This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/rzIgn7Bc7AW1MuiRL3XQ-BG4jx0.roa File: rzIgn7Bc7AW1MuiRL3XQ-BG4jx0.roa (raw, json) Hash identifier: arDjnmmejpgyaF8cmbFn6SUiXjaKhcHxmQG+SV3R6fQ= Subject key identifier: AF:32:20:9F:B0:5C:EC:05:B5:32:E8:91:2F:75:D0:F8:11:B8:8F:1D Certificate issuer: /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Certificate serial: 019B7B36332E46B65824B0D6C4D92F5CA342 Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/rzIgn7Bc7AW1MuiRL3XQ-BG4jx0.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202181 IP address blocks: 2a0b:a8c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:33:2e:46:b6:58:24:b0:d6:c4:d9:2f:5c:a3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af32209fb05cec05b532e8912f75d0f811b88f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:11:af:da:87:de:bf:74:d7:d9:1c:36:4b: 76:13:95:69:2a:e3:16:cb:21:90:f8:43:e1:be:bd: a5:0f:2f:33:9c:70:db:15:ca:dd:6d:8a:84:f6:f0: ff:30:3e:58:c7:f1:b9:26:57:a9:25:4f:49:95:82: ac:5f:54:f7:98:eb:fd:91:e1:74:e9:39:03:df:82: b0:7c:76:ca:9a:00:2d:ba:a8:2b:69:83:2f:29:06: 4d:02:09:1e:cd:6e:32:2d:c9:b0:7b:f7:fd:52:a8: 8a:b0:a7:3d:63:71:e2:2c:b6:ee:4d:27:f3:92:67: d6:11:22:3e:d4:69:64:13:13:80:2f:37:52:bb:1d: da:29:30:92:15:95:ce:ba:64:48:79:f1:32:4a:06: 50:94:46:49:a6:c3:04:96:c2:c5:58:44:00:10:2c: 04:f0:0c:82:51:3d:24:34:64:30:ea:ab:95:aa:b0: 87:5c:60:78:96:fc:6e:03:d1:5b:4a:8a:08:c0:ff: 8b:c7:06:3e:5a:46:2f:2c:76:ec:fc:a6:fa:a7:51: 94:02:32:27:9e:d1:bc:69:17:85:f4:eb:cc:97:d2: 81:5a:b7:f3:b9:1a:92:27:cb:e7:a8:ec:8c:b1:4e: 8f:65:af:2d:c1:a6:6e:12:96:3c:fa:dc:99:10:71: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:20:9F:B0:5C:EC:05:B5:32:E8:91:2F:75:D0:F8:11:B8:8F:1D X509v3 Authority Key Identifier: keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/rzIgn7Bc7AW1MuiRL3XQ-BG4jx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:a8c0:2::/48 Signature Algorithm: sha256WithRSAEncryption 82:cd:6c:51:5a:9b:c5:f1:52:39:bb:f8:3c:e3:20:54:34:4c: a8:26:f5:3e:56:b0:93:00:18:21:f9:fa:78:85:60:74:27:af: 09:a6:14:05:21:ce:7f:c5:06:64:32:02:b5:34:89:df:94:fe: 63:aa:6f:fb:5b:4b:a9:2a:55:60:cf:ce:35:11:08:7c:4c:db: a1:e9:34:6a:74:99:58:81:2e:17:91:dc:2b:91:9c:28:c3:5c: 47:d2:e8:a9:6f:b9:cd:ca:16:fb:f1:ae:45:62:fd:66:79:5d: cf:5e:72:99:cc:e0:c8:40:eb:29:fe:b5:6a:da:88:89:ff:bb: 7e:d2:2c:0b:54:0a:b5:53:5e:ff:bc:dc:60:2b:83:d8:c3:f3: 47:37:18:93:91:e8:6a:50:1f:0d:93:08:a0:16:6a:e4:a9:48: eb:ce:68:ae:93:25:49:9f:24:c5:6d:eb:5f:6a:22:b2:63:c6: b6:55:00:3f:46:f8:cf:70:87:6f:b8:6d:91:60:ad:32:9b:c6: 69:d3:83:35:9c:d1:7d:44:eb:6b:71:b0:26:06:85:92:94:cc: d0:dc:e6:da:6f:ad:3f:02:77:11:9f:4e:ab:d1:91:da:54:46: 81:b0:78:61:ac:34:ee:40:2f:57:f1:16:f6:a8:8f:17:c4:a9: 64:d7:09:99 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7NjMuRrZYJLDWxNkvXKNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTJiNjA1YzU4ZTA3NDZhYWRjNWJmMGQ3Y2JjMzZjOTMw N2Y3NGQwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjMyMjA5ZmIwNWNlYzA1YjUzMmU4OTEyZjc1ZDBmODExYjg4ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfoRr9qH3r9019kcNkt2E5VpKuMW yyGQ+EPhvr2lDy8znHDbFcrdbYqE9vD/MD5Yx/G5JlepJU9JlYKsX1T3mOv9keF0 6TkD34KwfHbKmgAtuqgraYMvKQZNAgkezW4yLcmwe/f9UqiKsKc9Y3HiLLbuTSfz kmfWESI+1GlkExOALzdSux3aKTCSFZXOumRIefEySgZQlEZJpsMElsLFWEQAECwE 8AyCUT0kNGQw6quVqrCHXGB4lvxuA9FbSooIwP+LxwY+WkYvLHbs/Kb6p1GUAjIn ntG8aReF9OvMl9KBWrfzuRqSJ8vnqOyMsU6PZa8twaZuEpY8+tyZEHEmWwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFK8yIJ+wXOwFtTLokS910PgRuI8dMB8GA1UdIwQY MBaAFPiitgXFjgdGqtxb8NfLw2yTB/dNMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LSzJCY1dPQjBhcTNGdncxOHZEYkpNSDkwMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvMDc2ZDM3LTRhYjQtNGVjMy1hNGIw LTUyNDAyNWUxMzIwMi8xL3J6SWduN0JjN0FXMU11aVJMM1hRLUJHNGp4MC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWIvMDc2ZDM3LTRhYjQtNGVjMy1hNGIwLTUyNDAyNWUxMzIw Mi8xLzEtS0syQmNXT0IwYXEzRnZ3MTh2RGJKTUg5MDAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC6jA AAIwDQYJKoZIhvcNAQELBQADggEBAILNbFFam8XxUjm7+DzjIFQ0TKgm9T5WsJMA GCH5+niFYHQnrwmmFAUhzn/FBmQyArU0id+U/mOqb/tbS6kqVWDPzjURCHxM26Hp NGp0mViBLheR3CuRnCjDXEfS6Klvuc3KFvvxrkVi/WZ5Xc9ecpnM4MhA6yn+tWra iIn/u37SLAtUCrVTXv+83GArg9jD80c3GJOR6GpQHw2TCKAWauSpSOvOaK6TJUmf JMVt619qIrJjxrZVAD9G+M9wh2+4bZFgrTKbxmnTgzWc0X1E62txsCYGhZKUzNDc 5tpvrT8CdxGfTqvRkdpURoGweGGsNO5AL1fxFvaojxfEqWTXCZk= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:04 2026 by rpki-client