This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zSsCVsSWs_mJS7TvYA56C2UWilE.roa File: zSsCVsSWs_mJS7TvYA56C2UWilE.roa (raw, json) Hash identifier: 3Sov59NonLp4sCLH8RQnbqv8UJveSNIT8XM1E9Pzrb4= Subject key identifier: CD:2B:02:56:C4:96:B3:F9:89:4B:B4:EF:60:0E:7A:0B:65:16:8A:51 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019BE07A4F5B0B99124D2440F3CC8BB356DF Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zSsCVsSWs_mJS7TvYA56C2UWilE.roa Signing time: Wed 21 Jan 2026 12:14:30 +0000 ROA not before: Wed 21 Jan 2026 12:14:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199436 IP address blocks: 2a14:c380:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:7a:4f:5b:0b:99:12:4d:24:40:f3:cc:8b:b3:56:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 21 12:14:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd2b0256c496b3f9894bb4ef600e7a0b65168a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:d9:26:d9:49:76:0b:b7:6b:d0:8e:13:6e: e8:01:a0:de:e7:44:10:e8:c0:b6:ef:86:cc:d2:6e: 78:eb:d9:90:54:a1:59:f8:b3:19:42:70:d4:de:80: fe:42:f4:b6:1b:4e:ad:9b:0f:37:29:a1:48:be:63: 7f:fc:50:25:72:7a:97:88:f3:2a:3b:45:da:88:06: 8f:43:71:fc:e1:a9:28:b6:f1:8d:20:b0:ba:c1:e6: 42:95:30:19:13:59:29:49:e2:73:ca:e8:24:d8:87: de:71:f1:cb:b6:be:34:4c:c1:be:c1:93:9d:19:20: 2c:3d:e2:c8:eb:49:f0:d4:ee:66:54:12:a3:7e:7f: ed:b7:3c:ad:50:af:10:72:9a:c6:ef:f0:b3:86:38: 3d:44:a5:e7:6a:4b:99:ea:e3:2c:0b:17:d5:73:18: aa:12:76:b1:ba:f3:49:c5:89:e2:ee:2f:cd:b7:ca: c9:45:1a:36:11:66:e5:18:49:50:f8:ca:bb:e3:2b: 16:b1:c5:e8:10:eb:ec:3a:07:c0:88:20:9c:00:09: 6d:f5:09:5c:1a:ca:b2:8e:2b:e6:b8:14:7a:d2:7f: 30:62:2d:a0:dc:18:74:4f:12:6d:cb:8f:d3:96:35: f2:fe:c1:ac:bc:33:d9:32:54:73:f2:42:19:4a:95: f4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:02:56:C4:96:B3:F9:89:4B:B4:EF:60:0E:7A:0B:65:16:8A:51 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zSsCVsSWs_mJS7TvYA56C2UWilE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:22::/48 Signature Algorithm: sha256WithRSAEncryption 26:34:fa:8a:ab:f0:f7:08:85:49:36:ef:33:39:f9:d9:ed:41: 97:3d:58:cf:69:fb:0b:e6:c8:ab:d8:67:a7:cf:6b:39:1a:63: a6:d7:39:ad:5a:a3:fd:07:02:b9:78:1b:f7:94:b7:7b:7c:62: 9c:47:51:11:e8:9d:60:03:1d:50:2a:a5:c6:19:33:7a:3a:64: b4:e7:67:b1:ad:86:f9:dc:f1:be:bb:93:89:c2:13:fa:9f:db: 82:ea:6f:4f:94:95:23:ce:b8:fe:69:47:2b:8c:4d:8c:a6:4d: 42:b9:50:55:8b:22:96:fa:3a:de:09:e6:1b:2c:c3:ab:fd:2f: 49:b1:12:71:09:fc:58:f9:d3:77:48:5e:a3:63:21:67:cb:77: 91:a2:c1:ed:82:18:d6:06:af:2b:74:f1:ca:f5:b1:04:cc:53: 2d:5a:2f:c3:83:18:55:fb:e1:68:a7:46:72:5e:81:3c:42:95: cb:66:92:2f:45:2d:ef:66:f6:cb:22:dc:23:63:c9:85:65:ee: 98:8f:32:6e:6d:07:31:b7:0b:39:08:d2:de:75:77:43:96:41: aa:3c:c5:4b:17:8c:cf:10:bf:ec:7f:31:2a:15:71:c9:18:d3: ca:24:07:31:2d:65:59:8a:ad:47:3a:87:4f:05:6d:cc:e1:2c: 64:87:ec:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvgek9bC5kSTSRA88yLs1bfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTIxMTIxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDJiMDI1NmM0OTZiM2Y5ODk0YmI0ZWY2MDBlN2EwYjY1MTY4YTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQPZJtlJdgu3a9COE27oAaDe50QQ 6MC274bM0m5469mQVKFZ+LMZQnDU3oD+QvS2G06tmw83KaFIvmN//FAlcnqXiPMq O0XaiAaPQ3H84akotvGNILC6weZClTAZE1kpSeJzyugk2IfecfHLtr40TMG+wZOd GSAsPeLI60nw1O5mVBKjfn/ttzytUK8QcprG7/Czhjg9RKXnakuZ6uMsCxfVcxiq EnaxuvNJxYni7i/Nt8rJRRo2EWblGElQ+Mq74ysWscXoEOvsOgfAiCCcAAlt9Qlc GsqyjivmuBR60n8wYi2g3Bh0TxJty4/TljXy/sGsvDPZMlRz8kIZSpX0+wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM0rAlbElrP5iUu072AOegtlFopRMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvelNzQ1ZzU1dzX21KUzdUdllBNTZDMlVXaWxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAi MA0GCSqGSIb3DQEBCwUAA4IBAQAmNPqKq/D3CIVJNu8zOfnZ7UGXPVjPafsL5sir 2Genz2s5GmOm1zmtWqP9BwK5eBv3lLd7fGKcR1ER6J1gAx1QKqXGGTN6OmS052ex rYb53PG+u5OJwhP6n9uC6m9PlJUjzrj+aUcrjE2Mpk1CuVBViyKW+jreCeYbLMOr /S9JsRJxCfxY+dN3SF6jYyFny3eRosHtghjWBq8rdPHK9bEEzFMtWi/DgxhV++Fo p0ZyXoE8QpXLZpIvRS3vZvbLItwjY8mFZe6YjzJubQcxtws5CNLedXdDlkGqPMVL F4zPEL/sfzEqFXHJGNPKJAcxLWVZiq1HOodPBW3M4Sxkh+x9 -----END CERTIFICATE-----Generated at Thu Jan 22 09:26:21 2026 by rpki-client