This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ZLCqigukuhkaD1O70XGBOcK1uY0.roa File: ZLCqigukuhkaD1O70XGBOcK1uY0.roa (raw, json) Hash identifier: 9ChKshDxj7bAEBndJ2OxxkXzajypUsUMREspMQVFvtM= Subject key identifier: 64:B0:AA:8A:0B:A4:BA:19:1A:0F:53:BB:D1:71:81:39:C2:B5:B9:8D Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B359010013314D36BF368A9FF81CC52 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ZLCqigukuhkaD1O70XGBOcK1uY0.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214055 IP address blocks: 2a14:67c1:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:90:10:01:33:14:d3:6b:f3:68:a9:ff:81:cc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64b0aa8a0ba4ba191a0f53bbd1718139c2b5b98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:c5:39:a9:af:a2:0d:47:96:34:30:a4:67: cc:96:84:90:45:c4:07:7b:88:80:b0:c3:b0:b1:2d: 3a:3b:c3:90:2c:91:63:15:d4:05:48:83:15:8b:77: cc:64:31:03:ae:83:cd:21:e4:90:74:ef:14:88:da: 02:01:87:66:78:e6:7a:9b:75:24:6d:8e:3d:50:5e: 22:be:8b:c5:3c:a4:54:61:18:a0:35:f5:86:8f:d0: f9:44:ac:b7:47:a1:ba:ba:c6:41:20:65:a8:35:36: 7f:3a:3f:80:7a:47:12:13:04:7b:16:b1:ed:5d:be: 46:82:23:51:a0:ed:0c:6f:f2:1f:64:6c:ce:d0:7b: 2a:90:9f:0e:54:57:42:0e:ca:a2:ad:f3:17:3a:ff: 81:51:8d:13:7b:a2:d4:f2:ab:78:de:7d:8d:92:20: 29:ca:d2:3b:9d:cb:49:f1:f3:d3:f0:fb:e2:26:ca: c0:cb:d8:c6:cd:f0:6c:66:72:8e:dc:f2:99:1d:36: ca:8b:23:f7:0c:b2:78:5d:b7:1b:b5:95:e8:81:c3: b3:39:76:3d:20:92:dd:ea:e3:58:57:90:d2:68:bc: 5a:0b:ff:3b:16:76:1d:18:f0:66:1e:12:f4:09:3e: 79:9c:3b:ff:60:39:a9:5b:53:7f:9a:5d:19:9d:7d: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B0:AA:8A:0B:A4:BA:19:1A:0F:53:BB:D1:71:81:39:C2:B5:B9:8D X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ZLCqigukuhkaD1O70XGBOcK1uY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:300::/40 Signature Algorithm: sha256WithRSAEncryption 98:a6:8b:3a:9e:0c:4e:ff:ee:aa:68:b6:dc:6d:fb:97:a6:0c: 9c:39:b0:27:d6:f9:2c:fb:e1:48:12:aa:c0:7b:f4:af:cf:c4: 6c:b5:8f:05:fd:55:2f:96:51:b4:f5:fb:fb:85:51:9b:76:e2: f4:8a:db:e7:bc:51:ba:67:54:12:3c:45:a1:f0:e0:54:ac:1e: 55:1e:05:d3:85:73:0e:db:ab:b3:0f:e4:d6:a5:e8:b7:8e:08: ba:93:02:ab:b1:77:a2:14:01:c6:2b:5d:66:af:d9:5d:d0:ab: a5:c9:e0:1f:f5:24:7f:5a:30:9c:35:3e:21:da:7d:a2:ed:c2: ad:2d:13:cf:9b:6c:0c:40:0a:8f:bf:bc:91:5c:87:01:8b:7e: 97:0a:18:76:d1:77:26:85:54:98:3b:b7:2f:c8:7e:65:0d:58: 7d:44:6f:52:22:d9:9a:78:30:12:55:70:c8:01:a9:e0:ca:04: b6:01:2d:6e:9c:7b:f0:87:23:d1:3f:d4:19:31:33:fc:1d:1e: f0:31:e5:a7:fc:c4:6a:34:1b:6c:40:7c:70:89:9b:8b:80:55: 35:86:a5:ca:d9:d3:a0:06:76:f8:01:d4:cf:f3:4e:bd:58:01: d6:49:25:7a:c9:6d:cd:c2:16:fd:e0:7e:50:e5:15:db:96:18: eb:44:84:c0 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NZAQATMU02vzaKn/gcxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGIwYWE4YTBiYTRiYTE5MWEwZjUzYmJkMTcxODEzOWMyYjViOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yXFOamvog1HljQwpGfMloSQRcQH e4iAsMOwsS06O8OQLJFjFdQFSIMVi3fMZDEDroPNIeSQdO8UiNoCAYdmeOZ6m3Uk bY49UF4ivovFPKRUYRigNfWGj9D5RKy3R6G6usZBIGWoNTZ/Oj+AekcSEwR7FrHt Xb5GgiNRoO0Mb/IfZGzO0HsqkJ8OVFdCDsqirfMXOv+BUY0Te6LU8qt43n2NkiAp ytI7nctJ8fPT8PviJsrAy9jGzfBsZnKO3PKZHTbKiyP3DLJ4XbcbtZXogcOzOXY9 IJLd6uNYV5DSaLxaC/87FnYdGPBmHhL0CT55nDv/YDmpW1N/ml0ZnX1U9wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGSwqooLpLoZGg9Tu9FxgTnCtbmNMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvWkxDcWlndWt1aGthRDFPNzBYR0JPY0sxdVkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwQMw DQYJKoZIhvcNAQELBQADggEBAJimizqeDE7/7qpottxt+5emDJw5sCfW+Sz74UgS qsB79K/PxGy1jwX9VS+WUbT1+/uFUZt24vSK2+e8UbpnVBI8RaHw4FSsHlUeBdOF cw7bq7MP5Nal6LeOCLqTAquxd6IUAcYrXWav2V3Qq6XJ4B/1JH9aMJw1PiHafaLt wq0tE8+bbAxACo+/vJFchwGLfpcKGHbRdyaFVJg7ty/IfmUNWH1Eb1Ii2Zp4MBJV cMgBqeDKBLYBLW6ce/CHI9E/1BkxM/wdHvAx5af8xGo0G2xAfHCJm4uAVTWGpcrZ 06AGdvgB1M/zTr1YAdZJJXrJbc3CFv3gflDlFduWGOtEhMA= -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:31 2026 by rpki-client