This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZiUr-_dNyno8vYO-s5TDYYKwCVc.roa File: ZiUr-_dNyno8vYO-s5TDYYKwCVc.roa (raw, json) Hash identifier: EzoRsZpwNefKb5hcLNUCpYB2YXFNmrxBtub2rB+YSPM= Subject key identifier: 66:25:2B:FB:F7:4D:CA:7A:3C:BD:83:BE:B3:94:C3:61:82:B0:09:57 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84691AD3F445401D9F564ADDD5C1BC Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZiUr-_dNyno8vYO-s5TDYYKwCVc.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47376 IP address blocks: 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:69:1a:d3:f4:45:40:1d:9f:56:4a:dd:d5:c1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66252bfbf74dca7a3cbd83beb394c36182b00957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:d7:01:8b:77:1c:1f:c5:0f:af:6c:46:09: 99:f6:95:54:ea:22:a2:73:9e:dd:e9:75:6a:25:de: de:21:5b:00:ba:1c:ea:fe:4c:d7:a1:92:62:98:b3: 74:87:ce:84:c7:28:0f:fd:ac:8a:ad:87:32:4c:8d: 7b:88:12:73:79:c3:a3:cc:98:81:ab:f9:14:c9:3f: 47:bc:fc:6b:8c:a9:f7:44:7a:95:ea:c8:ac:9f:c7: a3:5a:d4:4d:ba:c4:6e:be:c1:14:19:ca:a9:cf:15: 4e:21:26:42:d2:f8:31:8d:3b:2d:06:91:58:2a:47: 91:62:76:c0:c5:62:6a:2c:55:2a:20:72:ff:79:1a: c1:b7:f0:54:8a:f2:1a:a1:b1:08:09:0d:8b:34:61: e1:41:a4:ce:23:e6:2a:e7:f6:95:00:96:ac:79:d5: 88:b8:e0:46:48:4c:38:e8:22:68:87:25:95:ca:02: f2:84:6a:d6:ba:e9:7c:e5:39:d0:97:20:27:22:f3: 6c:b5:17:8b:87:6b:5b:d9:ee:4f:ae:5b:5b:59:fc: a2:08:f1:f3:23:e5:32:45:20:dd:68:b0:ff:fd:ab: fe:e8:4c:57:d4:f1:60:df:c7:c0:32:d1:fe:48:07: 13:9c:a9:05:ca:96:06:47:14:01:f4:e7:75:57:c7: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:25:2B:FB:F7:4D:CA:7A:3C:BD:83:BE:B3:94:C3:61:82:B0:09:57 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZiUr-_dNyno8vYO-s5TDYYKwCVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 27:fe:bb:2e:42:75:0f:b7:7c:dd:7b:02:77:34:93:40:bb:d6: c6:c5:72:f2:ba:c5:c0:b5:eb:19:95:16:e1:b8:d9:c9:66:9e: 54:6c:3f:18:6a:49:15:aa:16:84:da:74:06:0c:56:06:89:b2: 5f:13:74:81:04:97:b0:9e:82:2c:aa:17:0b:c4:2d:1f:82:f7: 2e:6c:46:7a:21:2f:bb:17:cf:45:37:84:1b:c5:5d:59:62:74: 6c:9e:af:c6:8e:bd:e7:f2:11:3d:7a:fd:2f:da:a1:ca:8e:3c: 81:90:28:7c:e7:9b:db:58:9b:6b:7b:fe:c3:e1:20:7f:6c:b0: 26:03:c6:1f:23:9d:cf:d8:17:ac:ae:08:2d:b7:99:ca:0e:4b: 3d:56:4d:7c:5b:87:17:15:27:3d:8d:ff:a6:34:ab:a9:9a:75: d5:6e:ff:d1:f9:73:93:95:70:a2:97:3d:a3:18:54:e8:86:b8: 4f:0a:d6:3f:1c:07:ec:af:c9:65:4a:f8:46:ed:e9:e1:04:b1: df:6b:06:b1:b8:b4:38:96:35:06:04:18:bb:7c:4b:37:d7:7f: 87:09:a9:dc:be:60:eb:67:13:a3:83:b9:bb:71:66:ea:7d:0d: 40:6a:90:68:f2:dc:09:fa:e3:3a:1f:e3:5a:5b:c7:47:42:08: a1:e0:95:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hGka0/RFQB2fVkrd1cG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjI1MmJmYmY3NGRjYTdhM2NiZDgzYmViMzk0YzM2MTgyYjAwOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCDXAYt3HB/FD69sRgmZ9pVU6iKi c57d6XVqJd7eIVsAuhzq/kzXoZJimLN0h86ExygP/ayKrYcyTI17iBJzecOjzJiB q/kUyT9HvPxrjKn3RHqV6sisn8ejWtRNusRuvsEUGcqpzxVOISZC0vgxjTstBpFY KkeRYnbAxWJqLFUqIHL/eRrBt/BUivIaobEICQ2LNGHhQaTOI+Yq5/aVAJasedWI uOBGSEw46CJohyWVygLyhGrWuul85TnQlyAnIvNstReLh2tb2e5PrltbWfyiCPHz I+UyRSDdaLD//av+6ExX1PFg38fAMtH+SAcTnKkFypYGRxQB9Od1V8eEbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGYlK/v3Tcp6PL2DvrOUw2GCsAlXMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvWmlVci1fZE55bm84dllPLXM1VERZWUt3Q1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRuQAAB MA0GCSqGSIb3DQEBCwUAA4IBAQAn/rsuQnUPt3zdewJ3NJNAu9bGxXLyusXAtesZ lRbhuNnJZp5UbD8YakkVqhaE2nQGDFYGibJfE3SBBJewnoIsqhcLxC0fgvcubEZ6 IS+7F89FN4QbxV1ZYnRsnq/Gjr3n8hE9ev0v2qHKjjyBkCh855vbWJtre/7D4SB/ bLAmA8YfI53P2Besrggtt5nKDks9Vk18W4cXFSc9jf+mNKupmnXVbv/R+XOTlXCi lz2jGFTohrhPCtY/HAfsr8llSvhG7enhBLHfawaxuLQ4ljUGBBi7fEs313+HCanc vmDrZxOjg7m7cWbqfQ1AapBo8twJ+uM6H+NaW8dHQgih4JWT -----END CERTIFICATE-----Generated at Mon Jan 5 14:34:55 2026 by rpki-client