This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zRnaQGYQQqEmQkJ_O83unzjloHI.roa File: zRnaQGYQQqEmQkJ_O83unzjloHI.roa (raw, json) Hash identifier: yia0LUKs2wd1ct/QXCBpV1q/H2zW5DSerwpllpKRoD4= Subject key identifier: CD:19:DA:40:66:10:42:A1:26:42:42:7F:3B:CD:EE:9F:38:E5:A0:72 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75F22D682FDACBF158D1B8993EF06 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zRnaQGYQQqEmQkJ_O83unzjloHI.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209859 IP address blocks: 2a06:e881:5300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5f:22:d6:82:fd:ac:bf:15:8d:1b:89:93:ef:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd19da40661042a12642427f3bcdee9f38e5a072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:b1:85:5b:3d:b3:ab:ef:7f:6a:fa:15:65: 22:36:d2:56:3d:a3:7b:1a:c1:f9:6a:9c:3c:bf:ce: 70:6e:19:96:8d:51:a4:76:2a:d3:21:7e:f8:c4:84: 59:aa:1f:80:ef:37:52:1f:c0:04:f7:19:0b:c5:58: 21:c1:d8:8f:e9:7e:43:7f:38:9c:23:9d:8f:17:c8: a6:75:7f:29:5f:49:e9:68:d6:a7:65:28:5e:1d:ea: 7a:a5:17:bc:62:14:52:ac:8a:b8:22:e7:5a:34:10: b7:fa:92:07:5d:fb:6d:78:40:98:c1:f5:67:5b:80: c4:c6:6c:39:75:52:06:df:fb:14:e8:7c:66:26:61: 09:b5:00:1b:95:06:f1:25:34:68:d4:3c:c6:2d:cd: b2:b3:6e:45:65:ae:5a:22:4f:94:c6:74:ad:ae:78: 54:e4:b8:cc:8e:a8:68:07:d6:ca:f3:2a:f5:33:09: 3d:2b:89:a4:68:6e:b0:b7:2d:27:97:60:cc:58:98: 08:80:2b:5b:ac:92:ce:67:11:68:ff:27:1f:7e:d7: 6d:77:6a:19:41:64:31:73:ee:69:b7:a2:ad:ca:4b: 8d:6a:a1:39:53:b0:1b:db:55:82:84:f5:0d:38:8b: a9:94:cb:a5:6e:6d:40:e6:0f:27:3b:33:17:27:dc: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:19:DA:40:66:10:42:A1:26:42:42:7F:3B:CD:EE:9F:38:E5:A0:72 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zRnaQGYQQqEmQkJ_O83unzjloHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:5300::/40 Signature Algorithm: sha256WithRSAEncryption 80:90:4b:ee:cd:f8:a3:b9:aa:38:fe:ab:c3:2c:28:c8:73:51: de:06:aa:b3:39:ed:74:b7:8d:59:d3:db:27:35:d0:53:6a:59: 20:18:ef:2e:04:c0:12:3c:54:ff:f4:23:ae:04:22:0a:bd:f2: c1:d4:69:a8:a6:53:55:4d:64:ed:a3:46:dd:8b:26:63:8f:ba: d2:dc:5e:d3:ca:cd:a7:89:16:33:23:9d:4e:3d:2a:d9:c0:17: 05:b8:d4:2e:75:10:0f:01:d4:7a:ae:0d:be:3d:cd:61:5a:10: 2c:ba:64:90:b2:b7:69:8e:6e:82:c9:6d:94:d0:58:90:e3:3f: 67:50:ea:44:d2:89:f4:b1:4a:c0:7e:ee:19:92:cc:56:9c:26: fc:50:70:e3:aa:ca:6d:8c:10:ec:5e:fe:00:6e:66:20:a7:d2: 39:de:13:9d:e4:5c:5f:27:ff:1c:f3:7f:51:99:7e:11:ed:b0: a7:c4:50:53:f8:3c:5f:1a:3b:00:d1:ce:92:ac:3f:a8:47:d0: 9b:92:9b:68:de:5f:d7:46:29:16:9a:ae:40:10:8f:09:0d:5d: 9a:f9:bd:ad:b2:8b:d1:82:35:fc:26:4b:2a:24:6e:4f:e8:8c: 03:82:99:f2:bf:3f:83:53:e6:af:72:3a:72:db:1e:96:8a:f2: ac:0a:c5:3a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+p18i1oL9rL8VjRuJk+8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDE5ZGE0MDY2MTA0MmExMjY0MjQyN2YzYmNkZWU5ZjM4ZTVhMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy66xhVs9s6vvf2r6FWUiNtJWPaN7 GsH5apw8v85wbhmWjVGkdirTIX74xIRZqh+A7zdSH8AE9xkLxVghwdiP6X5Dfzic I52PF8imdX8pX0npaNanZSheHep6pRe8YhRSrIq4IudaNBC3+pIHXftteECYwfVn W4DExmw5dVIG3/sU6HxmJmEJtQAblQbxJTRo1DzGLc2ys25FZa5aIk+UxnStrnhU 5LjMjqhoB9bK8yr1Mwk9K4mkaG6wty0nl2DMWJgIgCtbrJLOZxFo/ycfftdtd2oZ QWQxc+5pt6KtykuNaqE5U7Ab21WChPUNOIuplMulbm1A5g8nOzMXJ9wBkQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFM0Z2kBmEEKhJkJCfzvN7p845aByMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvelJuYVFHWVFRcUVtUWtKX084M3Vuempsb0hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgbogVMw DQYJKoZIhvcNAQELBQADggEBAICQS+7N+KO5qjj+q8MsKMhzUd4GqrM57XS3jVnT 2yc10FNqWSAY7y4EwBI8VP/0I64EIgq98sHUaaimU1VNZO2jRt2LJmOPutLcXtPK zaeJFjMjnU49KtnAFwW41C51EA8B1HquDb49zWFaECy6ZJCyt2mOboLJbZTQWJDj P2dQ6kTSifSxSsB+7hmSzFacJvxQcOOqym2MEOxe/gBuZiCn0jneE53kXF8n/xzz f1GZfhHtsKfEUFP4PF8aOwDRzpKsP6hH0JuSm2jeX9dGKRaarkAQjwkNXZr5va2y i9GCNfwmSyokbk/ojAOCmfK/P4NT5q9yOnLbHpaK8qwKxTo= -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:48 2026 by rpki-client