e:4e:64:b5:e4:fd:c2:87:f3:42:74:34:0f:af:91:c4: 96:5c:1d:3c:8f:50:f1:0b:f3:d1:9d:97:bc:89:8c:28:fa:a8: 27:a9:b6:83:11:4b:07:86:35:57:7d:7f:c0:40:61:b6:06:4c: 19:85:ca:1c:58:15:cd:a7:85:cb:41:61:f3:4c:45:f0:d7:f7: 2d:58:8b:ff:12:e8:7a:5e:8d:09:95:14:95:13:d4:0c:53:d1: a2:ef:a0:d7:31:ea:22:cb:82:c1:f4:ab:d0:c8:5b:64:db:0b: 63:cb:7d:79:36:bf:bd:83:ee:22:6b:80:f2:1b:c1:78:ca:24: 28:4c:5f:9a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WRdyzogC4I6J+uuGfnM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjNlYmVhZWM2ZjFlNmEwMTc1OTkyYjU5NWY5NTAwNmFmMzk4MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpLfIltqDCo7VtIaZA+4SZAynf2l NVspWaMmK4O22FEJ+A4razSMOQUC/FEOgNKZyuXHkDn4Wg7POwObOgEajFczeklD u+jOjkUoMy5OuyIl4+24KuZw/epI2UdXVkcKrTWgP5vSQv0DABUDsaO+ZwyP0BPn xzShSFo492eOf5Cqty1pFqqjlu5vFdCa/QnkK/yGWWHKkrGNV/lCQL73RXDA9lg5 Ny6+7Uhy1pB0CDX0pphLtNYr8+kAaAjXACubV4O+Uu8H+3vvOLDsEBmGRuqaBbEW XfNptHnvVaJ/eSqJBnVYOvtvGe+Cu3xcsqKM2Fw4aM2YzuR9+J1Zt/TR2wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFK8+vq7G8eagF1mStZX5UAavOYKQMB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvcno2LXJzYng1cUFYV1pLMWxmbFFCcTg1Z3BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgPvwGIw DQYJKoZIhvcNAQELBQADggEBABZM4iJnJw/lZ7pJAi+5E536BJe90pUIyG1Q3uLh D4HTASxww4T7o7KuwxpzLjuYec4X+8X22u7WrbdSkx/4QPpyb70dtNPgAXS3LSn+ Ksg2ycgg0RiOVYg4MY5k6GDdpcpemUMDKBVsU347Rsmti89iPaW9obTBtvNAHgX3 mz6xPk5kteT9wofzQnQ0D6+RxJZcHTyPUPEL89Gdl7yJjCj6qCeptoMRSweGNVd9 f8BAYbYGTBmFyhxYFc2nhctBYfNMRfDX9y1Yi/8S6HpejQmVFJUT1AxT0aLvoNcx 6iLLgsH0q9DIW2TbC2PLfXk2v72D7iJrgPIbwXjKJChMX5o= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:01 2026 by rpki-client