This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/m-Z2GGkWQC87nAKxKvmBpxxGuW4.roa File: m-Z2GGkWQC87nAKxKvmBpxxGuW4.roa (raw, json) Hash identifier: E2NtGKqsG8InMAwpqT8GKVVpeTkke80ZNVprR/kOXhA= Subject key identifier: 9B:E6:76:18:69:16:40:2F:3B:9C:02:B1:2A:F9:81:A7:1C:46:B9:6E Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758DF4C0F4CD9F74410F7BF01FD0831 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/m-Z2GGkWQC87nAKxKvmBpxxGuW4.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56662 IP address blocks: 2a0f:5707:ba00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:df:4c:0f:4c:d9:f7:44:10:f7:bf:01:fd:08:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9be676186916402f3b9c02b12af981a71c46b96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:5a:68:f5:40:d3:4b:9b:91:ba:80:7d:13: 0d:22:31:35:a7:a6:a0:23:bb:97:0d:3c:e0:ba:32: cf:d3:60:4d:e6:f6:ca:6c:38:f8:e3:df:69:34:2f: 76:ea:d3:c6:c3:a0:69:08:2d:99:25:e3:15:59:9a: 1b:80:2b:be:ae:de:7f:c3:0d:32:ad:86:98:3c:73: fd:55:63:32:c3:ee:e2:c7:2a:20:72:4f:25:89:38: 7d:f8:0e:66:5f:d5:b4:de:33:ef:0b:3c:e7:5c:14: d4:97:b4:30:80:0a:8e:20:c1:a5:27:4e:97:f7:47: 70:78:e5:d0:a3:f9:32:33:27:d6:0b:35:d1:70:8e: a7:02:e8:59:6f:a9:93:4b:3b:8d:e6:49:96:40:88: 72:b0:53:a4:06:4a:d4:42:0f:58:5b:ac:ee:f4:ac: ca:11:23:37:e5:d8:67:09:2b:d0:aa:de:5c:d7:82: 48:6e:b7:eb:36:32:32:d8:f4:88:3a:57:3a:4b:f9: e5:91:de:21:71:00:f5:42:b4:f5:31:17:5a:69:77: d3:a9:93:e2:d0:51:3f:68:77:26:6c:6f:a2:09:6d: 1b:fe:f5:b0:09:88:b7:91:ee:b3:8e:33:3c:36:30: 24:1c:f8:79:7c:33:aa:1f:67:95:0a:a7:cc:43:6a: 9c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E6:76:18:69:16:40:2F:3B:9C:02:B1:2A:F9:81:A7:1C:46:B9:6E X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/m-Z2GGkWQC87nAKxKvmBpxxGuW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ba00::/44 Signature Algorithm: sha256WithRSAEncryption 3d:82:f8:bf:2d:4d:d1:88:8b:29:a8:23:fa:02:52:6f:ed:2a: 5f:7a:e2:9a:e5:ca:b2:06:5b:2b:4f:78:70:c7:cf:ec:d2:08: ac:4c:c8:47:46:b7:2e:87:47:90:0c:4e:fe:52:23:05:a0:9a: 22:aa:8b:b6:2b:6d:ab:21:cb:17:f5:39:ec:5e:41:7f:64:3c: 3f:f5:71:c2:5c:19:17:eb:0e:d7:a0:e5:4e:1a:de:5c:79:c7: c9:41:f3:70:f0:26:2a:03:b6:2a:c7:07:dd:17:96:e8:53:d0: a6:ef:5f:ab:b7:6c:51:1e:a0:e3:4f:31:f7:bb:bb:66:5a:83: 83:ef:4f:09:af:b4:ad:a2:7c:13:2f:dd:d3:50:ea:c1:e7:40: b5:4c:a9:55:65:fb:ac:78:c8:9f:5e:e9:ec:88:ec:d0:e6:c4: 72:d6:01:db:56:d1:a2:81:a9:c2:8d:82:2a:2f:e1:5b:a1:ae: 8c:4c:a4:13:6b:0d:54:46:a5:6d:34:1f:f8:56:5f:52:87:ad: 41:ff:0a:11:c6:89:cd:e2:fb:23:9e:cb:9d:fd:2f:28:ad:f7: e4:7e:76:4b:86:4f:0d:62:62:68:14:64:9a:de:0c:5d:45:67: b6:66:98:2b:12:15:4b:fa:8b:07:16:44:d4:33:b3:17:6d:ea: ed:98:40:c7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WN9MD0zZ90QQ978B/QgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmU2NzYxODY5MTY0MDJmM2I5YzAyYjEyYWY5ODFhNzFjNDZiOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoJaaPVA00ubkbqAfRMNIjE1p6ag I7uXDTzgujLP02BN5vbKbDj4499pNC926tPGw6BpCC2ZJeMVWZobgCu+rt5/ww0y rYaYPHP9VWMyw+7ixyogck8liTh9+A5mX9W03jPvCzznXBTUl7QwgAqOIMGlJ06X 90dweOXQo/kyMyfWCzXRcI6nAuhZb6mTSzuN5kmWQIhysFOkBkrUQg9YW6zu9KzK ESM35dhnCSvQqt5c14JIbrfrNjIy2PSIOlc6S/nlkd4hcQD1QrT1MRdaaXfTqZPi 0FE/aHcmbG+iCW0b/vWwCYi3ke6zjjM8NjAkHPh5fDOqH2eVCqfMQ2qcnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJvmdhhpFkAvO5wCsSr5gaccRrluMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvbS1aMkdHa1dRQzg3bkFLeEt2bUJweHhHdVc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB7oA MA0GCSqGSIb3DQEBCwUAA4IBAQA9gvi/LU3RiIspqCP6AlJv7SpfeuKa5cqyBlsr T3hwx8/s0gisTMhHRrcuh0eQDE7+UiMFoJoiqou2K22rIcsX9TnsXkF/ZDw/9XHC XBkX6w7XoOVOGt5cecfJQfNw8CYqA7YqxwfdF5boU9Cm71+rt2xRHqDjTzH3u7tm WoOD708Jr7StonwTL93TUOrB50C1TKlVZfuseMifXunsiOzQ5sRy1gHbVtGiganC jYIqL+Fboa6MTKQTaw1URqVtNB/4Vl9Sh61B/woRxonN4vsjnsud/S8orffkfnZL hk8NYmJoFGSa3gxdRWe2ZpgrEhVL+osHFkTUM7MXbertmEDH -----END CERTIFICATE-----Generated at Mon Jan 26 12:32:29 2026 by rpki-client