This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Z8QfOcCFDhXqdNQ18klfU0gx5Cg.roa File: Z8QfOcCFDhXqdNQ18klfU0gx5Cg.roa (raw, json) Hash identifier: 4yN2dlHzReD/a8HNsMDp9YD/82UrxIQcLwXYi54rfcY= Subject key identifier: 67:C4:1F:39:C0:85:0E:15:EA:74:D4:35:F2:49:5F:53:48:31:E4:28 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84CA6CF51AF7AAD34BAC5FDCFA73F5 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Z8QfOcCFDhXqdNQ18klfU0gx5Cg.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60223 IP address blocks: 2a12:6f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ca:6c:f5:1a:f7:aa:d3:4b:ac:5f:dc:fa:73:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67c41f39c0850e15ea74d435f2495f534831e428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:de:40:38:f6:a8:fc:96:78:9a:56:d8:b7: 15:fa:ed:4a:ed:cb:75:dc:61:5b:55:7c:e6:3e:ef: b4:c4:a4:40:22:d5:6c:c0:c0:cc:1a:ee:79:be:7b: b5:c3:b0:e6:3a:73:c8:6d:ad:fa:44:64:51:dd:ad: a7:41:da:e1:b0:16:89:df:c3:f3:e4:5b:fb:5c:a1: 7b:2e:68:dc:1f:95:d0:50:ef:d5:7a:fd:a1:50:4b: 8c:c8:7c:59:69:ba:9d:bb:e3:05:f2:07:c2:bb:32: 47:4c:c9:52:74:4a:d3:93:a6:71:12:94:99:e5:05: 56:62:b3:86:46:88:c4:92:bc:6a:56:36:f7:93:70: d9:e0:5e:d7:30:df:95:a8:55:3e:d8:6d:94:71:3b: 4e:02:5a:9d:21:f3:51:4b:3f:e2:1c:47:8c:aa:93: 07:d7:8b:38:a5:3c:7e:76:57:32:9c:25:8c:72:94: 75:71:4d:27:99:db:cc:50:a0:9c:91:1f:9d:ee:04: 9b:18:89:68:e5:d8:0d:6a:93:ef:b5:38:fb:d4:6a: ed:05:d9:41:21:89:e1:10:8a:6e:5c:83:55:05:4b: 67:e7:9e:64:65:c3:7e:41:23:c4:32:f8:07:33:59: 57:06:aa:03:36:76:32:f2:83:bd:4e:0a:1a:b9:99: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C4:1F:39:C0:85:0E:15:EA:74:D4:35:F2:49:5F:53:48:31:E4:28 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Z8QfOcCFDhXqdNQ18klfU0gx5Cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:6f40::/29 Signature Algorithm: sha256WithRSAEncryption 2f:c1:8e:0e:6b:8e:a9:c7:7b:d4:8d:b3:a8:6a:a8:96:af:55: b2:87:2b:22:2e:f7:0d:49:ce:7e:27:8b:08:96:5e:18:71:5f: e3:37:65:f2:71:97:23:8d:96:45:6f:fd:4d:fe:72:05:61:72: ba:0d:70:51:d8:7b:d5:52:04:c6:84:d6:ba:de:29:83:c3:d2: c3:58:5d:11:70:29:6c:23:b9:cd:f7:a2:f9:7b:38:22:ce:8d: 88:8e:a9:2d:c7:7d:9d:26:ab:0d:4a:59:fb:d8:9c:d7:91:7d: 70:1c:db:6a:79:4b:be:c5:aa:42:53:43:61:03:c7:ee:0e:c1: 85:c0:88:ba:65:f2:9e:58:35:38:64:ab:15:a9:45:ab:0a:3c: 7b:3b:c2:b0:99:5d:76:27:4e:e3:86:22:48:e5:ca:a1:1f:cf: 9b:46:c6:e6:f8:cd:7b:05:27:e1:6e:1f:9d:26:2b:ff:f5:79: 88:53:14:02:7e:92:43:a3:07:d8:4f:53:4e:07:15:88:47:e7: 48:1d:92:ef:5e:07:43:f7:2d:8f:9b:28:c1:62:ec:47:f3:8a: 90:3c:b8:16:2f:32:79:d5:d9:29:f4:0f:b2:15:e4:6a:3b:94: a0:00:1f:52:03:d1:4e:63:dd:c0:3a:6e:e1:19:0c:7f:73:e1: fe:24:05:f4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hMps9Rr3qtNLrF/c+nP1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2M0MWYzOWMwODUwZTE1ZWE3NGQ0MzVmMjQ5NWY1MzQ4MzFlNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/reQDj2qPyWeJpW2LcV+u1K7ct1 3GFbVXzmPu+0xKRAItVswMDMGu55vnu1w7DmOnPIba36RGRR3a2nQdrhsBaJ38Pz 5Fv7XKF7LmjcH5XQUO/Vev2hUEuMyHxZabqdu+MF8gfCuzJHTMlSdErTk6ZxEpSZ 5QVWYrOGRojEkrxqVjb3k3DZ4F7XMN+VqFU+2G2UcTtOAlqdIfNRSz/iHEeMqpMH 14s4pTx+dlcynCWMcpR1cU0nmdvMUKCckR+d7gSbGIlo5dgNapPvtTj71GrtBdlB IYnhEIpuXINVBUtn555kZcN+QSPEMvgHM1lXBqoDNnYy8oO9TgoauZk5JwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGfEHznAhQ4V6nTUNfJJX1NIMeQoMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvWjhRZk9jQ0ZEaFhxZE5RMThrbGZVMGd4NUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJvQDAN BgkqhkiG9w0BAQsFAAOCAQEAL8GODmuOqcd71I2zqGqolq9VsocrIi73DUnOfieL CJZeGHFf4zdl8nGXI42WRW/9Tf5yBWFyug1wUdh71VIExoTWut4pg8PSw1hdEXAp bCO5zfei+Xs4Is6NiI6pLcd9nSarDUpZ+9ic15F9cBzbanlLvsWqQlNDYQPH7g7B hcCIumXynlg1OGSrFalFqwo8ezvCsJlddidO44YiSOXKoR/Pm0bG5vjNewUn4W4f nSYr//V5iFMUAn6SQ6MH2E9TTgcViEfnSB2S714HQ/ctj5sowWLsR/OKkDy4Fi8y edXZKfQPshXkajuUoAAfUgPRTmPdwDpu4RkMf3Ph/iQF9A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:42 2026 by rpki-client