This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ZNJXyhnEDnFhUi6RbBUlv1u_5yA.roa File: ZNJXyhnEDnFhUi6RbBUlv1u_5yA.roa (raw, json) Hash identifier: OEzXutYJxPMErn4FH0GckTVLkfiRzX70yRyEhT+JWzQ= Subject key identifier: 64:D2:57:CA:19:C4:0E:71:61:52:2E:91:6C:15:25:BF:5B:BF:E7:20 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B358607E7F70E36F6E89D59D3AFC225 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ZNJXyhnEDnFhUi6RbBUlv1u_5yA.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208754 IP address blocks: 2a14:67c1:a110::/44 maxlen: 48 2a14:67c1:c600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:86:07:e7:f7:0e:36:f6:e8:9d:59:d3:af:c2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d257ca19c40e7161522e916c1525bf5bbfe720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:12:ae:a2:14:f6:67:7d:38:de:5a:86:5d: ef:bd:ce:cf:dd:76:1e:8b:7e:b0:f3:d3:d5:d9:1d: 94:94:d4:ff:17:3b:41:8a:da:e3:89:be:a8:47:bf: 97:5b:58:28:f2:e4:b9:c5:3b:34:42:6c:ad:d3:fd: 04:d0:c1:c7:78:54:71:69:11:74:64:86:f1:d1:38: 56:f0:03:e7:65:03:a1:a3:3c:45:f6:4a:0a:e7:35: 01:0f:21:65:96:97:08:c0:bd:11:23:34:f0:31:1b: 6d:34:fe:84:5f:56:07:3a:32:8a:65:1d:6c:30:88: 97:f0:13:00:4a:43:3b:27:cc:f3:fe:ff:f1:27:c9: 8c:92:9d:98:10:06:18:7b:fb:b4:0d:58:16:74:9b: 80:0f:36:0e:e7:fd:23:d7:b1:75:7f:a7:4e:d0:28: 31:1f:17:a7:6f:34:91:24:9c:da:8c:0a:70:0c:31: 0a:fd:29:99:89:11:ed:ae:92:80:73:a5:d1:fa:58: 00:51:9c:25:09:19:16:52:5f:6b:02:b8:fb:bd:98: e0:b3:5a:80:bc:b3:fd:8b:64:0b:73:14:40:eb:13: af:51:7e:45:7c:2a:34:3a:ac:5f:7d:e2:b9:e6:e8: 47:ae:c1:df:11:44:0c:9e:92:12:33:7b:ae:c8:d7: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D2:57:CA:19:C4:0E:71:61:52:2E:91:6C:15:25:BF:5B:BF:E7:20 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ZNJXyhnEDnFhUi6RbBUlv1u_5yA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a110::/44 2a14:67c1:c600::/40 Signature Algorithm: sha256WithRSAEncryption 63:d8:81:97:26:c9:c4:eb:86:e3:ad:73:9b:68:84:1d:eb:b7: f2:49:9e:13:d1:f0:8c:57:12:2f:a2:db:c8:63:17:08:34:59: f7:b2:0e:02:a3:62:5c:f7:ec:30:4e:b5:9d:5b:04:9b:6b:e8: 17:4f:7f:65:40:0d:49:b7:01:6f:67:6e:75:bd:c2:01:48:1d: ff:49:15:6d:48:3a:f9:40:b9:43:5e:cf:24:ab:3d:b1:d8:24: e5:1d:ec:b7:aa:12:09:9f:2e:e1:eb:dd:82:49:30:b1:b3:9c: 1c:b5:10:1d:d9:ab:4a:c8:9c:1f:af:14:5e:7a:8b:37:68:bb: f4:6f:dd:ae:d6:c4:04:d8:f7:87:3b:a3:ee:19:39:7b:75:b8: 3c:2e:f0:7c:5c:79:6c:f9:14:7d:2d:0d:f9:68:77:c2:2b:f1: 1d:60:e8:92:6e:d4:b3:fa:af:ea:ba:31:02:49:f0:30:70:6f: 4a:ac:ee:5f:bc:eb:4d:e0:c7:25:c8:ea:a7:dd:7c:0f:51:2b: 5a:7c:a5:23:eb:95:7d:c0:f2:8a:11:f4:20:9a:31:d0:92:54: 04:ab:ed:c8:4c:85:a9:95:52:fb:f5:d9:60:35:4a:f8:e0:39: 82:72:46:f8:f9:30:a0:03:1a:d8:a9:92:91:5f:30:b7:28:6b: 03:8f:73:13 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt7NYYH5/cONvbonVnTr8IlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQyNTdjYTE5YzQwZTcxNjE1MjJlOTE2YzE1MjViZjViYmZlNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjYSrqIU9md9ON5ahl3vvc7P3XYe i36w89PV2R2UlNT/FztBitrjib6oR7+XW1go8uS5xTs0Qmyt0/0E0MHHeFRxaRF0 ZIbx0ThW8APnZQOhozxF9koK5zUBDyFllpcIwL0RIzTwMRttNP6EX1YHOjKKZR1s MIiX8BMASkM7J8zz/v/xJ8mMkp2YEAYYe/u0DVgWdJuADzYO5/0j17F1f6dO0Cgx HxenbzSRJJzajApwDDEK/SmZiRHtrpKAc6XR+lgAUZwlCRkWUl9rArj7vZjgs1qA vLP9i2QLcxRA6xOvUX5FfCo0OqxffeK55uhHrsHfEUQMnpISM3uuyNdNEQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFGTSV8oZxA5xYVIukWwVJb9bv+cgMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvWk5KWHlobkVEbkZoVWk2UmJCVWx2MXVfNXlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhRnwaEQ AwYAKhRnwcYwDQYJKoZIhvcNAQELBQADggEBAGPYgZcmycTrhuOtc5tohB3rt/JJ nhPR8IxXEi+i28hjFwg0WfeyDgKjYlz37DBOtZ1bBJtr6BdPf2VADUm3AW9nbnW9 wgFIHf9JFW1IOvlAuUNezySrPbHYJOUd7LeqEgmfLuHr3YJJMLGznBy1EB3Zq0rI nB+vFF56izdou/Rv3a7WxATY94c7o+4ZOXt1uDwu8HxceWz5FH0tDflod8Ir8R1g 6JJu1LP6r+q6MQJJ8DBwb0qs7l+8603gxyXI6qfdfA9RK1p8pSPrlX3A8ooR9CCa MdCSVASr7chMhamVUvv12WA1SvjgOYJyRvj5MKADGtipkpFfMLcoawOPcxM= -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:00 2026 by rpki-client