This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ZDNCLbvT5ovQBk73p_wDLG9Op-o.roa File: ZDNCLbvT5ovQBk73p_wDLG9Op-o.roa (raw, json) Hash identifier: a/bG0B7whkZ5x8uJgmhOY7D2WbwNCDajLwTNjdXJv6I= Subject key identifier: 64:33:42:2D:BB:D3:E6:8B:D0:06:4E:F7:A7:FC:03:2C:6F:4E:A7:EA Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910BC694645372BB477976DC47256A3 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ZDNCLbvT5ovQBk73p_wDLG9Op-o.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215437 IP address blocks: 2a12:bec4:1b60::/48 maxlen: 48 2a12:bec4:1b61::/48 maxlen: 48 2a12:bec4:1b62::/48 maxlen: 48 2a12:bec4:1b63::/48 maxlen: 48 2a12:bec4:1b64::/48 maxlen: 48 2a12:bec4:1b65::/48 maxlen: 48 2a12:bec4:1b66::/48 maxlen: 48 2a12:bec4:1b67::/48 maxlen: 48 2a12:bec4:1b68::/48 maxlen: 48 2a12:bec4:1b69::/48 maxlen: 48 2a12:bec4:1b6a::/48 maxlen: 48 2a12:bec4:1b6b::/48 maxlen: 48 2a12:bec4:1b6c::/48 maxlen: 48 2a12:bec4:1b6d::/48 maxlen: 48 2a12:bec4:1b6e::/48 maxlen: 48 2a12:bec4:1b6f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bc:69:46:45:37:2b:b4:77:97:6d:c4:72:56:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6433422dbbd3e68bd0064ef7a7fc032c6f4ea7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:a6:c3:29:9e:d2:04:c6:f5:f7:b8:d8:ee: 34:18:35:47:76:7e:07:2e:f3:08:7a:f7:08:dd:ae: 50:93:a8:34:d4:a4:7f:7a:a3:9c:2a:d1:25:22:04: 56:56:89:9f:77:74:76:f9:3f:58:b6:15:4e:dc:f6: d3:7e:cc:75:30:04:b8:ab:2a:e4:43:a0:66:ef:e6: c8:24:5f:ce:f3:99:87:c7:32:8e:22:61:7c:c8:48: b9:23:db:ee:58:33:63:93:5d:9d:d5:f3:27:ba:43: 8a:59:77:46:1c:d4:38:1d:7a:e4:b1:26:3e:fd:04: 03:9b:b5:dd:bc:c4:8d:d2:e4:df:5b:6a:57:c2:e7: 26:f7:c1:19:f7:83:02:87:8e:a3:9d:a0:8d:4c:5c: 20:0f:ad:dd:76:17:d5:bf:86:6b:dc:0c:9e:f3:ae: d9:12:23:c0:a3:d2:73:a3:1c:15:2b:01:1c:26:c7: 87:e3:76:21:f2:09:df:94:e9:01:5d:7c:41:fc:d8: 17:b3:28:49:2e:79:db:12:da:c5:f9:6c:19:ba:b4: 44:44:a1:91:56:47:79:0c:98:6a:30:8a:a4:a4:b0: 65:8e:b6:ff:44:90:37:ce:cb:49:97:53:61:ec:72: 9c:97:04:a6:80:4a:b5:b6:e5:93:36:a7:d2:1a:f2: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:42:2D:BB:D3:E6:8B:D0:06:4E:F7:A7:FC:03:2C:6F:4E:A7:EA X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ZDNCLbvT5ovQBk73p_wDLG9Op-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1b60::/44 Signature Algorithm: sha256WithRSAEncryption 95:1b:e9:76:94:35:cc:90:6b:b5:99:73:6f:27:f5:cf:b9:5b: c2:c6:5b:c9:8b:c9:e9:37:35:a8:4f:3f:64:c1:7c:58:24:ac: f3:cc:a5:b1:c3:2c:6c:4b:d0:16:0d:d8:da:f6:d1:f4:6f:67: 3b:3b:d9:6f:0d:26:18:78:e7:f5:b1:47:27:7e:b5:70:d4:9e: 4d:d2:73:01:ca:c5:4c:ef:45:73:95:9f:0a:db:f4:fa:13:7a: ae:d9:2c:9c:96:82:d7:c5:92:21:ef:cb:d2:4e:74:a0:82:c6: 7c:cf:f5:15:c9:c7:13:84:5a:c1:28:8c:ac:73:fc:0b:69:39: 33:00:33:a0:15:a4:ac:96:bf:43:76:3f:7d:cf:58:ac:9d:86: c1:7e:cd:3c:e4:95:43:09:8c:56:d0:2a:db:48:e6:6a:16:20: 8e:9f:f1:de:c3:cf:35:39:1f:d2:17:dd:0e:46:4d:04:e5:fe: 72:f8:54:82:11:10:22:1d:f0:51:f3:b2:86:e5:30:98:03:9d: 10:1b:69:5d:70:01:fd:94:0f:d0:a1:cb:30:08:a0:c6:79:72: a4:35:25:64:f4:2a:4c:39:ec:e7:e6:8e:85:78:5d:ac:4e:4d: fc:ef:23:23:f8:35:69:b2:40:47:00:7d:6c:e8:49:37:8b:3c: 87:d9:20:56 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELxpRkU3K7R3l23EclajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDMzNDIyZGJiZDNlNjhiZDAwNjRlZjdhN2ZjMDMyYzZmNGVhN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT+mwyme0gTG9fe42O40GDVHdn4H LvMIevcI3a5Qk6g01KR/eqOcKtElIgRWVomfd3R2+T9YthVO3PbTfsx1MAS4qyrk Q6Bm7+bIJF/O85mHxzKOImF8yEi5I9vuWDNjk12d1fMnukOKWXdGHNQ4HXrksSY+ /QQDm7XdvMSN0uTfW2pXwucm98EZ94MCh46jnaCNTFwgD63ddhfVv4Zr3Aye867Z EiPAo9JzoxwVKwEcJseH43Yh8gnflOkBXXxB/NgXsyhJLnnbEtrF+WwZurRERKGR Vkd5DJhqMIqkpLBljrb/RJA3zstJl1Nh7HKclwSmgEq1tuWTNqfSGvKvHQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGQzQi270+aL0AZO96f8AyxvTqfqMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvWkROQ0xidlQ1b3ZRQms3M3Bfd0RMRzlPcC1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBtg MA0GCSqGSIb3DQEBCwUAA4IBAQCVG+l2lDXMkGu1mXNvJ/XPuVvCxlvJi8npNzWo Tz9kwXxYJKzzzKWxwyxsS9AWDdja9tH0b2c7O9lvDSYYeOf1sUcnfrVw1J5N0nMB ysVM70VzlZ8K2/T6E3qu2SycloLXxZIh78vSTnSggsZ8z/UVyccThFrBKIysc/wL aTkzADOgFaSslr9Ddj99z1isnYbBfs085JVDCYxW0CrbSOZqFiCOn/Hew881OR/S F90ORk0E5f5y+FSCERAiHfBR87KG5TCYA50QG2ldcAH9lA/QocswCKDGeXKkNSVk 9CpMOezn5o6FeF2sTk387yMj+DVpskBHAH1s6Ek3izyH2SBW -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:21 2026 by rpki-client