This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rZaytE56K3d4rA3tI_7hsbjTMVY.roa File: rZaytE56K3d4rA3tI_7hsbjTMVY.roa (raw, json) Hash identifier: m4exh00vKihZWh1/9aaAJ0rkdqDwYsoAReYlJqX+NhY= Subject key identifier: AD:96:B2:B4:4E:7A:2B:77:78:AC:0D:ED:23:FE:E1:B1:B8:D3:31:56 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C9DDBE1DBB878F06AEBD6D5C1C62 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rZaytE56K3d4rA3tI_7hsbjTMVY.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216270 IP address blocks: 2a12:bec0:460::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c9:dd:be:1d:bb:87:8f:06:ae:bd:6d:5c:1c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad96b2b44e7a2b7778ac0ded23fee1b1b8d33156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:ad:e5:3e:1a:48:f5:57:99:14:94:d9:58: b9:b4:5f:79:1d:e7:4e:d5:f6:2c:96:ac:9d:82:2c: 33:60:e4:24:ef:ae:1b:99:36:88:d7:60:6b:09:5e: c0:47:0e:dd:83:26:ac:6a:97:64:ac:0d:4f:70:2c: c0:da:ba:52:a0:8b:07:7a:50:b0:63:62:27:b9:44: d0:71:0f:49:a8:1b:8c:ca:ca:ce:8e:5e:65:1a:78: 01:51:7c:11:5a:da:4f:c1:98:a7:de:db:ae:26:87: 9f:0b:8c:67:e1:20:a9:24:18:7c:8c:43:62:7c:cc: 49:5a:5c:ab:db:fc:db:73:92:8e:35:b6:19:85:67: 47:95:bf:99:d8:d4:f0:73:1b:2c:5e:97:0f:36:4d: a3:f8:ba:86:16:4b:cc:25:2d:3f:a8:6c:be:92:4a: c6:12:42:45:aa:4c:f4:fd:65:39:10:bb:08:12:27: cb:24:c3:35:78:60:6b:eb:32:5b:df:b2:6f:3d:65: da:de:2d:90:67:07:1f:04:3e:2e:7b:3c:ae:55:76: 8f:52:35:1d:0d:77:56:ce:19:6f:4f:f3:ce:60:00: 5b:44:ec:af:dd:18:ba:0a:7c:b0:4e:ca:3b:db:1b: 9e:d0:c1:93:a7:26:cc:98:1b:31:db:58:c9:0b:a5: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:B2:B4:4E:7A:2B:77:78:AC:0D:ED:23:FE:E1:B1:B8:D3:31:56 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/rZaytE56K3d4rA3tI_7hsbjTMVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:460::/44 Signature Algorithm: sha256WithRSAEncryption c2:05:18:1c:a5:46:30:27:d9:75:de:e8:39:73:e0:f4:55:5d: 6c:6f:7c:73:49:ab:7a:f2:20:68:5f:17:c3:c5:d1:24:f0:b2: 2f:97:d5:90:04:f3:fc:fe:bf:ec:65:04:d5:f2:42:b2:b5:02: 15:fe:9f:88:15:23:e3:b6:e9:2d:d5:06:b4:f3:d2:b5:71:d2: 0c:dd:37:fa:6e:9f:c3:05:ab:ae:64:a6:94:be:cc:d5:b8:47: c9:46:0c:77:6c:d8:0c:4c:c4:ca:c6:4a:df:1a:81:96:59:d3: 2f:e0:c3:ec:a0:52:a5:1e:c2:d4:47:f2:3d:31:9c:e6:7d:0d: d6:5c:d8:58:03:c2:4b:6a:1f:ea:ff:a4:d1:62:c3:f8:f4:f3: 26:31:15:b2:69:6a:d6:64:e7:c8:08:2a:79:28:b5:77:ee:76: b9:ca:5f:75:ad:84:e0:8f:eb:1b:b2:fd:59:0b:47:ef:66:d1: ff:63:8e:78:17:2b:e3:8d:2b:18:98:e0:01:4d:44:8b:02:10: 4c:93:ed:4d:9f:ec:2a:c6:f8:2b:7a:b5:01:15:54:73:67:e5: 7e:ea:e2:ec:16:d8:99:0e:94:ea:d7:09:52:19:e8:b4:d9:9c: 1c:ba:9c:3a:ea:47:f7:14:7b:17:94:0e:5d:6b:fb:47:4e:d2: 61:ce:8c:65 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMndvh27h48Grr1tXBxiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDk2YjJiNDRlN2EyYjc3NzhhYzBkZWQyM2ZlZTFiMWI4ZDMzMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rmt5T4aSPVXmRSU2Vi5tF95HedO 1fYslqydgiwzYOQk764bmTaI12BrCV7ARw7dgyasapdkrA1PcCzA2rpSoIsHelCw Y2InuUTQcQ9JqBuMysrOjl5lGngBUXwRWtpPwZin3tuuJoefC4xn4SCpJBh8jENi fMxJWlyr2/zbc5KONbYZhWdHlb+Z2NTwcxssXpcPNk2j+LqGFkvMJS0/qGy+kkrG EkJFqkz0/WU5ELsIEifLJMM1eGBr6zJb37JvPWXa3i2QZwcfBD4uezyuVXaPUjUd DXdWzhlvT/POYABbROyv3Ri6CnywTso72xue0MGTpybMmBsx21jJC6UMgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK2WsrROeit3eKwN7SP+4bG40zFWMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvclpheXRFNTZLM2Q0ckEzdElfN2hzYmpUTVZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wARg MA0GCSqGSIb3DQEBCwUAA4IBAQDCBRgcpUYwJ9l13ug5c+D0VV1sb3xzSat68iBo XxfDxdEk8LIvl9WQBPP8/r/sZQTV8kKytQIV/p+IFSPjtukt1Qa089K1cdIM3Tf6 bp/DBauuZKaUvszVuEfJRgx3bNgMTMTKxkrfGoGWWdMv4MPsoFKlHsLUR/I9MZzm fQ3WXNhYA8JLah/q/6TRYsP49PMmMRWyaWrWZOfICCp5KLV37na5yl91rYTgj+sb sv1ZC0fvZtH/Y454FyvjjSsYmOABTUSLAhBMk+1Nn+wqxvgrerUBFVRzZ+V+6uLs FtiZDpTq1wlSGei02Zwcupw66kf3FHsXlA5da/tHTtJhzoxl -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:09 2026 by rpki-client