This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/kZ2zCgtZqsgHhznrEUljDoFc33Q.roa File: kZ2zCgtZqsgHhznrEUljDoFc33Q.roa (raw, json) Hash identifier: JcAwhqXqLYtk0QAhwwtUxKaUrIq/XlRTymYXRNVMDuo= Subject key identifier: 91:9D:B3:0A:0B:59:AA:C8:07:87:39:EB:11:49:63:0E:81:5C:DF:74 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8034E28F40F8D0CB3BCC705BF1BB66 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/kZ2zCgtZqsgHhznrEUljDoFc33Q.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215592 IP address blocks: 2a0f:7803:f830::/44 maxlen: 48 2a0f:7803:fb10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:34:e2:8f:40:f8:d0:cb:3b:cc:70:5b:f1:bb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=919db30a0b59aac8078739eb1149630e815cdf74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:26:b7:5d:e2:41:fd:0e:63:7d:13:29:45: e4:39:1f:9c:b7:82:e4:9b:8d:bc:be:f5:08:48:80: f3:d3:42:2f:2c:97:3d:b1:67:6c:d8:4d:d5:30:69: 42:38:8d:d3:9b:0d:05:91:5d:a9:79:80:12:ff:a3: 1c:a2:9b:ae:e0:2c:31:22:dc:f4:d5:fc:82:11:5b: 6c:41:0b:ec:59:2a:15:de:80:bf:7f:16:aa:99:48: 47:b8:70:e0:fa:ec:00:c2:9a:e0:db:cb:05:d7:3b: 09:1d:df:3a:64:08:e9:77:f2:e0:47:ba:5b:6d:71: 94:d5:fa:54:ec:bb:48:9b:c2:5f:14:40:d9:ee:0a: b8:c8:dc:c4:58:75:30:74:fe:15:1a:1b:bb:5c:95: 82:31:76:84:64:d2:0c:2b:65:e7:2d:0c:16:ef:07: e2:95:a2:1c:47:5d:51:27:3d:eb:0d:04:d2:7d:f8: 05:a4:69:eb:3d:32:19:55:83:43:85:b2:47:bb:89: 22:7a:9e:ca:e9:68:5f:62:e2:2b:eb:62:df:b4:ef: a8:ce:38:08:a0:34:18:85:a9:a3:dd:7a:be:22:91: 2c:63:81:27:ab:02:39:58:c7:00:f4:57:b2:17:34: dd:8d:4d:8a:2b:ab:13:e9:22:ac:e2:6b:36:5b:ec: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9D:B3:0A:0B:59:AA:C8:07:87:39:EB:11:49:63:0E:81:5C:DF:74 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/kZ2zCgtZqsgHhznrEUljDoFc33Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f830::/44 2a0f:7803:fb10::/48 Signature Algorithm: sha256WithRSAEncryption 16:a9:2a:d8:13:76:11:d2:b7:da:50:6e:d7:96:e2:a5:97:6c: 71:04:2e:af:c6:fb:09:4a:a4:da:09:ac:8d:60:9d:2c:df:64: c7:59:a6:0c:3c:66:74:0f:69:8e:0b:5c:4f:33:af:67:5d:75: 35:ce:49:d8:6c:79:77:19:d9:7e:19:93:da:3b:af:9f:86:09: d6:dd:ff:da:89:93:9c:24:bd:ad:8e:78:1e:bc:26:f0:b2:3d: 13:27:d2:0c:1a:ed:43:f5:bc:5d:f1:9b:fc:9d:47:76:56:57: 5d:35:26:f5:86:0e:5f:e3:de:a7:4b:59:a6:b7:e3:4e:6b:a1: e8:b9:38:15:c7:49:42:cb:ed:4b:ad:30:51:19:dd:7d:8d:24: 7d:0a:74:5b:2f:f8:5e:92:ee:9b:8a:69:c0:89:29:fb:cc:57: be:fe:ce:47:3c:a0:58:da:78:24:3d:f1:0f:c7:79:f0:1e:ca: 12:3c:6b:09:71:78:61:32:66:59:60:f7:db:50:45:8d:8d:2e: 60:81:7b:e8:d8:82:b5:2e:b2:71:a5:53:41:55:9d:86:4b:62: 70:7f:d6:d2:57:d3:f9:be:f7:b6:8c:6b:a0:67:8e:55:8e:67: c8:e9:96:39:33:6d:47:b3:44:c0:5b:98:3e:fa:21:e4:0e:b1: 4f:2d:cb:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gDTij0D40Ms7zHBb8btmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTlkYjMwYTBiNTlhYWM4MDc4NzM5ZWIxMTQ5NjMwZTgxNWNkZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt20mt13iQf0OY30TKUXkOR+ct4Lk m428vvUISIDz00IvLJc9sWds2E3VMGlCOI3Tmw0FkV2peYAS/6Mcopuu4CwxItz0 1fyCEVtsQQvsWSoV3oC/fxaqmUhHuHDg+uwAwprg28sF1zsJHd86ZAjpd/LgR7pb bXGU1fpU7LtIm8JfFEDZ7gq4yNzEWHUwdP4VGhu7XJWCMXaEZNIMK2XnLQwW7wfi laIcR11RJz3rDQTSffgFpGnrPTIZVYNDhbJHu4kiep7K6WhfYuIr62LftO+ozjgI oDQYhamj3Xq+IpEsY4EnqwI5WMcA9FeyFzTdjU2KK6sT6SKs4ms2W+xfswIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJGdswoLWarIB4c56xFJYw6BXN90MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEva1oyekNndFpxc2dIaHpuckVVbGpEb0ZjMzNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg94A/gw AwcAKg94A/sQMA0GCSqGSIb3DQEBCwUAA4IBAQAWqSrYE3YR0rfaUG7XluKll2xx BC6vxvsJSqTaCayNYJ0s32THWaYMPGZ0D2mOC1xPM69nXXU1zknYbHl3Gdl+GZPa O6+fhgnW3f/aiZOcJL2tjngevCbwsj0TJ9IMGu1D9bxd8Zv8nUd2VlddNSb1hg5f 496nS1mmt+NOa6HouTgVx0lCy+1LrTBRGd19jSR9CnRbL/heku6bimnAiSn7zFe+ /s5HPKBY2ngkPfEPx3nwHsoSPGsJcXhhMmZZYPfbUEWNjS5ggXvo2IK1LrJxpVNB VZ2GS2Jwf9bSV9P5vve2jGugZ45VjmfI6ZY5M21Hs0TAW5g++iHkDrFPLcuQ -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:54 2026 by rpki-client