This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/vzTZG6KcTCGvguI6vP7NCQpIgns.roa File: vzTZG6KcTCGvguI6vP7NCQpIgns.roa (raw, json) Hash identifier: 8vQqcNU2oeMC1ANdua1p4cUDGc4JZPZNAM8Zf8hXTm8= Subject key identifier: BF:34:D9:1B:A2:9C:4C:21:AF:82:E2:3A:BC:FE:CD:09:0A:48:82:7B Certificate issuer: /CN=1024e66d7cba77b977685559c2481bb9044c5b75 Certificate serial: 019B7B35E4A17606FC33A6BB5C5FECCAC6F7 Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/vzTZG6KcTCGvguI6vP7NCQpIgns.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203881 IP address blocks: 2001:67c:2ea4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e4:a1:76:06:fc:33:a6:bb:5c:5f:ec:ca:c6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf34d91ba29c4c21af82e23abcfecd090a48827b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ad:6f:7c:4a:62:e2:2e:d5:ed:86:36:ef:54: c5:98:d9:6a:80:18:f7:d1:69:c6:c3:aa:53:01:d9: 28:09:c9:83:69:60:41:ad:9f:de:bd:cc:3f:16:4e: ac:98:5c:da:43:38:5b:b5:b3:7f:c6:fe:e2:b4:cd: 43:e5:5d:dc:4b:4e:bd:72:32:99:5f:17:9c:24:8f: a5:88:c6:c0:be:5c:1c:fd:dd:8d:e3:73:55:be:d2: 7f:7d:c8:a8:81:eb:85:98:db:d0:82:5f:ab:8d:20: 26:90:14:fe:09:e9:bd:ad:f7:74:43:c3:ab:16:2f: e9:67:48:e9:cc:7a:6c:4e:ef:3f:d1:57:e4:25:b2: 43:ba:e4:20:4a:67:16:29:8e:b0:64:fa:ff:3e:46: c8:88:2a:95:49:e4:0b:05:cd:a3:dc:a5:d6:71:6c: fb:ea:8f:11:54:a6:b8:39:d4:6c:47:dd:9c:92:37: ec:9c:8c:2b:b2:dd:6d:b3:a5:30:c7:4f:07:6e:48: 7f:10:0b:b7:c3:9d:70:fa:fc:51:a5:bd:2a:7f:8b: 8f:a0:73:45:2d:0c:1a:c1:62:7b:2d:6a:fa:ca:0f: 85:17:79:6b:33:6c:5f:1e:80:3a:d7:ce:08:59:5d: fa:57:c4:7a:40:bf:a7:ee:37:e3:83:91:59:cf:1a: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:D9:1B:A2:9C:4C:21:AF:82:E2:3A:BC:FE:CD:09:0A:48:82:7B X509v3 Authority Key Identifier: keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/vzTZG6KcTCGvguI6vP7NCQpIgns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ea4::/48 Signature Algorithm: sha256WithRSAEncryption 71:33:75:cc:8a:6e:5b:49:ac:10:e5:f4:7f:d7:4c:3c:ff:55: db:fc:be:c6:ba:4e:71:d2:b4:3b:b5:16:d7:8e:89:fb:a0:de: ac:81:d7:f0:45:d6:cf:79:42:fe:79:a7:4f:26:66:f6:f0:b7: df:4f:a8:2e:30:47:ab:3d:43:66:61:21:a7:cd:78:54:a1:9f: 4d:78:1c:0a:8f:80:25:da:75:b9:db:58:c2:b6:ea:f9:f5:5a: e3:cd:e0:84:d2:39:14:90:10:01:c0:d1:df:9b:00:e2:f7:13: 4c:f2:8e:c6:f2:ce:5a:54:69:be:36:12:c9:4a:4b:de:78:27: 4f:02:bf:b0:f2:34:c7:ea:5c:15:87:85:f7:cc:9f:22:90:e3: 01:17:1c:15:dc:66:44:c4:20:73:fa:6a:2b:a7:fc:81:8d:74: 54:63:6e:48:d0:56:51:5f:10:d4:4f:00:49:23:a2:6e:a3:8c: 3c:43:45:5a:42:df:ee:eb:7c:25:97:94:21:c7:43:42:08:6c: 8e:50:6a:3f:0c:a7:06:aa:47:48:d7:04:33:e6:85:46:a4:ab: 94:f5:18:5e:54:1e:0c:be:ca:b9:cc:b7:1e:0d:43:cb:d0:f2: 79:2d:cd:b8:27:1e:63:25:45:38:84:d8:ff:9d:3d:32:4e:41: 15:7d:a8:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NeShdgb8M6a7XF/sysb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjRlNjZkN2NiYTc3Yjk3NzY4NTU1OWMyNDgxYmI5MDQ0 YzViNzUwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjM0ZDkxYmEyOWM0YzIxYWY4MmUyM2FiY2ZlY2QwOTBhNDg4MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq1vfEpi4i7V7YY271TFmNlqgBj3 0WnGw6pTAdkoCcmDaWBBrZ/evcw/Fk6smFzaQzhbtbN/xv7itM1D5V3cS069cjKZ XxecJI+liMbAvlwc/d2N43NVvtJ/fciogeuFmNvQgl+rjSAmkBT+Cem9rfd0Q8Or Fi/pZ0jpzHpsTu8/0VfkJbJDuuQgSmcWKY6wZPr/PkbIiCqVSeQLBc2j3KXWcWz7 6o8RVKa4OdRsR92ckjfsnIwrst1ts6Uwx08Hbkh/EAu3w51w+vxRpb0qf4uPoHNF LQwawWJ7LWr6yg+FF3lrM2xfHoA6184IWV36V8R6QL+n7jfjg5FZzxpf2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL802RuinEwhr4LiOrz+zQkKSIJ7MB8GA1UdIwQY MBaAFBAk5m18une5d2hVWcJIG7kETFt1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNUbWJYeTZkN2wzYUZWWndrZ2J1UVJNVzNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMTU1YzktMTNlMi00YjI4LWI2ODIt NDdlYTNmODc0MzU1LzEvdnpUWkc2S2NUQ0d2Z3VJNnZQN05DUXBJZ25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hMTU1YzktMTNlMi00YjI4LWI2ODItNDdlYTNmODc0MzU1 LzEvRUNUbWJYeTZkN2wzYUZWWndrZ2J1UVJNVzNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC6k MA0GCSqGSIb3DQEBCwUAA4IBAQBxM3XMim5bSawQ5fR/10w8/1Xb/L7Guk5x0rQ7 tRbXjon7oN6sgdfwRdbPeUL+eadPJmb28LffT6guMEerPUNmYSGnzXhUoZ9NeBwK j4Al2nW521jCtur59VrjzeCE0jkUkBABwNHfmwDi9xNM8o7G8s5aVGm+NhLJSkve eCdPAr+w8jTH6lwVh4X3zJ8ikOMBFxwV3GZExCBz+morp/yBjXRUY25I0FZRXxDU TwBJI6Juo4w8Q0VaQt/u63wll5Qhx0NCCGyOUGo/DKcGqkdI1wQz5oVGpKuU9Rhe VB4Mvsq5zLceDUPL0PJ5Lc24Jx5jJUU4hNj/nT0yTkEVfaic -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:17 2026 by rpki-client