This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa File: zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa (raw, json) Hash identifier: fBlVd5hhHmOwo6UAmiinDlZmi08DV56PlEdUEufy9YE= Subject key identifier: CC:BD:94:98:66:58:61:D7:B5:06:FF:B8:CD:31:01:F3:12:21:C0:95 Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Certificate serial: 019B78A20FDC52B3BE3D337E931303DD1D91 Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa Signing time: Thu 01 Jan 2026 08:17:25 +0000 ROA not before: Thu 01 Jan 2026 08:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214361 IP address blocks: 2a12:fa00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:0f:dc:52:b3:be:3d:33:7e:93:13:03:dd:1d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Validity Not Before: Jan 1 08:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccbd9498665861d7b506ffb8cd3101f31221c095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:a4:98:ae:e3:c5:ad:f1:12:de:8c:4c:76: 69:c9:06:75:cd:69:6f:0c:a9:0c:8a:25:ae:9c:b0: 88:6d:38:0d:55:22:4d:e6:58:74:df:e5:3b:96:3f: 2d:11:b6:97:ff:20:59:a3:e4:a3:79:6e:60:a5:eb: 9e:62:27:64:03:b7:dd:15:f1:48:8e:f3:92:57:95: d6:74:aa:d0:65:57:11:ad:af:8c:46:44:61:2f:40: 74:17:2e:6c:30:f9:74:e8:e3:77:a7:8a:e0:ae:d2: ee:65:57:a3:45:58:43:7a:de:a4:e0:23:59:36:00: a1:07:44:19:4f:fa:7f:c1:25:49:47:50:6f:ef:49: e6:67:43:e0:92:14:c1:4c:c9:60:eb:6e:11:e4:95: c5:5a:74:f6:af:65:88:13:25:83:b0:90:ab:8b:0e: 53:ac:41:95:3e:19:95:ce:ee:b7:b9:43:bc:77:1b: 30:4e:80:2b:1b:8a:97:f6:ec:8f:3e:56:07:76:85: ea:ab:af:4a:dc:98:c4:35:af:3a:0c:d2:60:01:29: f0:46:49:b2:0e:9b:4a:19:96:be:11:ad:c4:e4:ac: 3d:fc:75:ce:6c:5c:60:c4:27:e9:3f:29:67:45:80: 35:80:25:9b:a1:e1:1e:80:89:11:cf:06:44:71:9f: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:94:98:66:58:61:D7:B5:06:FF:B8:CD:31:01:F3:12:21:C0:95 X509v3 Authority Key Identifier: keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/zL2UmGZYYde1Bv-4zTEB8xIhwJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:fa00::/29 Signature Algorithm: sha256WithRSAEncryption 63:1e:a3:a6:7e:13:aa:0a:f3:9f:e6:c4:78:cf:59:22:94:58: 56:3a:46:ff:d9:ac:5d:f6:7d:14:c7:f0:68:07:a7:f8:db:66: d8:8d:53:79:ad:09:2e:24:c8:25:6c:74:c6:74:82:dc:cc:c9: 1f:e5:1b:5a:fa:67:cb:1b:1d:22:99:ca:b2:e9:6f:8b:84:f8: 36:ee:a7:0d:5a:64:fd:e7:f5:a6:58:b7:31:69:e1:99:f6:18: c0:32:f5:7c:25:ee:8e:c9:c5:e2:c9:67:cd:bc:7f:2e:13:91: b7:eb:68:a5:be:26:73:dc:43:cb:46:f2:ec:2a:f1:69:ca:c2: e5:2b:d4:da:0f:f4:03:7e:6a:95:09:f9:bb:98:3a:07:55:9b: a9:29:cb:d1:ed:7d:67:e6:49:05:06:e6:dd:e6:eb:5c:8c:7b: 4a:01:11:5f:58:8a:97:8a:81:de:22:0a:c5:a8:20:ef:08:4c: be:91:96:05:46:7e:31:44:99:45:c2:2d:1c:38:04:aa:6b:5a: 98:76:85:52:45:14:9a:cd:29:64:8f:31:80:1b:83:42:fb:3a: ad:bb:f1:5a:28:14:62:1f:4b:3b:c6:7f:8b:4f:e1:db:90:b9: bc:bd:f4:88:0a:2f:e0:0b:48:f3:2a:45:59:44:00:93:b2:a9: fd:0f:2c:4d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4og/cUrO+PTN+kxMD3R2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3 MTVkYzkwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2JkOTQ5ODY2NTg2MWQ3YjUwNmZmYjhjZDMxMDFmMzEyMjFjMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaCkmK7jxa3xEt6MTHZpyQZ1zWlv DKkMiiWunLCIbTgNVSJN5lh03+U7lj8tEbaX/yBZo+SjeW5gpeueYidkA7fdFfFI jvOSV5XWdKrQZVcRra+MRkRhL0B0Fy5sMPl06ON3p4rgrtLuZVejRVhDet6k4CNZ NgChB0QZT/p/wSVJR1Bv70nmZ0PgkhTBTMlg624R5JXFWnT2r2WIEyWDsJCriw5T rEGVPhmVzu63uUO8dxswToArG4qX9uyPPlYHdoXqq69K3JjENa86DNJgASnwRkmy DptKGZa+Ea3E5Kw9/HXObFxgxCfpPylnRYA1gCWboeEegIkRzwZEcZ9aoQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFMy9lJhmWGHXtQb/uM0xAfMSIcCVMB8GA1UdIwQY MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt M2JjM2RmN2EyOThhLzEvekwyVW1HWllZZGUxQnYtNHpURUI4eElod0pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhL6ADAN BgkqhkiG9w0BAQsFAAOCAQEAYx6jpn4Tqgrzn+bEeM9ZIpRYVjpG/9msXfZ9FMfw aAen+Ntm2I1Tea0JLiTIJWx0xnSC3MzJH+UbWvpnyxsdIpnKsulvi4T4Nu6nDVpk /ef1pli3MWnhmfYYwDL1fCXujsnF4slnzbx/LhORt+topb4mc9xDy0by7CrxacrC 5SvU2g/0A35qlQn5u5g6B1WbqSnL0e19Z+ZJBQbm3ebrXIx7SgERX1iKl4qB3iIK xagg7whMvpGWBUZ+MUSZRcItHDgEqmtamHaFUkUUms0pZI8xgBuDQvs6rbvxWigU Yh9LO8Z/i0/h25C5vL30iAov4AtI8ypFWUQAk7Kp/Q8sTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:27 2026 by rpki-client