This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/0pzxMp1swfE9EPXzz-2gn-AJxmg.roa File: 0pzxMp1swfE9EPXzz-2gn-AJxmg.roa (raw, json) Hash identifier: iDQXeuUu8BPkCnjqwlHNPJoaa/RxJHbw6i2unTU+yVA= Subject key identifier: D2:9C:F1:32:9D:6C:C1:F1:3D:10:F5:F3:CF:ED:A0:9F:E0:09:C6:68 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8036DA4E4925CC8F227870A16926E5 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/0pzxMp1swfE9EPXzz-2gn-AJxmg.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216038 IP address blocks: 2a0f:7803:feb0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:36:da:4e:49:25:cc:8f:22:78:70:a1:69:26:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d29cf1329d6cc1f13d10f5f3cfeda09fe009c668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:00:3a:e7:42:85:af:a6:3a:1c:7a:f1:6a: d6:08:a1:55:19:ac:67:a6:28:80:e8:07:aa:f5:4a: 3b:62:60:e6:5d:1c:37:23:a1:78:ff:9a:c5:49:d4: 74:ba:23:aa:50:a9:e1:1d:12:ff:30:46:7b:6f:46: 5a:d5:66:0e:63:b9:c9:82:96:f9:dd:7f:ec:6b:ac: c7:1d:59:0a:90:16:28:b3:9a:b0:b8:b2:9d:dc:f2: e5:a2:85:33:fd:89:59:0e:f2:9f:2b:75:fb:66:ec: ec:0b:e5:d2:c6:92:1b:b4:3a:45:bb:7a:83:2b:fc: 59:d1:69:c0:12:0e:eb:90:7d:1a:e3:c7:e9:4d:d5: 6e:95:04:22:0d:cb:5c:1a:ae:88:69:6d:5f:ac:4e: a6:ef:1b:28:c0:ff:89:b4:3f:f3:b4:5c:82:91:ab: 9d:f6:f7:d2:94:3e:e3:92:1e:75:41:26:da:55:a7: dd:9d:12:b6:3f:47:a6:78:a7:8d:a9:fc:af:11:23: 19:71:f3:40:d6:63:22:45:d1:96:3b:0e:29:a5:f8: 8c:04:63:aa:00:02:ff:63:78:a0:a8:c4:4a:df:03: 3a:39:aa:5a:28:0c:dd:94:79:4f:c8:1f:03:a6:8a: 81:8a:67:8f:52:8a:bc:38:40:ae:4c:d0:b9:e6:c7: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9C:F1:32:9D:6C:C1:F1:3D:10:F5:F3:CF:ED:A0:9F:E0:09:C6:68 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/0pzxMp1swfE9EPXzz-2gn-AJxmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:feb0::/44 Signature Algorithm: sha256WithRSAEncryption 39:10:68:34:42:3b:fd:4b:f9:6e:38:08:d3:ac:e2:29:fb:e7: c4:83:3b:12:63:23:7e:a4:59:6b:44:1e:ff:c7:aa:6e:a6:45: 2c:4f:c4:32:69:32:6a:49:9d:42:b8:43:ed:3a:a6:50:d0:1b: d4:79:0a:c0:87:71:88:1e:79:73:54:80:17:89:8c:94:f4:02: 93:2c:d7:4e:08:92:14:62:46:17:e1:2c:3a:27:ea:7f:9f:c2: 70:95:06:43:5a:19:aa:0f:1b:ac:62:5e:86:af:a3:cd:9b:7b: b7:de:34:c3:1e:ec:64:b5:a4:e9:67:dc:c1:81:4b:96:be:a1: 2b:6a:c2:b9:e8:07:b1:d6:01:17:66:21:06:ac:73:b6:bf:8e: 01:08:cd:8c:d3:ba:c6:37:e1:46:16:d0:c6:ff:02:25:d3:f2: 4a:25:77:d2:6c:2b:78:5d:1b:eb:8f:46:4b:51:00:60:9c:7c: ac:da:93:23:6a:58:9a:c8:83:ef:fc:48:1f:31:69:c4:d3:1d: 2f:b5:c6:66:11:2e:f2:88:f6:b5:8a:2a:96:4c:39:58:02:e6: 97:0e:32:39:64:57:cb:1e:a5:17:71:de:c1:f2:e0:49:79:b4: 91:69:c2:9c:57:be:90:7d:15:ed:92:06:97:bd:fe:b8:22:82: 82:e9:4b:54 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDbaTkklzI8ieHChaSblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjljZjEzMjlkNmNjMWYxM2QxMGY1ZjNjZmVkYTA5ZmUwMDljNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUAOudCha+mOhx68WrWCKFVGaxn piiA6Aeq9Uo7YmDmXRw3I6F4/5rFSdR0uiOqUKnhHRL/MEZ7b0Za1WYOY7nJgpb5 3X/sa6zHHVkKkBYos5qwuLKd3PLlooUz/YlZDvKfK3X7ZuzsC+XSxpIbtDpFu3qD K/xZ0WnAEg7rkH0a48fpTdVulQQiDctcGq6IaW1frE6m7xsowP+JtD/ztFyCkaud 9vfSlD7jkh51QSbaVafdnRK2P0emeKeNqfyvESMZcfNA1mMiRdGWOw4ppfiMBGOq AAL/Y3igqMRK3wM6OapaKAzdlHlPyB8DpoqBimePUoq8OECuTNC55sftjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNKc8TKdbMHxPRD188/toJ/gCcZoMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvMHB6eE1wMXN3ZkU5RVBYenotMmduLUFKeG1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/6w MA0GCSqGSIb3DQEBCwUAA4IBAQA5EGg0Qjv9S/luOAjTrOIp++fEgzsSYyN+pFlr RB7/x6pupkUsT8QyaTJqSZ1CuEPtOqZQ0BvUeQrAh3GIHnlzVIAXiYyU9AKTLNdO CJIUYkYX4Sw6J+p/n8JwlQZDWhmqDxusYl6Gr6PNm3u33jTDHuxktaTpZ9zBgUuW vqErasK56Aex1gEXZiEGrHO2v44BCM2M07rGN+FGFtDG/wIl0/JKJXfSbCt4XRvr j0ZLUQBgnHys2pMjaliayIPv/EgfMWnE0x0vtcZmES7yiPa1iiqWTDlYAuaXDjI5 ZFfLHqUXcd7B8uBJebSRacKcV76QfRXtkgaXvf64IoKC6UtU -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:56 2026 by rpki-client