This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zVjweoMYjQEop927xOWCjXM6xSw.roa File: zVjweoMYjQEop927xOWCjXM6xSw.roa (raw, json) Hash identifier: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY= Subject key identifier: CD:58:F0:7A:83:18:8D:01:28:A7:DD:BB:C4:E5:82:8D:73:3A:C5:2C Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED4CD834946856ECEC4ECFA8DDD407 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zVjweoMYjQEop927xOWCjXM6xSw.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210932 IP address blocks: 2a0f:607:1500::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4c:d8:34:94:68:56:ec:ec:4e:cf:a8:dd:d4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd58f07a83188d0128a7ddbbc4e5828d733ac52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:1d:30:51:2f:3d:4b:dd:92:06:08:1f:d9: d7:23:fb:d0:d7:2d:87:e4:80:3e:4a:f3:c6:1b:6d: 7f:6a:9e:1f:25:e3:a3:26:b7:75:15:5d:43:7d:92: 1a:b6:f9:1b:fa:ec:7f:f3:9d:19:4f:4d:a1:5a:65: 52:21:7b:bd:0f:d1:61:94:9c:3b:5d:8a:cd:43:8c: 93:44:4e:26:f9:ed:8c:de:14:d0:30:2d:6c:ad:f8: a4:5c:65:00:37:57:82:b5:03:62:c0:c9:94:6d:25: ca:bb:b8:9c:97:db:3d:97:3d:27:1a:30:84:f6:4f: ad:cf:46:96:cb:6f:a2:0a:c0:15:2e:95:6e:e1:9c: 22:d8:79:5a:3f:24:27:9b:34:17:a0:2d:3f:7c:77: 9e:a2:bb:b7:9e:50:71:21:25:52:64:58:0c:bf:18: 1c:19:a6:e2:ee:8f:4d:d1:09:dc:52:7e:ae:e2:b3: 8a:74:8b:09:f1:60:f0:78:bf:cb:da:80:5d:16:d1: a7:8a:86:c7:03:4b:9d:6b:dd:00:dc:48:a5:3e:d8: 1a:81:25:94:d3:05:3e:94:f7:80:33:da:fc:2d:19: 60:44:d0:4a:34:8b:9d:94:de:b6:a3:21:dd:29:a7: be:79:ae:19:6c:eb:6c:09:0a:da:60:29:bf:56:a1: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:58:F0:7A:83:18:8D:01:28:A7:DD:BB:C4:E5:82:8D:73:3A:C5:2C X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/zVjweoMYjQEop927xOWCjXM6xSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1500::/44 Signature Algorithm: sha256WithRSAEncryption 59:52:b2:57:03:09:3a:67:c6:cf:a2:7a:f3:c7:db:ef:50:8a: 00:7f:34:b7:63:9d:ea:67:8a:38:b0:b0:55:fa:c3:1a:db:62: b8:fa:bd:dd:c9:d0:99:c2:4e:b2:13:3f:b9:5d:0c:e5:a0:30: 91:af:6d:ed:f7:83:70:91:be:f1:19:68:7e:45:67:aa:f7:83: c3:62:f9:0c:66:25:be:ff:d4:f4:d3:6e:cb:be:2c:4c:2b:0b: ce:05:db:26:7b:32:18:6d:a6:fb:1d:ea:7b:96:31:df:60:88: 41:dc:ed:b9:8b:15:44:8f:10:95:48:3c:d6:05:83:91:21:0a: f0:f4:53:53:bc:b4:93:53:2e:94:64:69:03:8e:2b:cf:a0:63: e3:46:18:5c:a9:1a:d1:13:18:85:cb:e0:b5:d8:14:1e:ce:cd: d4:e1:d1:fa:2b:c5:43:d9:77:be:bc:a0:24:57:dc:a0:0f:a2: 8a:87:40:1b:da:89:a1:07:22:23:1d:55:2a:e0:63:39:ed:45: 75:cd:4d:5e:7c:9c:68:bc:68:57:6e:ed:d9:9a:be:81:de:ab: 03:e2:b9:86:69:9c:36:82:bc:00:89:c6:72:0c:b3:48:3a:b3: cc:27:d9:0d:81:53:51:67:dd:22:c1:7d:a5:f1:1d:71:07:27: c5:f1:8d:d7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UzYNJRoVuzsTs+o3dQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDU4ZjA3YTgzMTg4ZDAxMjhhN2RkYmJjNGU1ODI4ZDczM2FjNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkgdMFEvPUvdkgYIH9nXI/vQ1y2H 5IA+SvPGG21/ap4fJeOjJrd1FV1DfZIatvkb+ux/850ZT02hWmVSIXu9D9FhlJw7 XYrNQ4yTRE4m+e2M3hTQMC1srfikXGUAN1eCtQNiwMmUbSXKu7icl9s9lz0nGjCE 9k+tz0aWy2+iCsAVLpVu4Zwi2HlaPyQnmzQXoC0/fHeeoru3nlBxISVSZFgMvxgc Gabi7o9N0QncUn6u4rOKdIsJ8WDweL/L2oBdFtGniobHA0uda90A3EilPtgagSWU 0wU+lPeAM9r8LRlgRNBKNIudlN62oyHdKae+ea4ZbOtsCQraYCm/VqHoXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM1Y8HqDGI0BKKfdu8Tlgo1zOsUsMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvelZqd2VvTVlqUUVvcDkyN3hPV0NqWE02eFN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg8GBxUA MA0GCSqGSIb3DQEBCwUAA4IBAQBZUrJXAwk6Z8bPonrzx9vvUIoAfzS3Y53qZ4o4 sLBV+sMa22K4+r3dydCZwk6yEz+5XQzloDCRr23t94Nwkb7xGWh+RWeq94PDYvkM ZiW+/9T0027LvixMKwvOBdsmezIYbab7Hep7ljHfYIhB3O25ixVEjxCVSDzWBYOR IQrw9FNTvLSTUy6UZGkDjivPoGPjRhhcqRrRExiFy+C12BQezs3U4dH6K8VD2Xe+ vKAkV9ygD6KKh0Ab2omhByIjHVUq4GM57UV1zU1efJxovGhXbu3Zmr6B3qsD4rmG aZw2grwAicZyDLNIOrPMJ9kNgVNRZ90iwX2l8R1xByfF8Y3X -----END CERTIFICATE-----Generated at Thu Jan 8 00:39:55 2026 by rpki-client