This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/ZlIYKpQfZxD4quoX13gwB__TzOI.roa File: ZlIYKpQfZxD4quoX13gwB__TzOI.roa (raw, json) Hash identifier: 0dG2J+i0HlL8c6lGhDbjobp/DZ7RXvZ0x4M8FsHvCc4= Subject key identifier: 66:52:18:2A:94:1F:67:10:F8:AA:EA:17:D7:78:30:07:FF:D3:CC:E2 Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d Certificate serial: 019B775942074B1B268DD7B39D7D95F55DC7 Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/ZlIYKpQfZxD4quoX13gwB__TzOI.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202572 IP address blocks: 2a0a:2303::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:42:07:4b:1b:26:8d:d7:b3:9d:7d:95:f5:5d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6652182a941f6710f8aaea17d7783007ffd3cce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:eb:52:8c:1f:df:1e:e3:3f:ce:87:84:6e: 7e:52:23:06:1d:31:d4:19:04:e5:61:78:df:00:cd: b4:4e:bd:a7:51:d1:73:a7:0c:b0:c0:76:42:a6:1d: 32:1e:18:20:47:08:da:e1:b6:c9:94:2e:e5:5b:9f: 7b:4c:91:1a:d3:d4:cf:6d:5a:2e:40:de:b2:ac:16: 44:69:8f:7b:47:d1:88:76:04:af:7b:34:ec:ae:dc: 59:74:c2:c1:15:78:33:68:21:3d:1b:df:81:0d:97: e4:d0:e4:11:c7:f4:30:a7:48:07:9f:78:bc:96:a6: c0:dc:6b:0e:14:cd:03:1e:47:88:94:3f:39:5e:b1: ac:c9:36:75:b6:8b:76:35:cd:50:67:b9:c9:85:fb: e3:f8:4f:73:fb:03:6d:70:d8:59:6f:cc:02:fe:6e: b0:fd:bf:44:09:53:92:e5:4a:a4:f2:a6:6f:d4:ee: fd:93:23:9e:50:b6:9b:a1:b9:1f:a4:b7:fc:d6:cf: 81:a6:ec:7a:4e:bd:99:4e:ba:63:86:fe:d0:46:8a: a6:4a:73:41:34:17:11:22:db:54:56:cc:8d:9c:5c: d5:0c:d9:87:ce:ae:73:ca:61:10:dc:72:a5:53:62: 8b:79:6c:3a:2b:85:43:d5:e2:b0:70:82:31:a7:d4: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:52:18:2A:94:1F:67:10:F8:AA:EA:17:D7:78:30:07:FF:D3:CC:E2 X509v3 Authority Key Identifier: keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/ZlIYKpQfZxD4quoX13gwB__TzOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2303::/32 Signature Algorithm: sha256WithRSAEncryption 52:32:ec:3e:43:5f:f9:e4:34:28:b2:19:97:ec:df:2b:d8:20: 94:ea:6f:42:f5:ab:b4:4f:10:cf:c6:05:66:2b:b9:23:82:32: fe:82:b7:6b:4b:f7:65:43:fc:d5:1d:50:fe:23:1d:7d:0b:a5: 4b:6c:a0:09:f6:bb:36:7c:b6:60:57:57:90:15:64:7a:0e:b7: 91:71:6f:d9:30:32:10:68:be:bf:e3:d9:34:4a:32:b0:64:cc: c9:d5:05:e9:27:00:51:24:9b:7a:80:17:ec:a0:0e:bb:22:6c: 4d:28:8c:cf:53:d1:95:cc:f2:1b:e8:78:62:0f:c9:29:d2:ca: b7:8a:d8:e4:68:05:0f:99:8f:67:29:fc:1a:5a:13:65:69:38: f1:58:55:ef:04:e7:18:e0:26:0d:c4:10:4b:88:d4:80:ff:44: b9:79:95:7a:16:8a:b1:a7:d3:b4:d3:86:9b:cd:f3:7b:ec:75: 55:28:fe:54:9e:1d:ae:b0:a3:0e:d0:4a:4f:f8:c7:0d:bb:a1: 9e:ec:57:8d:02:5d:4d:1d:1c:96:05:a6:b1:a3:cc:aa:14:20: ce:00:d6:ba:ca:5d:1d:b6:47:36:3d:33:17:83:b8:ac:6f:7a: 97:fe:ec:e6:7e:42:df:98:93:02:13:14:8a:18:3d:93:e5:07: 7a:f9:3e:25 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WUIHSxsmjdeznX2V9V3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTc3YjUyODA0M2E4NTk1M2ZjMjUwZjk5MWQ5ZDgwMjBl MjgxMGQwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjUyMTgyYTk0MWY2NzEwZjhhYWVhMTdkNzc4MzAwN2ZmZDNjY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP3rUowf3x7jP86HhG5+UiMGHTHU GQTlYXjfAM20Tr2nUdFzpwywwHZCph0yHhggRwja4bbJlC7lW597TJEa09TPbVou QN6yrBZEaY97R9GIdgSvezTsrtxZdMLBFXgzaCE9G9+BDZfk0OQRx/Qwp0gHn3i8 lqbA3GsOFM0DHkeIlD85XrGsyTZ1tot2Nc1QZ7nJhfvj+E9z+wNtcNhZb8wC/m6w /b9ECVOS5Uqk8qZv1O79kyOeULabobkfpLf81s+Bpux6Tr2ZTrpjhv7QRoqmSnNB NBcRIttUVsyNnFzVDNmHzq5zymEQ3HKlU2KLeWw6K4VD1eKwcIIxp9SaawIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGZSGCqUH2cQ+KrqF9d4MAf/08ziMB8GA1UdIwQY MBaAFDwXe1KAQ6hZU/wlD5kdnYAg4oENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMt YTQxNTFiNWUyZmNmLzEvWmxJWUtwUWZaeEQ0cXVvWDEzZ3dCX19Uek9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMtYTQxNTFiNWUyZmNm LzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgojAzAN BgkqhkiG9w0BAQsFAAOCAQEAUjLsPkNf+eQ0KLIZl+zfK9gglOpvQvWrtE8Qz8YF Ziu5I4Iy/oK3a0v3ZUP81R1Q/iMdfQulS2ygCfa7Nny2YFdXkBVkeg63kXFv2TAy EGi+v+PZNEoysGTMydUF6ScAUSSbeoAX7KAOuyJsTSiMz1PRlczyG+h4Yg/JKdLK t4rY5GgFD5mPZyn8GloTZWk48VhV7wTnGOAmDcQQS4jUgP9EuXmVehaKsafTtNOG m83ze+x1VSj+VJ4drrCjDtBKT/jHDbuhnuxXjQJdTR0clgWmsaPMqhQgzgDWuspd HbZHNj0zF4O4rG96l/7s5n5C35iTAhMUihg9k+UHevk+JQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:13 2026 by rpki-client