This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa File: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (raw, json) Hash identifier: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs= Subject key identifier: 64:EF:AA:71:DB:CA:EC:1C:F3:78:B3:A4:32:DB:68:C5:8B:F1:97:81 Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Certificate serial: 019B79ED2C3E2D52B1C30EFA87E0FDC19A2D Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209460 IP address blocks: 2001:67c:918::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2c:3e:2d:52:b1:c3:0e:fa:87:e0:fd:c1:9a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64efaa71dbcaec1cf378b3a432db68c58bf19781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:f1:a3:5d:6a:8d:1e:8b:13:8f:ff:c6:3f: 24:9e:f6:c4:5e:b3:7d:00:7f:2a:0e:bd:04:9e:c9: 80:a1:7f:83:61:b0:44:3d:97:c0:fc:20:0b:01:3a: c1:6f:68:fd:cf:8a:ae:a0:ff:98:32:f3:f8:fb:7c: 3f:db:1c:03:94:79:b4:52:00:17:51:d5:c0:3c:67: b8:96:e7:44:7a:99:91:ac:1d:d6:0d:40:1a:5a:e3: 97:e5:1e:69:79:9e:39:ea:ea:38:4f:2b:fc:1b:ea: 19:32:ff:ef:4c:6d:51:f9:00:ff:5a:db:67:1c:31: 2f:aa:c4:8f:1a:ad:7d:93:74:a3:15:d3:f5:50:fb: 44:e4:e6:02:8c:05:c4:fc:12:e8:5d:52:cc:e8:1b: eb:89:d0:f0:a5:87:7d:ec:c6:1c:c7:45:9d:d9:a8: 0e:d2:62:49:87:2e:c9:8a:58:5e:e8:f5:6e:bf:b5: c0:df:dd:34:fa:89:f1:e6:c6:bb:b9:7a:e1:73:87: 63:f4:1a:21:fb:d2:4a:df:df:a2:08:f6:c7:b4:f0: 3d:57:3c:53:d3:0f:09:0e:7b:1f:a1:95:ad:88:13: 45:db:f8:ab:4e:7a:eb:f9:df:77:58:3e:8e:aa:af: e0:12:5d:b6:01:ee:dd:f8:99:e8:42:f5:4a:08:69: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EF:AA:71:DB:CA:EC:1C:F3:78:B3:A4:32:DB:68:C5:8B:F1:97:81 X509v3 Authority Key Identifier: keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:918::/48 Signature Algorithm: sha256WithRSAEncryption c9:3d:82:bf:de:cb:77:0f:0a:e3:78:42:fb:a3:44:1f:e0:53: de:64:c7:7d:7e:57:3d:50:f5:fc:eb:1c:13:49:54:6b:7f:f2: 25:cf:c6:9f:88:13:66:ef:a5:69:79:eb:30:90:69:c7:c4:d1: 61:2d:d1:7d:9d:1e:ec:ee:90:a3:db:77:19:77:c5:38:1c:f9: 58:6c:73:5b:2e:da:79:96:a2:0f:e3:a0:81:33:8a:d1:9d:49: b7:79:d5:dc:81:81:06:2d:e8:52:48:86:f9:81:8b:07:86:0b: 99:1d:7a:5f:61:be:65:30:dc:42:51:d2:6f:e0:ee:04:cc:ee: f0:56:2d:0b:93:0c:85:08:24:9d:3b:0d:40:9b:e0:ab:28:0c: fe:eb:7d:47:b3:9e:84:c4:41:d5:f7:fd:16:24:73:55:74:11: 88:6d:1e:5b:cb:47:33:62:05:87:00:9f:b8:6f:a8:da:34:f6: 92:e1:50:5e:f9:9d:5e:de:bc:10:e8:ba:66:5c:dd:17:72:fc: 61:e3:7c:68:ad:4b:ef:4f:32:1e:50:2a:1c:7a:a1:48:02:4d: 3a:33:de:f7:36:6a:bf:0a:29:d7:e4:83:0a:74:8b:1b:9e:22: ba:13:49:82:ff:d7:85:40:dc:62:b5:8b:5c:63:47:94:f2:3c: a2:2f:b7:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57Sw+LVKxww76h+D9wZotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx NTkzNzgwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGVmYWE3MWRiY2FlYzFjZjM3OGIzYTQzMmRiNjhjNThiZjE5NzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXjxo11qjR6LE4//xj8knvbEXrN9 AH8qDr0EnsmAoX+DYbBEPZfA/CALATrBb2j9z4quoP+YMvP4+3w/2xwDlHm0UgAX UdXAPGe4ludEepmRrB3WDUAaWuOX5R5peZ456uo4Tyv8G+oZMv/vTG1R+QD/Wttn HDEvqsSPGq19k3SjFdP1UPtE5OYCjAXE/BLoXVLM6BvridDwpYd97MYcx0Wd2agO 0mJJhy7Jilhe6PVuv7XA3900+onx5sa7uXrhc4dj9Boh+9JK39+iCPbHtPA9VzxT 0w8JDnsfoZWtiBNF2/irTnrr+d93WD6Oqq/gEl22Ae7d+JnoQvVKCGm1twIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGTvqnHbyuwc83izpDLbaMWL8ZeBMB8GA1UdIwQY MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt OTNlOTQwM2ViMDE5LzEvWk8tcWNkdks3Qnp6ZUxPa010dG94WXZ4bDRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5 LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAkY MA0GCSqGSIb3DQEBCwUAA4IBAQDJPYK/3st3DwrjeEL7o0Qf4FPeZMd9flc9UPX8 6xwTSVRrf/Ilz8afiBNm76VpeeswkGnHxNFhLdF9nR7s7pCj23cZd8U4HPlYbHNb Ltp5lqIP46CBM4rRnUm3edXcgYEGLehSSIb5gYsHhguZHXpfYb5lMNxCUdJv4O4E zO7wVi0LkwyFCCSdOw1Am+CrKAz+631Hs56ExEHV9/0WJHNVdBGIbR5by0czYgWH AJ+4b6jaNPaS4VBe+Z1e3rwQ6LpmXN0Xcvxh43xorUvvTzIeUCoceqFIAk06M973 Nmq/CinX5IMKdIsbniK6E0mC/9eFQNxitYtcY0eU8jyiL7cT -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:00 2026 by rpki-client