This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZOqJk6Bz8YJP9R5Ed3VzccVHld0.roa File: ZOqJk6Bz8YJP9R5Ed3VzccVHld0.roa (raw, json) Hash identifier: zBoLkMZlrSuG3b0DOB129Lgg0MyO8mydLmw1nY2RFx4= Subject key identifier: 64:EA:89:93:A0:73:F1:82:4F:F5:1E:44:77:75:73:71:C5:47:95:DD Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019C22C74575BEC076873181E605B1F438B9 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZOqJk6Bz8YJP9R5Ed3VzccVHld0.roa Signing time: Tue 03 Feb 2026 09:13:30 +0000 ROA not before: Tue 03 Feb 2026 09:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 2a07:a300::/29 maxlen: 29 2a0f:31c5::/32 maxlen: 32 2a0f:7d05::/32 maxlen: 32 2a13:1480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:c7:45:75:be:c0:76:87:31:81:e6:05:b1:f4:38:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Feb 3 09:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64ea8993a073f1824ff51e4477757371c54795dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:90:90:f6:80:b3:af:39:d6:6c:ab:4b:66: c2:47:00:d9:31:93:38:36:ed:91:69:e3:54:45:9b: 0c:50:b5:1e:35:49:be:3e:5c:14:4e:35:f8:13:f1: 7d:28:2e:b1:4c:77:4d:87:64:25:50:ae:f5:7d:a8: 73:81:b5:63:42:ef:a7:78:2c:ba:d9:1c:09:cb:30: 19:45:9c:48:ab:07:d9:16:b0:d2:45:37:14:9e:03: f4:83:f9:8d:15:1b:ee:19:6d:41:17:dc:a5:b1:c1: ae:70:9f:d4:77:55:a2:5c:73:21:7c:bd:dd:8f:d6: 93:b4:85:03:01:ee:4e:0c:77:d4:67:d6:1d:7b:15: 34:f3:1a:2e:a0:fd:14:42:e0:cb:26:5f:da:d1:f5: 81:e1:f7:5a:95:d2:0b:f9:43:93:79:97:95:76:57: e6:e7:69:d8:da:86:ee:ac:80:a5:1f:ff:ae:b0:a1: 5c:c6:4e:28:10:c0:d5:35:15:e9:51:f6:9f:d7:c1: a4:39:90:6a:c2:7f:6b:77:29:e6:6f:c2:53:46:b9: d4:fb:bc:bb:bd:af:13:1a:27:e9:be:d5:47:ba:7c: ae:0d:93:30:2c:89:d8:3b:54:1c:f8:bf:1e:9c:2f: 5c:d6:f2:88:1d:af:1f:00:79:68:09:bb:32:53:17: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:89:93:A0:73:F1:82:4F:F5:1E:44:77:75:73:71:C5:47:95:DD X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZOqJk6Bz8YJP9R5Ed3VzccVHld0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:a300::/29 2a0f:31c5::/32 2a0f:7d05::/32 2a13:1480::/29 Signature Algorithm: sha256WithRSAEncryption 2d:6e:66:ec:52:6f:a0:23:68:f5:45:06:64:97:2c:04:23:24: 25:e8:40:8d:57:1e:e4:d7:b5:a6:8f:fe:d2:31:73:b5:40:57: 20:8c:d7:02:58:85:52:b8:c9:7c:69:c1:ae:1b:94:2a:2f:66: bb:47:ed:f9:b2:67:30:71:bf:a2:16:7b:36:3c:ed:5d:a0:75: d2:58:e5:3b:c6:7f:f3:fb:e3:02:45:3e:c1:b9:49:c1:7b:d8: c3:62:43:eb:07:d0:18:db:60:3c:a2:93:0a:f8:6a:18:af:eb: e0:fe:75:c0:6f:bc:f8:43:41:49:93:c8:01:94:3e:fe:ac:38: 5f:3a:d2:54:95:18:b9:1d:bb:a5:b3:12:04:42:9e:88:4e:99: 87:06:40:12:4a:b1:df:96:73:21:1b:9a:7a:bb:8c:cb:cd:c4: 79:97:2d:68:1f:54:a5:4b:43:ac:f7:19:4e:a2:ed:e7:bd:da: 15:a2:88:31:3d:31:cb:98:8b:7d:92:6d:23:a5:b1:80:ae:bf: a6:44:4b:78:c7:83:de:e6:d8:34:ba:11:56:a0:cc:a5:70:9a: 7b:bf:85:40:91:0d:76:2c:b1:0e:83:a8:65:bb:be:cb:57:fe: aa:8c:3a:96:9e:99:6a:b3:bb:6c:80:d7:d8:7d:48:00:65:42: 9e:53:5b:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZwix0V1vsB2hzGB5gWx9Di5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMjAzMDkxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGVhODk5M2EwNzNmMTgyNGZmNTFlNDQ3Nzc1NzM3MWM1NDc5NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcyQkPaAs6851myrS2bCRwDZMZM4 Nu2RaeNURZsMULUeNUm+PlwUTjX4E/F9KC6xTHdNh2QlUK71fahzgbVjQu+neCy6 2RwJyzAZRZxIqwfZFrDSRTcUngP0g/mNFRvuGW1BF9ylscGucJ/Ud1WiXHMhfL3d j9aTtIUDAe5ODHfUZ9YdexU08xouoP0UQuDLJl/a0fWB4fdaldIL+UOTeZeVdlfm 52nY2oburIClH/+usKFcxk4oEMDVNRXpUfaf18GkOZBqwn9rdynmb8JTRrnU+7y7 va8TGifpvtVHunyuDZMwLInYO1Qc+L8enC9c1vKIHa8fAHloCbsyUxdhvwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFGTqiZOgc/GCT/UeRHd1c3HFR5XdMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvWk9xSms2Qno4WUpQOVI1RWQzVnpjY1ZIbGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgejAAMF ACoPMcUDBQAqD30FAwUDKhMUgDANBgkqhkiG9w0BAQsFAAOCAQEALW5m7FJvoCNo 9UUGZJcsBCMkJehAjVce5Ne1po/+0jFztUBXIIzXAliFUrjJfGnBrhuUKi9mu0ft +bJnMHG/ohZ7NjztXaB10ljlO8Z/8/vjAkU+wblJwXvYw2JD6wfQGNtgPKKTCvhq GK/r4P51wG+8+ENBSZPIAZQ+/qw4XzrSVJUYuR27pbMSBEKeiE6ZhwZAEkqx35Zz IRuaeruMy83EeZctaB9UpUtDrPcZTqLt573aFaKIMT0xy5iLfZJtI6WxgK6/pkRL eMeD3ubYNLoRVqDMpXCae7+FQJENdiyxDoOoZbu+y1f+qow6lp6ZarO7bIDX2H1I AGVCnlNbEg== -----END CERTIFICATE-----Generated at Fri Feb 6 02:06:32 2026 by rpki-client