This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zgW0-dy5DOlaa3kv-iNbfrg6MTE.roa File: zgW0-dy5DOlaa3kv-iNbfrg6MTE.roa (raw, json) Hash identifier: R2WYgqb58pabK21K2hRJQG+xovTxAbBM+XW8b3et+VA= Subject key identifier: CE:05:B4:F9:DC:B9:0C:E9:5A:6B:79:2F:FA:23:5B:7E:B8:3A:31:31 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB55C0CAD03EDB4756E69658F49AB Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zgW0-dy5DOlaa3kv-iNbfrg6MTE.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211158 IP address blocks: 2a0e:aa07:e021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b5:5c:0c:ad:03:ed:b4:75:6e:69:65:8f:49:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce05b4f9dcb90ce95a6b792ffa235b7eb83a3131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:e7:93:30:1b:2e:75:a3:1f:12:53:6e:29: 07:48:4c:29:c6:fd:7c:61:0c:e3:72:d1:ce:fd:7b: 0a:4d:5c:0f:ec:57:56:9d:6b:79:77:50:ca:6a:2d: 0e:a0:55:5a:41:15:26:94:65:07:3a:8e:79:ba:8f: ee:55:14:78:61:64:1b:6d:4e:cc:74:e2:d7:88:6d: 48:8b:d2:4c:bc:26:35:61:7d:c2:8d:83:e8:ac:93: 99:e8:62:ff:1c:34:f1:d3:39:8b:f0:2b:95:5d:99: b9:e4:38:4a:76:72:91:ae:08:c9:2e:50:a9:c9:a2: 90:c9:dd:7b:5c:3e:80:12:db:e4:da:8b:21:ac:9d: 58:db:c2:00:39:2e:30:86:f4:4c:3e:01:60:95:da: eb:d9:7c:f3:67:ee:14:16:c9:4a:9d:2f:0d:d2:62: 39:dc:26:97:cd:cc:bb:f7:08:69:6d:6a:52:18:5b: 52:26:0e:3e:08:af:b4:40:0d:45:a3:b3:4c:98:82: 86:be:2f:58:49:8f:3e:cc:89:d0:2b:e2:78:d2:77: ae:c3:4b:e3:38:11:c9:73:65:b4:04:69:59:fb:8c: 61:d0:5e:8a:25:5f:b9:b7:a7:54:e0:8b:d7:f9:52: 9f:00:7e:3a:94:83:3e:b5:7b:c8:2e:ee:59:e1:af: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:05:B4:F9:DC:B9:0C:E9:5A:6B:79:2F:FA:23:5B:7E:B8:3A:31:31 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zgW0-dy5DOlaa3kv-iNbfrg6MTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e021::/48 Signature Algorithm: sha256WithRSAEncryption a8:cc:59:44:4c:37:88:1f:f2:be:4f:f5:9e:19:99:3e:62:00: 75:b4:91:9d:78:fc:78:17:fa:7c:28:43:ff:f9:5f:58:1a:e0: c2:0a:b0:3e:e5:e8:e7:c9:c1:a0:d8:b5:60:dd:52:e8:74:e1: 37:46:52:fd:5a:32:84:c3:4e:77:dd:5b:a2:71:1d:b8:12:20: 80:6d:f7:09:a2:a0:07:85:9e:06:ea:fc:b1:ff:8d:51:c2:db: a3:ef:1c:8c:70:67:fb:b9:2f:d8:ad:c5:da:96:96:51:7b:e9: 61:74:d2:82:94:d3:00:3d:76:9c:48:c1:9f:2b:87:9b:68:13: cb:02:75:fe:f5:84:0c:ab:92:bd:79:99:25:7b:67:4d:4f:78: 19:67:c1:b5:9b:bb:be:b6:c7:bc:41:19:a8:b1:26:b5:9e:d3: ab:b7:d8:76:e7:23:b4:cf:0a:18:15:2f:9b:f1:df:87:c3:7c: e2:87:06:58:23:a7:09:53:5e:d0:5a:f6:92:e0:a9:a7:aa:7d: 8c:fc:20:76:05:82:3d:44:79:db:ec:63:90:ec:7a:d7:98:74: c1:66:ae:d2:e6:de:c3:6d:0a:da:97:50:aa:cb:5f:4a:f3:be: c8:c0:bf:1e:25:0f:6a:76:84:98:62:8e:4a:64:0f:6e:ac:91: bf:99:f6:95 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frVcDK0D7bR1bmllj0mrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTA1YjRmOWRjYjkwY2U5NWE2Yjc5MmZmYTIzNWI3ZWI4M2EzMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB3nkzAbLnWjHxJTbikHSEwpxv18 YQzjctHO/XsKTVwP7FdWnWt5d1DKai0OoFVaQRUmlGUHOo55uo/uVRR4YWQbbU7M dOLXiG1Ii9JMvCY1YX3CjYPorJOZ6GL/HDTx0zmL8CuVXZm55DhKdnKRrgjJLlCp yaKQyd17XD6AEtvk2oshrJ1Y28IAOS4whvRMPgFgldrr2XzzZ+4UFslKnS8N0mI5 3CaXzcy79whpbWpSGFtSJg4+CK+0QA1Fo7NMmIKGvi9YSY8+zInQK+J40neuw0vj OBHJc2W0BGlZ+4xh0F6KJV+5t6dU4IvX+VKfAH46lIM+tXvILu5Z4a8MywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM4FtPncuQzpWmt5L/ojW364OjExMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvemdXMC1keTVET2xhYTNrdi1pTmJmcmc2TVRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ah MA0GCSqGSIb3DQEBCwUAA4IBAQCozFlETDeIH/K+T/WeGZk+YgB1tJGdePx4F/p8 KEP/+V9YGuDCCrA+5ejnycGg2LVg3VLodOE3RlL9WjKEw0533VuicR24EiCAbfcJ oqAHhZ4G6vyx/41Rwtuj7xyMcGf7uS/YrcXalpZRe+lhdNKClNMAPXacSMGfK4eb aBPLAnX+9YQMq5K9eZkle2dNT3gZZ8G1m7u+tse8QRmosSa1ntOrt9h25yO0zwoY FS+b8d+Hw3zihwZYI6cJU17QWvaS4Kmnqn2M/CB2BYI9RHnb7GOQ7HrXmHTBZq7S 5t7DbQral1Cqy19K877IwL8eJQ9qdoSYYo5KZA9urJG/mfaV -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:04 2026 by rpki-client