This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/ZRtJ06zDF-x6e7hZrwH9g5MJ3wY.roa File: ZRtJ06zDF-x6e7hZrwH9g5MJ3wY.roa (raw, json) Hash identifier: WcjDPDlk98u+n1T1FkRZjQvHjiER+xJZpFWL/kzuHtQ= Subject key identifier: 65:1B:49:D3:AC:C3:17:EC:7A:7B:B8:59:AF:01:FD:83:93:09:DF:06 Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114 Certificate serial: 019B7D5ADEFC3DD5CC0B2DC51B24D199BD98 Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/ZRtJ06zDF-x6e7hZrwH9g5MJ3wY.roa Signing time: Fri 02 Jan 2026 06:17:45 +0000 ROA not before: Fri 02 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205627 IP address blocks: 2a11:ac7::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:de:fc:3d:d5:cc:0b:2d:c5:1b:24:d1:99:bd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114 Validity Not Before: Jan 2 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=651b49d3acc317ec7a7bb859af01fd839309df06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:9d:10:1b:86:cf:57:d1:29:41:62:8a:fa: a0:91:c9:5f:d6:f5:74:3b:2c:53:c8:54:8a:94:89: 25:8d:1a:2d:c6:84:51:ab:30:9c:b3:fb:8a:41:12: ca:14:80:ec:d5:b2:d0:54:7b:c6:51:93:23:3f:89: 9f:7f:21:70:a6:d6:e4:95:d3:4e:18:c2:b7:9a:17: 3a:88:04:bd:b1:34:8f:5f:28:f1:43:50:a6:a8:2b: c5:b5:9c:07:c2:85:71:1d:44:04:dd:a0:1a:18:d2: bc:48:11:22:54:16:cf:55:d2:f0:50:62:81:1d:2e: 51:f3:80:d5:57:43:f4:a2:c9:06:11:6f:13:b9:96: ed:b6:a8:6f:fd:e7:09:5f:3b:61:9c:d8:dc:f5:4c: 63:20:14:d2:a4:7e:67:8d:1a:9a:eb:9b:74:b6:4b: 3c:e5:8b:fb:a9:53:9b:9f:9e:84:52:40:1f:69:27: 54:34:7b:df:65:89:1c:3f:85:88:be:12:24:2e:65: 88:d3:96:2c:aa:1d:8b:65:82:75:ec:97:a0:58:1b: cf:e3:a9:eb:c7:21:8c:4b:c7:ff:ab:22:c1:4e:cf: 06:0a:34:0e:65:5a:64:38:6d:81:be:2a:75:d9:df: 5b:ce:d6:0c:a3:c0:df:1d:c7:9b:95:17:f1:b4:1f: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1B:49:D3:AC:C3:17:EC:7A:7B:B8:59:AF:01:FD:83:93:09:DF:06 X509v3 Authority Key Identifier: keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/ZRtJ06zDF-x6e7hZrwH9g5MJ3wY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:ac7::/40 Signature Algorithm: sha256WithRSAEncryption 7a:24:ba:39:91:5f:e0:c8:69:d4:1e:80:fa:b8:03:ec:93:81: 30:02:19:ad:b9:bb:8c:8a:a2:b1:ae:4a:07:33:bb:51:e8:95: ea:6c:6e:83:ae:45:b8:88:9f:7d:30:6e:ac:68:9f:a5:63:10: e4:0d:2a:13:01:6c:a6:85:ff:a1:6b:1d:39:a4:3a:5a:98:5f: 38:13:47:b1:e5:d4:ee:28:ba:9c:51:3e:87:f1:a9:4d:e2:bf: e9:f5:f4:db:65:ee:88:fc:c9:30:f4:32:88:23:70:49:0f:a6: 29:2b:b6:71:ae:a0:0f:cd:8c:b2:99:c2:98:23:2e:46:60:22: d0:5b:2d:ca:0f:fe:8d:67:4c:f1:fb:e6:ba:75:66:40:f8:41: dc:80:49:d9:31:7d:88:dd:48:1a:60:0b:fc:92:6c:ff:cf:9d: ab:09:a5:fe:45:34:8a:19:86:af:09:d3:4b:21:10:f9:71:c6: 4a:0e:e1:3d:bb:da:b4:2c:37:37:b7:3b:f8:17:d9:57:9b:16: 78:5a:5b:6b:3b:19:98:4b:10:39:93:43:b9:64:dc:2a:e9:5e: 82:33:53:8e:b8:53:38:c5:79:a6:2a:b5:d8:76:77:87:e9:b9: fd:a7:58:3c:d4:3d:d3:d6:2f:be:5f:49:1e:e2:b5:68:bf:b8: 2a:0f:f7:72 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9Wt78PdXMCy3FGyTRmb2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODQ2NTU3YjllNDI5NTUxNjNlNTE2YjAyZGM4ZTNlZTM4 MjgxMTQwHhcNMjYwMTAyMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTFiNDlkM2FjYzMxN2VjN2E3YmI4NTlhZjAxZmQ4MzkzMDlkZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/adEBuGz1fRKUFiivqgkclf1vV0 OyxTyFSKlIkljRotxoRRqzCcs/uKQRLKFIDs1bLQVHvGUZMjP4mffyFwptbkldNO GMK3mhc6iAS9sTSPXyjxQ1CmqCvFtZwHwoVxHUQE3aAaGNK8SBEiVBbPVdLwUGKB HS5R84DVV0P0oskGEW8TuZbttqhv/ecJXzthnNjc9UxjIBTSpH5njRqa65t0tks8 5Yv7qVObn56EUkAfaSdUNHvfZYkcP4WIvhIkLmWI05Ysqh2LZYJ17JegWBvP46nr xyGMS8f/qyLBTs8GCjQOZVpkOG2Bvip12d9bztYMo8DfHceblRfxtB9owwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGUbSdOswxfsenu4Wa8B/YOTCd8GMB8GA1UdIwQY MBaAFEaEZVe55ClVFj5RawLcjj7jgoEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODdjNGUtNzg5Yi00YzI2LThjZTUt YWJiMjIyNTA3ZjE3LzEvWlJ0SjA2ekRGLXg2ZTdoWnJ3SDlnNU1KM3dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC85ODdjNGUtNzg5Yi00YzI2LThjZTUtYWJiMjIyNTA3ZjE3 LzEvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhEKxwAw DQYJKoZIhvcNAQELBQADggEBAHokujmRX+DIadQegPq4A+yTgTACGa25u4yKorGu Sgczu1HolepsboOuRbiIn30wbqxon6VjEOQNKhMBbKaF/6FrHTmkOlqYXzgTR7Hl 1O4oupxRPofxqU3iv+n19Ntl7oj8yTD0MogjcEkPpikrtnGuoA/NjLKZwpgjLkZg ItBbLcoP/o1nTPH75rp1ZkD4QdyASdkxfYjdSBpgC/ySbP/PnasJpf5FNIoZhq8J 00shEPlxxkoO4T272rQsNze3O/gX2VebFnhaW2s7GZhLEDmTQ7lk3CrpXoIzU464 UzjFeaYqtdh2d4fpuf2nWDzUPdPWL75fSR7itWi/uCoP93I= -----END CERTIFICATE-----Generated at Sat Jan 31 01:11:32 2026 by rpki-client