This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/ZPfnhEjHi4NI36tu0dLcrPzoAig.roa File: ZPfnhEjHi4NI36tu0dLcrPzoAig.roa (raw, json) Hash identifier: xvjCHRDS1lEyFHZogtyexGsEZ/ooA4FqTv+iQbKhLEI= Subject key identifier: 64:F7:E7:84:48:C7:8B:83:48:DF:AB:6E:D1:D2:DC:AC:FC:E8:02:28 Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Certificate serial: 019C04A82529D617EA6A6E673789DC040FDF Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/ZPfnhEjHi4NI36tu0dLcrPzoAig.roa Signing time: Wed 28 Jan 2026 12:50:54 +0000 ROA not before: Wed 28 Jan 2026 12:50:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210152 IP address blocks: 2001:67c:c14::/48 maxlen: 48 2001:67c:e88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:a8:25:29:d6:17:ea:6a:6e:67:37:89:dc:04:0f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46 Validity Not Before: Jan 28 12:50:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64f7e78448c78b8348dfab6ed1d2dcacfce80228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:fc:a8:a9:11:e0:30:3f:45:3f:cb:9e:12: 24:85:40:87:89:cc:04:1c:24:99:3e:16:48:8a:13: c8:f9:cb:4e:c9:33:06:6a:a3:c7:64:93:86:00:ed: ae:76:12:9f:ee:1a:e0:ef:1e:1e:88:3c:17:42:a7: 00:e1:c4:c0:97:7c:22:0a:74:18:63:c6:73:c0:7d: 7c:ab:21:01:26:41:f0:99:b3:27:bd:e0:7e:f4:90: f4:3f:df:7c:d6:f4:3f:f6:cd:85:8f:53:77:a8:6b: 68:0b:9a:d6:29:6a:04:de:83:81:34:40:81:cf:2f: 2b:ab:83:94:f6:41:49:ab:69:c4:5e:f9:e4:31:43: 98:4f:4b:b5:05:2e:16:aa:36:69:e3:c6:4a:bc:a6: 7a:f4:eb:c9:f0:05:80:a8:9c:6d:b4:2d:37:fd:e7: c7:0f:d0:3c:11:42:2e:01:e1:5e:94:d0:10:af:1c: 44:92:c4:de:cb:19:0b:d3:7b:7a:29:ce:dc:41:6a: 09:aa:5b:ca:98:98:e2:6f:c0:be:c1:2d:60:f4:f9: 5c:86:b1:00:59:55:d4:6b:90:f6:37:25:45:ae:ff: 70:de:ba:c7:60:5d:ab:b2:be:7e:bd:fe:9e:6b:84: 20:c9:25:c4:c6:35:65:06:2b:6f:82:a6:7a:e6:e2: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F7:E7:84:48:C7:8B:83:48:DF:AB:6E:D1:D2:DC:AC:FC:E8:02:28 X509v3 Authority Key Identifier: keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/ZPfnhEjHi4NI36tu0dLcrPzoAig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c14::/48 2001:67c:e88::/48 Signature Algorithm: sha256WithRSAEncryption 33:3d:1e:66:1f:91:bb:a9:2d:7f:2c:36:73:b2:ee:73:a3:3c: ff:87:13:50:47:bc:7f:67:e9:2f:bc:d0:bd:d8:2d:ad:12:99: 6f:f5:4b:84:45:ff:82:72:eb:1b:84:fc:64:e5:be:53:83:ba: 84:9a:53:85:73:72:2b:03:be:f1:02:6f:7a:6c:e3:61:08:88: 1c:f1:4a:a2:cb:91:dc:70:95:75:93:4e:8c:3b:dd:08:b3:79: 3f:c7:7b:fa:bf:8b:40:02:ad:41:3b:7e:43:73:6a:b8:36:37: 06:bd:f3:f1:1d:a0:e5:0a:dd:c5:82:dc:df:c1:70:eb:0d:5d: 50:b3:78:cf:23:8a:f4:31:25:28:7c:96:f4:32:9a:66:ee:c7: 45:49:89:5b:f1:44:7a:29:c8:fe:34:b7:54:8e:75:34:9d:1b: 2d:1b:0d:6b:b9:20:a1:6f:9a:96:35:bf:f7:2b:72:22:17:0d: ef:0c:c9:e9:62:af:2c:39:a8:58:e4:63:7b:2d:23:9e:5a:ab: d5:08:3b:9b:e2:9b:e4:4a:b2:9c:dd:44:ba:21:95:a0:f4:67: dc:05:01:df:80:30:1d:0b:68:37:83:14:7c:74:60:e6:ca:95: 5f:b5:aa:4a:bf:9b:f4:b5:6f:bd:bc:b4:1c:60:47:ff:6b:ec: e3:cf:65:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwEqCUp1hfqam5nN4ncBA/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZmIwZDU0OGM0OWI2YTU2MThhNGQzYjNjMWRhNGMzZDE0 NGJmNDYwHhcNMjYwMTI4MTI1MDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGY3ZTc4NDQ4Yzc4YjgzNDhkZmFiNmVkMWQyZGNhY2ZjZTgwMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLX8qKkR4DA/RT/LnhIkhUCHicwE HCSZPhZIihPI+ctOyTMGaqPHZJOGAO2udhKf7hrg7x4eiDwXQqcA4cTAl3wiCnQY Y8ZzwH18qyEBJkHwmbMnveB+9JD0P9981vQ/9s2Fj1N3qGtoC5rWKWoE3oOBNECB zy8rq4OU9kFJq2nEXvnkMUOYT0u1BS4WqjZp48ZKvKZ69OvJ8AWAqJxttC03/efH D9A8EUIuAeFelNAQrxxEksTeyxkL03t6Kc7cQWoJqlvKmJjib8C+wS1g9PlchrEA WVXUa5D2NyVFrv9w3rrHYF2rsr5+vf6ea4QgySXExjVlBitvgqZ65uLNxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGT354RIx4uDSN+rbtHS3Kz86AIoMB8GA1UdIwQY MBaAFCv7DVSMSbalYYpNOzwdpMPRRL9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2Mt MTM3MTA5MzY5NjIxLzEvWlBmbmhFakhpNE5JMzZ0dTBkTGNyUHpvQWlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mNWQwZjktY2EyZi00YjZlLTkxN2MtMTM3MTA5MzY5NjIx LzEvS19zTlZJeEp0cVZoaWswN1BCMmt3OUZFdjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfAwU AwcAIAEGfA6IMA0GCSqGSIb3DQEBCwUAA4IBAQAzPR5mH5G7qS1/LDZzsu5zozz/ hxNQR7x/Z+kvvNC92C2tEplv9UuERf+CcusbhPxk5b5Tg7qEmlOFc3IrA77xAm96 bONhCIgc8Uqiy5HccJV1k06MO90Is3k/x3v6v4tAAq1BO35Dc2q4NjcGvfPxHaDl Ct3FgtzfwXDrDV1Qs3jPI4r0MSUofJb0Mppm7sdFSYlb8UR6Kcj+NLdUjnU0nRst Gw1ruSChb5qWNb/3K3IiFw3vDMnpYq8sOahY5GN7LSOeWqvVCDub4pvkSrKc3US6 IZWg9GfcBQHfgDAdC2g3gxR8dGDmypVftapKv5v0tW+9vLQcYEf/a+zjz2Xh -----END CERTIFICATE-----Generated at Thu Jan 29 03:57:25 2026 by rpki-client