This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/PZJni5TxpYn092_2LgQ4TzNg1Vk.roa
File: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (raw, json)
Hash identifier: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=
Subject key identifier: 3D:92:67:8B:94:F1:A5:89:F4:F7:6F:F6:2E:04:38:4F:33:60:D5:59
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 019B7CEE53C50166B27C4116149DA16CC314
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/PZJni5TxpYn092_2LgQ4TzNg1Vk.roa
Signing time: Fri 02 Jan 2026 04:19:12 +0000
ROA not before: Fri 02 Jan 2026 04:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200334
IP address blocks: 2a0f:6580:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:53:c5:01:66:b2:7c:41:16:14:9d:a1:6c:c3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 04:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d92678b94f1a589f4f76ff62e04384f3360d559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:86:26:0c:cd:33:92:cb:8a:11:95:1c:32:
7a:c7:56:fc:2c:36:0e:d3:13:6c:7b:cb:46:e3:94:
98:e4:84:f0:b8:f3:49:16:1e:67:01:0e:34:63:cb:
89:e8:fe:2c:db:4f:a7:19:ad:ef:d0:aa:6a:2f:fb:
6f:58:3a:c6:77:3e:1c:17:d3:77:69:d5:c2:8e:9d:
e4:e5:d2:3e:92:8c:96:19:30:5d:21:31:66:ac:9a:
95:16:7c:b7:25:75:b9:cd:fb:19:2f:82:10:b7:b9:
06:fc:38:bb:d8:be:d1:1d:db:75:39:dd:f3:06:bf:
1d:42:5f:56:50:e1:b4:95:06:88:67:c9:9a:40:b7:
6f:36:ff:58:1a:34:ea:dd:c1:59:6a:a6:c1:ec:a2:
7a:f0:fb:5f:70:6f:89:85:bb:15:4b:b9:4e:4e:9d:
ca:19:b7:8e:cc:ba:bd:7c:1c:b2:4c:cc:c6:d5:b8:
9f:84:62:a0:10:57:bd:cd:32:db:7e:bc:d4:37:65:
15:48:1c:d0:b7:4c:e4:18:19:29:6c:4a:f6:40:c6:
da:bf:fd:09:31:6f:29:18:21:7e:6c:30:e5:b1:f4:
d5:c6:86:bc:78:44:23:29:81:27:c1:3f:55:51:a1:
af:f6:32:00:0a:c5:27:42:be:7e:3b:fa:64:8b:58:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:67:8B:94:F1:A5:89:F4:F7:6F:F6:2E:04:38:4F:33:60:D5:59
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/PZJni5TxpYn092_2LgQ4TzNg1Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:104::/48
Signature Algorithm: sha256WithRSAEncryption
69:f9:a9:75:b3:b8:61:41:29:5f:33:ba:19:cb:cf:b1:9c:63:
72:23:d8:a7:16:96:7e:4f:35:e4:f8:97:d1:ef:0a:30:0d:a5:
4e:d9:b0:33:06:c1:cd:b3:b9:ef:b2:f2:97:ba:bf:4a:88:7e:
87:86:85:75:04:80:1b:b5:20:28:f9:0a:93:c8:69:25:f0:2d:
0e:c4:b8:7b:c3:dd:df:dc:a2:f7:da:1d:4d:ef:d0:53:56:51:
41:bb:e8:74:28:96:f9:af:f0:6e:34:9d:bc:64:62:6d:73:b1:
e4:86:91:62:8e:59:f9:5e:24:20:bd:99:f5:d1:dc:83:86:9b:
d8:c9:26:0a:ef:4c:01:18:48:49:9a:2f:6a:23:1c:8f:f2:71:
9f:c4:68:a8:9d:55:5d:62:34:90:67:90:3b:eb:96:74:1f:75:
20:01:85:0a:93:34:d9:10:65:69:fe:1f:5a:3e:4f:ea:77:b6:
57:82:4d:6d:9b:0a:e1:d6:fb:87:55:00:77:16:b0:fc:ef:07:
9d:75:68:07:0b:fa:e4:ca:97:e1:ab:cd:43:cd:b1:ef:a5:e8:
d0:e0:03:5a:a8:e5:c7:7f:bb:1a:b9:b7:5e:91:b9:07:9b:e9:
0a:37:6d:3c:7b:8a:7a:10:88:77:b6:5d:e1:c8:e3:ea:0a:8a:
33:14:41:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt87lPFAWayfEEWFJ2hbMMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDkyNjc4Yjk0ZjFhNTg5ZjRmNzZmZjYyZTA0Mzg0ZjMzNjBkNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2maGJgzNM5LLihGVHDJ6x1b8LDYO
0xNse8tG45SY5ITwuPNJFh5nAQ40Y8uJ6P4s20+nGa3v0KpqL/tvWDrGdz4cF9N3
adXCjp3k5dI+koyWGTBdITFmrJqVFny3JXW5zfsZL4IQt7kG/Di72L7RHdt1Od3z
Br8dQl9WUOG0lQaIZ8maQLdvNv9YGjTq3cFZaqbB7KJ68PtfcG+JhbsVS7lOTp3K
GbeOzLq9fByyTMzG1bifhGKgEFe9zTLbfrzUN2UVSBzQt0zkGBkpbEr2QMbav/0J
MW8pGCF+bDDlsfTVxoa8eEQjKYEnwT9VUaGv9jIACsUnQr5+O/pki1jf8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD2SZ4uU8aWJ9Pdv9i4EOE8zYNVZMB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvUFpKbmk1VHhwWW4wOTJfMkxnUTRUek5nMVZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9lgAEE
MA0GCSqGSIb3DQEBCwUAA4IBAQBp+al1s7hhQSlfM7oZy8+xnGNyI9inFpZ+TzXk
+JfR7wowDaVO2bAzBsHNs7nvsvKXur9KiH6HhoV1BIAbtSAo+QqTyGkl8C0OxLh7
w93f3KL32h1N79BTVlFBu+h0KJb5r/BuNJ28ZGJtc7HkhpFijln5XiQgvZn10dyD
hpvYySYK70wBGEhJmi9qIxyP8nGfxGionVVdYjSQZ5A765Z0H3UgAYUKkzTZEGVp
/h9aPk/qd7ZXgk1tmwrh1vuHVQB3FrD87weddWgHC/rkypfhq81DzbHvpejQ4ANa
qOXHf7saubdekbkHm+kKN208e4p6EIh3tl3hyOPqCoozFEEM
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:47 2026 by rpki-client