This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZGJFbaSETMmJKbi4462FygNVtoc.roa File: ZGJFbaSETMmJKbi4462FygNVtoc.roa (raw, json) Hash identifier: OpUmsggLjW7yRUk862i9QgVK47nIHBWT3oUGiW7Coo8= Subject key identifier: 64:62:45:6D:A4:84:4C:C9:89:29:B8:B8:E3:AD:85:CA:03:55:B6:87 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802721B79AF0B6E6DB0966E3B2C631 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZGJFbaSETMmJKbi4462FygNVtoc.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212259 IP address blocks: 2a0f:7802:e200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:27:21:b7:9a:f0:b6:e6:db:09:66:e3:b2:c6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6462456da4844cc98929b8b8e3ad85ca0355b687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:78:c5:43:d5:16:e7:e2:65:d3:2d:90:03: 0a:94:1c:79:28:d1:68:66:f3:da:4a:ed:c0:41:5b: d1:25:be:70:88:98:f2:18:ad:6c:f2:37:14:8a:21: ca:4e:69:14:9c:a6:fc:2c:7f:30:46:66:e2:49:f9: 64:5f:5b:c6:b8:05:fa:0d:2b:f4:cb:a7:92:ec:12: 7c:0f:26:e1:26:d4:95:d6:f6:ce:21:5f:54:1a:1b: 8e:32:ce:17:50:27:23:6a:b6:57:b4:d4:e9:22:d0: ee:b2:cc:4f:50:56:b5:6b:c2:41:ee:4c:3b:b1:39: 6e:5c:cd:11:f5:03:1a:ea:2a:77:3f:9b:d1:e1:e6: 89:36:c0:19:28:ea:02:c3:e1:be:97:7b:fa:77:9c: 66:82:2f:a4:9c:53:4e:b9:a2:40:d7:e1:1d:77:90: 4d:4e:70:28:2c:49:29:e6:cb:79:b4:34:37:01:b2: 0c:46:23:24:7c:a8:ab:89:b9:fb:5b:1c:bb:08:d1: c1:1e:f0:68:17:1c:c1:ea:61:24:9a:69:43:84:c7: a9:56:eb:7d:a5:49:5b:ec:f1:95:e8:32:24:c3:54: a6:26:cf:5f:26:3b:45:b6:70:2b:84:93:13:dd:54: b4:a3:84:0a:de:dc:8f:6d:0f:0e:d2:90:4f:d7:58: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:45:6D:A4:84:4C:C9:89:29:B8:B8:E3:AD:85:CA:03:55:B6:87 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZGJFbaSETMmJKbi4462FygNVtoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e200::/40 Signature Algorithm: sha256WithRSAEncryption 86:7c:84:4e:17:b6:83:21:1f:b5:2b:bc:fe:79:9f:76:cb:77: f6:50:30:b5:2d:c7:b1:bb:bd:e3:1f:5d:fc:75:92:57:20:0c: 81:3e:70:c6:a2:37:50:55:9e:f0:97:5b:1d:6a:cb:e3:a8:60: cd:66:75:a4:c3:d8:9a:a2:5b:99:08:16:91:2d:c1:6d:46:78: f9:6e:4a:28:5e:3f:e9:bf:81:bd:61:2e:2a:78:a7:0f:b9:a1: b1:a1:76:e1:12:73:52:c1:0c:08:6e:77:ec:b3:1e:92:47:21: f2:3a:13:9b:37:76:26:41:c8:19:6e:9f:bc:0f:41:7d:bf:e5: 3d:19:29:1b:55:36:73:be:85:c7:1c:79:34:56:5b:01:12:ee: 80:03:68:6f:cf:6d:3e:c8:86:fb:90:33:68:87:20:b3:28:3d: 4d:0f:23:9b:07:77:cb:41:8b:25:b7:8a:fd:23:e4:cf:71:c8: c7:38:76:ff:cb:c7:85:73:97:02:be:8d:b3:e7:15:9e:31:85: 33:24:7c:4e:b8:f1:05:cd:d9:15:45:36:21:4c:cb:c6:9e:1a: 44:47:c2:aa:43:de:43:3a:82:3d:a3:00:9a:91:f8:9a:8d:b3: a0:24:21:57:df:3f:97:ea:75:82:95:71:49:0e:d7:c0:53:45: 44:fd:43:24 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gCcht5rwtubbCWbjssYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDYyNDU2ZGE0ODQ0Y2M5ODkyOWI4YjhlM2FkODVjYTAzNTViNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7l4xUPVFufiZdMtkAMKlBx5KNFo ZvPaSu3AQVvRJb5wiJjyGK1s8jcUiiHKTmkUnKb8LH8wRmbiSflkX1vGuAX6DSv0 y6eS7BJ8DybhJtSV1vbOIV9UGhuOMs4XUCcjarZXtNTpItDussxPUFa1a8JB7kw7 sTluXM0R9QMa6ip3P5vR4eaJNsAZKOoCw+G+l3v6d5xmgi+knFNOuaJA1+Edd5BN TnAoLEkp5st5tDQ3AbIMRiMkfKiribn7Wxy7CNHBHvBoFxzB6mEkmmlDhMepVut9 pUlb7PGV6DIkw1SmJs9fJjtFtnArhJMT3VS0o4QK3tyPbQ8O0pBP11h8wwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGRiRW2khEzJiSm4uOOthcoDVbaHMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvWkdKRmJhU0VUTW1KS2JpNDQ2MkZ5Z05WdG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg94AuIw DQYJKoZIhvcNAQELBQADggEBAIZ8hE4XtoMhH7UrvP55n3bLd/ZQMLUtx7G7veMf Xfx1klcgDIE+cMaiN1BVnvCXWx1qy+OoYM1mdaTD2JqiW5kIFpEtwW1GePluSihe P+m/gb1hLip4pw+5obGhduESc1LBDAhud+yzHpJHIfI6E5s3diZByBlun7wPQX2/ 5T0ZKRtVNnO+hccceTRWWwES7oADaG/PbT7IhvuQM2iHILMoPU0PI5sHd8tBiyW3 iv0j5M9xyMc4dv/Lx4VzlwK+jbPnFZ4xhTMkfE648QXN2RVFNiFMy8aeGkRHwqpD 3kM6gj2jAJqR+JqNs6AkIVffP5fqdYKVcUkO18BTRUT9QyQ= -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:58 2026 by rpki-client