This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/zegCreMAsWuVQ_WHgf--0l2ZG3E.roa File: zegCreMAsWuVQ_WHgf--0l2ZG3E.roa (raw, json) Hash identifier: hG7GTDgQ0+UKynRc4qSwZNfDUaAY6uCRSrC2M4o4Fvg= Subject key identifier: CD:E8:02:AD:E3:00:B1:6B:95:43:F5:87:81:FF:BE:D2:5D:99:1B:71 Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622 Certificate serial: 019B77587962CF8ACB15AE45EA4E1EB736C1 Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/zegCreMAsWuVQ_WHgf--0l2ZG3E.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52212 IP address blocks: 2a07:f880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:79:62:cf:8a:cb:15:ae:45:ea:4e:1e:b7:36:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cde802ade300b16b9543f58781ffbed25d991b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1a:73:e0:79:c5:c1:55:7d:11:00:be:ad:27: 8c:20:cc:57:91:be:eb:73:90:1d:86:b1:89:a3:55: 51:f0:85:30:2d:c2:9f:9f:65:cf:48:5d:1d:c8:32: 59:06:75:82:0c:54:e0:de:cb:6a:90:f7:0e:af:d8: 21:55:b5:6c:63:eb:98:40:77:a9:55:b7:b9:59:40: 38:3f:6d:42:34:7b:c7:9c:2b:32:2f:26:e0:f9:ff: ab:60:b7:41:4a:8b:67:df:fe:9e:2a:99:d9:ec:0f: 5e:59:38:fa:f4:b6:d6:14:c6:a0:00:8a:54:33:fd: 01:d2:ad:9e:35:12:ea:5e:39:fd:1c:03:60:11:bd: 5a:53:13:46:a0:c3:3c:3b:73:e7:f7:30:21:63:1b: 1a:d6:eb:36:93:31:65:94:77:54:3a:d2:1e:2e:e2: 97:54:59:dd:d7:b7:e8:6f:de:1f:9f:21:c1:bd:b3: 90:e7:4b:8a:2b:6d:70:7b:af:41:fe:9d:7e:43:e9: dd:6a:fe:4a:dd:cf:ba:2e:07:1e:d6:cc:93:1c:56: dc:a4:3f:e3:44:c9:29:cc:68:4f:4a:4b:c7:01:de: 1d:61:91:72:af:76:ab:b1:92:67:8c:74:c7:58:c8: 3f:4c:93:f4:46:66:5f:82:15:a4:fe:2b:db:41:f4: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E8:02:AD:E3:00:B1:6B:95:43:F5:87:81:FF:BE:D2:5D:99:1B:71 X509v3 Authority Key Identifier: keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/zegCreMAsWuVQ_WHgf--0l2ZG3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:f880::/29 Signature Algorithm: sha256WithRSAEncryption 6b:e8:32:3e:1c:30:f1:9e:37:9d:e9:3e:55:d6:a4:8b:b9:f1: a2:5d:31:3b:32:2a:71:e0:5a:fb:70:b8:fc:5c:9f:58:83:24: 2b:54:61:b6:3b:be:b3:72:14:7c:70:05:ee:d8:fd:6f:a3:ed: b9:ed:7a:94:15:0b:05:aa:a1:ed:aa:08:7f:90:79:a8:8c:ef: 52:a2:57:f8:8d:16:f5:f5:81:51:83:62:d0:31:af:86:f8:09: b4:10:18:c9:13:e6:87:4f:bc:6f:6c:36:27:a9:a2:44:ab:96: 33:bf:ed:32:2f:e7:2f:6a:94:ad:d4:b1:87:a0:34:72:57:25: ae:57:f2:a2:6f:5b:39:e4:6d:0a:2c:1f:3e:18:a6:b3:0e:3e: d0:35:52:22:5b:2a:a7:cc:1a:06:25:74:74:0c:42:98:3e:e8: ab:af:33:b8:ac:85:53:f5:c1:b1:b7:91:f3:b3:95:8b:44:08: 50:a2:a3:d4:17:00:3b:4e:a4:bf:6d:ee:5d:cd:4d:c5:5c:7a: 48:a8:25:81:0d:cf:ae:fd:a2:ee:29:53:10:95:01:c4:11:f1: 91:93:91:e8:bb:e9:dc:af:05:b5:f0:65:4e:71:04:02:aa:22: 27:c6:66:18:30:df:e8:59:ec:f6:15:db:fa:0b:1f:51:a9:da: 15:5e:2e:5b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WHliz4rLFa5F6k4etzbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDRhZDUzMjU0MGQyZDJkYWViYTk1ZTEzZDYxNGI3ODU1 YWQ2MjIwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGU4MDJhZGUzMDBiMTZiOTU0M2Y1ODc4MWZmYmVkMjVkOTkxYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xpz4HnFwVV9EQC+rSeMIMxXkb7r c5AdhrGJo1VR8IUwLcKfn2XPSF0dyDJZBnWCDFTg3stqkPcOr9ghVbVsY+uYQHep Vbe5WUA4P21CNHvHnCsyLybg+f+rYLdBSotn3/6eKpnZ7A9eWTj69LbWFMagAIpU M/0B0q2eNRLqXjn9HANgEb1aUxNGoMM8O3Pn9zAhYxsa1us2kzFllHdUOtIeLuKX VFnd17fob94fnyHBvbOQ50uKK21we69B/p1+Q+ndav5K3c+6Lgce1syTHFbcpD/j RMkpzGhPSkvHAd4dYZFyr3arsZJnjHTHWMg/TJP0RmZfghWk/ivbQfTLBwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFM3oAq3jALFrlUP1h4H/vtJdmRtxMB8GA1UdIwQY MBaAFHxErVMlQNLS2uupXhPWFLeFWtYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMt NjU5Y2I0MjdkY2Y3LzEvemVnQ3JlTUFzV3VWUV9XSGdmLS0wbDJaRzNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMtNjU5Y2I0MjdkY2Y3 LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgf4gDAN BgkqhkiG9w0BAQsFAAOCAQEAa+gyPhww8Z43nek+Vdaki7nxol0xOzIqceBa+3C4 /FyfWIMkK1Rhtju+s3IUfHAF7tj9b6Ptue16lBULBaqh7aoIf5B5qIzvUqJX+I0W 9fWBUYNi0DGvhvgJtBAYyRPmh0+8b2w2J6miRKuWM7/tMi/nL2qUrdSxh6A0clcl rlfyom9bOeRtCiwfPhimsw4+0DVSIlsqp8waBiV0dAxCmD7oq68zuKyFU/XBsbeR 87OVi0QIUKKj1BcAO06kv23uXc1NxVx6SKglgQ3Prv2i7ilTEJUBxBHxkZOR6Lvp 3K8FtfBlTnEEAqoiJ8ZmGDDf6Fns9hXb+gsfUanaFV4uWw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:24 2026 by rpki-client