This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa File: ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa (raw, json) Hash identifier: UPsyzhi87SZnZ58kTtKE+18tmkXvGwl7y+zmR4Y6hbw= Subject key identifier: 66:FC:D9:BA:78:C3:94:16:04:12:8E:6D:5E:B8:33:C8:BB:7F:74:68 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019B77C6B2C6D3B39570706D2F9EFEA1A4F4 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215290 IP address blocks: 2a11:9f40::/29 maxlen: 29 2a12:2040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b2:c6:d3:b3:95:70:70:6d:2f:9e:fe:a1:a4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66fcd9ba78c3941604128e6d5eb833c8bb7f7468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:86:97:87:eb:9d:2a:7b:99:97:be:d0:62: 99:b1:16:0d:74:b8:f8:69:fd:9d:8d:78:c2:86:f3: d8:87:e1:46:96:78:e2:12:f9:6e:bf:5c:c7:9b:ce: 9d:0d:39:c2:7f:d3:62:fa:13:2e:74:65:2a:39:08: 02:26:78:8e:da:9f:8c:1d:2e:54:da:70:2d:c1:a2: c5:6d:af:32:67:6e:2f:4a:cf:e1:81:3d:d1:e6:db: 68:2e:67:f0:49:5d:22:42:2e:9e:7a:47:92:e6:8d: ea:6c:4c:b8:04:96:87:b3:8d:6a:6b:80:2e:f5:02: 91:25:ed:c3:07:76:c1:fd:11:4e:0c:0b:ff:44:d9: 2d:0b:b3:72:04:f0:f4:14:1f:80:e6:51:ae:0a:11: 30:22:4e:04:93:a5:9d:ae:42:ff:d6:36:ca:15:14: e8:ed:d3:39:bb:66:0f:f7:0e:e0:3c:9e:e7:e1:44: 6e:37:70:28:f9:60:91:91:9c:fd:b8:f7:f9:00:1e: 67:7e:31:51:79:27:88:f4:bd:54:3e:53:39:c1:0c: aa:86:7b:6b:a5:bc:9b:69:20:f7:3f:69:1d:8b:0e: f2:24:4f:e9:3d:8a:48:25:92:31:e6:bb:3f:7d:94: da:35:63:46:ee:d0:ce:65:70:3c:c7:03:7c:f3:bd: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FC:D9:BA:78:C3:94:16:04:12:8E:6D:5E:B8:33:C8:BB:7F:74:68 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:9f40::/29 2a12:2040::/29 Signature Algorithm: sha256WithRSAEncryption 71:2f:57:84:15:c1:4f:dc:ec:e1:12:93:15:d7:ba:47:82:be: 63:37:e0:cd:bd:e0:f2:28:fe:73:a6:9a:c6:22:ef:82:57:7b: 3e:22:02:3d:42:39:31:e0:42:43:c8:5b:fc:08:17:77:14:04: 7d:b4:94:06:3a:9b:ca:c9:d8:24:b1:09:6a:8d:c8:63:f0:50: 07:2d:fa:f9:cb:97:27:8b:21:54:b1:61:80:4b:59:09:33:a1: 4f:ef:8a:f8:7c:34:b4:76:74:c1:c5:ae:12:ef:1c:23:b0:44: 6d:fc:5a:fe:eb:26:09:15:14:b9:76:1e:42:df:66:2c:4f:be: 6a:59:77:5e:94:c8:63:7b:d8:da:79:ff:8b:48:df:57:bd:d2: a5:c2:b2:d7:50:fa:3b:af:0a:17:d4:c1:27:2e:9e:01:b4:1d: 22:f9:74:c1:1f:97:d8:8d:48:0f:bb:43:0c:d9:fe:3c:f2:80: 38:e4:b9:ca:db:6d:76:4d:87:52:77:9c:1c:0d:56:a0:a2:1b: 62:fd:bb:fc:c6:45:5c:8a:7e:49:ad:c1:7c:0e:f6:67:d9:5e: c3:c3:b0:c1:06:dc:07:a8:d1:d4:45:c2:b1:9c:c0:d4:f4:d7: dd:da:77:c8:5e:41:6c:15:ab:28:b3:6e:00:e1:3f:03:42:ff: 7c:d2:4e:a9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrLG07OVcHBtL57+oaT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmZjZDliYTc4YzM5NDE2MDQxMjhlNmQ1ZWI4MzNjOGJiN2Y3NDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr+Gl4frnSp7mZe+0GKZsRYNdLj4 af2djXjChvPYh+FGlnjiEvluv1zHm86dDTnCf9Ni+hMudGUqOQgCJniO2p+MHS5U 2nAtwaLFba8yZ24vSs/hgT3R5ttoLmfwSV0iQi6eekeS5o3qbEy4BJaHs41qa4Au 9QKRJe3DB3bB/RFODAv/RNktC7NyBPD0FB+A5lGuChEwIk4Ek6WdrkL/1jbKFRTo 7dM5u2YP9w7gPJ7n4URuN3Ao+WCRkZz9uPf5AB5nfjFReSeI9L1UPlM5wQyqhntr pbybaSD3P2kdiw7yJE/pPYpIJZIx5rs/fZTaNWNG7tDOZXA8xwN8870RZQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGb82bp4w5QWBBKObV64M8i7f3RoMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvWnZ6WnVuakRsQllFRW81dFhyZ3p5THRfZEdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhGfQAMF AyoSIEAwDQYJKoZIhvcNAQELBQADggEBAHEvV4QVwU/c7OESkxXXukeCvmM34M29 4PIo/nOmmsYi74JXez4iAj1COTHgQkPIW/wIF3cUBH20lAY6m8rJ2CSxCWqNyGPw UAct+vnLlyeLIVSxYYBLWQkzoU/vivh8NLR2dMHFrhLvHCOwRG38Wv7rJgkVFLl2 HkLfZixPvmpZd16UyGN72Np5/4tI31e90qXCstdQ+juvChfUwScungG0HSL5dMEf l9iNSA+7QwzZ/jzygDjkucrbbXZNh1J3nBwNVqCiG2L9u/zGRVyKfkmtwXwO9mfZ XsPDsMEG3Aeo0dRFwrGcwNT0193ad8heQWwVqyizbgDhPwNC/3zSTqk= -----END CERTIFICATE-----Generated at Mon Jan 26 05:33:50 2026 by rpki-client