This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/zUZH8frHV9LyqR8uuy29ut30zGA.roa File: zUZH8frHV9LyqR8uuy29ut30zGA.roa (raw, json) Hash identifier: ZtNFrARi4yUhBACRab5+tIfsO4m0wuC3iZpaWR0rbTc= Subject key identifier: CD:46:47:F1:FA:C7:57:D2:F2:A9:1F:2E:BB:2D:BD:BA:DD:F4:CC:60 Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Certificate serial: 019B7758D0CC29B2F68D10E2FCE4601602A2 Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/zUZH8frHV9LyqR8uuy29ut30zGA.roa Signing time: Thu 01 Jan 2026 02:17:47 +0000 ROA not before: Thu 01 Jan 2026 02:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212518 IP address blocks: 2001:678:e8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d0:cc:29:b2:f6:8d:10:e2:fc:e4:60:16:02:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd4647f1fac757d2f2a91f2ebb2dbdbaddf4cc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:5f:12:b4:37:b8:36:22:60:04:07:09:75: 87:8c:67:e7:e5:63:6a:52:61:38:34:06:5b:50:54: 7b:e9:57:33:75:2a:02:71:09:dd:8b:01:c4:da:68: e8:6b:98:c1:69:78:d7:a7:b8:f5:7b:f0:d5:38:3b: 3e:22:b5:10:03:47:71:5b:8b:32:46:ec:96:cd:9f: 2a:bf:66:13:2b:fd:8e:6e:b0:52:db:f1:7b:0b:b5: 01:94:4a:e8:9d:be:03:0d:03:ef:37:02:77:c7:6e: 0b:24:55:28:3b:99:7d:10:4f:79:fd:d5:1a:05:f1: ef:51:c1:5c:0c:f2:1a:99:8e:67:f1:69:f1:d8:60: e6:91:93:42:10:c1:2f:2f:88:0a:1d:41:3f:e3:8d: c0:5e:b9:c0:3c:39:58:87:05:88:67:60:fd:3d:49: 21:ec:0c:c5:06:78:98:62:18:e1:ae:4d:09:40:80: 93:6c:ed:9d:e6:4b:6b:96:c9:72:1c:79:ce:ab:67: 97:49:9d:45:2e:7d:5b:34:41:55:88:1f:ef:2e:24: 2d:81:01:c7:03:b7:2a:19:cb:70:da:b8:8b:43:fc: 2a:90:56:30:c7:f7:75:31:84:c6:fe:50:d7:52:4d: ec:1b:73:96:11:be:3b:fd:e9:e5:65:6d:f8:ea:ea: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:46:47:F1:FA:C7:57:D2:F2:A9:1F:2E:BB:2D:BD:BA:DD:F4:CC:60 X509v3 Authority Key Identifier: keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/zUZH8frHV9LyqR8uuy29ut30zGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e8c::/48 Signature Algorithm: sha256WithRSAEncryption 44:5e:c1:57:0f:1f:66:a4:82:cf:28:db:37:c0:17:07:25:c5: a1:72:54:fe:94:4b:8f:07:63:de:fd:ff:fe:a9:ff:a2:fe:a0: 10:77:8e:8f:d2:b6:70:1f:cc:8f:0a:71:24:4e:af:d5:47:33: 32:27:7e:6f:69:93:ed:e8:b4:0d:6d:f1:70:4d:86:fa:ae:e2: a8:26:fe:99:f3:62:53:4a:7f:b5:94:6e:8b:76:dd:75:07:03: 90:10:c9:c1:98:92:f1:39:d1:b6:57:98:19:21:0b:9c:ad:c1: 79:98:83:54:66:92:f1:82:74:cf:09:38:ad:40:44:2c:d8:09: b9:ec:48:96:3d:4e:b0:5f:d7:76:3c:64:5a:e6:6f:b6:c4:d1: a2:0c:a7:99:b6:70:5b:63:30:be:68:f5:99:69:2d:61:3c:a2: c4:4d:e0:13:32:20:4e:11:7e:76:6f:06:12:81:0f:9e:dc:ae: 92:33:be:83:7e:eb:86:58:38:f3:ad:76:f4:9a:6b:18:e2:9f: 1b:d0:22:f3:69:f9:13:dc:33:af:6f:f3:e9:ed:30:fa:84:c8: 55:b9:43:de:f8:0e:e3:12:12:9d:ee:62:0e:80:be:7d:71:16: 1c:1d:b9:03:bf:00:65:f6:4c:a6:1c:d8:ad:9d:a7:80:26:a5: 11:de:63:65 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WNDMKbL2jRDi/ORgFgKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzM2VlYjlmN2FiYTE5ZTAzYjEzNjZkYWIwODgzZjM2NTNm YzAzYmUwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDQ2NDdmMWZhYzc1N2QyZjJhOTFmMmViYjJkYmRiYWRkZjRjYzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVpfErQ3uDYiYAQHCXWHjGfn5WNq UmE4NAZbUFR76VczdSoCcQndiwHE2mjoa5jBaXjXp7j1e/DVODs+IrUQA0dxW4sy RuyWzZ8qv2YTK/2ObrBS2/F7C7UBlEronb4DDQPvNwJ3x24LJFUoO5l9EE95/dUa BfHvUcFcDPIamY5n8Wnx2GDmkZNCEMEvL4gKHUE/443AXrnAPDlYhwWIZ2D9PUkh 7AzFBniYYhjhrk0JQICTbO2d5ktrlslyHHnOq2eXSZ1FLn1bNEFViB/vLiQtgQHH A7cqGctw2riLQ/wqkFYwx/d1MYTG/lDXUk3sG3OWEb47/enlZW346uoekQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM1GR/H6x1fS8qkfLrstvbrd9MxgMB8GA1UdIwQY MBaAFBM+6596uhngOxNm2rCIPzZT/AO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEt NjZiNjI0ZWFlNzhjLzEvelVaSDhmckhWOUx5cVI4dXV5Mjl1dDMwekdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEtNjZiNjI0ZWFlNzhj LzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA6M MA0GCSqGSIb3DQEBCwUAA4IBAQBEXsFXDx9mpILPKNs3wBcHJcWhclT+lEuPB2Pe /f/+qf+i/qAQd46P0rZwH8yPCnEkTq/VRzMyJ35vaZPt6LQNbfFwTYb6ruKoJv6Z 82JTSn+1lG6Ldt11BwOQEMnBmJLxOdG2V5gZIQucrcF5mINUZpLxgnTPCTitQEQs 2Am57EiWPU6wX9d2PGRa5m+2xNGiDKeZtnBbYzC+aPWZaS1hPKLETeATMiBOEX52 bwYSgQ+e3K6SM76DfuuGWDjzrXb0mmsY4p8b0CLzafkT3DOvb/Pp7TD6hMhVuUPe +A7jEhKd7mIOgL59cRYcHbkDvwBl9kymHNitnaeAJqUR3mNl -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:40 2026 by rpki-client