This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/ZIEMV2zIloE52-qgOXdFi1j85Tk.roa File: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (raw, json) Hash identifier: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ= Subject key identifier: 64:81:0C:57:6C:C8:96:81:39:DB:EA:A0:39:77:45:8B:58:FC:E5:39 Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311 Certificate serial: 019B78A2A7E83D0234DA78ACC58AEFDB43F0 Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/ZIEMV2zIloE52-qgOXdFi1j85Tk.roa Signing time: Thu 01 Jan 2026 08:18:04 +0000 ROA not before: Thu 01 Jan 2026 08:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23748 IP address blocks: 2a12:a300::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a7:e8:3d:02:34:da:78:ac:c5:8a:ef:db:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311 Validity Not Before: Jan 1 08:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64810c576cc8968139dbeaa03977458b58fce539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:49:c7:a5:96:ca:aa:52:67:01:f8:57:ea: 25:c1:b3:46:5e:3b:6b:0b:b8:e4:7d:10:df:cb:5e: 47:39:39:3e:2a:f0:af:46:73:04:1b:14:25:69:21: a1:42:8f:9c:8a:26:aa:cc:34:6e:19:23:46:d3:09: 23:88:cf:e8:e1:2f:1d:b2:cb:c7:da:1d:58:e6:06: ac:7f:a5:fd:1e:0b:51:9a:cf:e2:42:26:09:06:6d: fa:43:98:c8:ed:81:0a:86:73:fc:14:46:ea:91:61: 5b:91:75:0d:3b:57:7c:39:ae:91:f9:49:78:9d:be: 60:6d:40:db:fe:c4:4e:87:29:5c:d7:e6:ed:d5:04: 9c:9a:c2:7e:00:32:67:67:80:3f:e8:fe:78:07:bc: 4f:ff:76:ef:c1:6b:2f:09:db:8e:74:b8:a1:36:19: 22:10:4c:8f:e6:7a:f1:58:82:4d:95:bb:3f:db:a1: 61:6e:2f:c9:ad:a0:c3:d8:30:ab:9a:bb:9a:2e:38: ee:1c:14:7b:49:33:d9:d8:f4:77:96:cc:97:55:7f: 40:ed:d2:25:d1:c2:2e:97:04:84:bd:be:82:c2:7f: 23:44:f4:32:41:25:cb:fc:ab:d2:c3:f6:f8:ae:ce: ff:13:50:40:74:38:f6:7d:35:69:3b:18:af:6e:cb: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:81:0C:57:6C:C8:96:81:39:DB:EA:A0:39:77:45:8B:58:FC:E5:39 X509v3 Authority Key Identifier: keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/ZIEMV2zIloE52-qgOXdFi1j85Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:a300::/29 Signature Algorithm: sha256WithRSAEncryption 79:44:b2:08:86:8b:4b:08:af:63:2d:08:17:d3:75:d5:2d:08: f2:a5:a8:99:81:8b:f0:0c:6d:80:57:fc:65:53:01:28:85:06: 02:2a:10:e9:f9:6b:d6:43:c7:f6:d8:bf:a1:ed:4d:23:db:fc: f5:c3:d4:68:12:ea:76:68:66:72:53:fe:33:ab:be:c4:23:06: 01:f6:ca:50:de:30:03:cc:61:95:05:8a:06:83:e9:c3:27:ff: f7:3b:15:47:0b:b2:81:80:00:9e:f1:8c:b8:6a:15:24:fd:cc: 9f:4a:24:76:9b:54:ea:08:ab:a6:e1:a6:8a:78:74:c4:e5:3e: b1:e7:ee:4e:d3:07:cd:b8:fc:43:0c:f1:98:2b:ad:62:4c:63: e8:de:bf:8d:6f:fd:80:c7:66:1a:92:b0:b8:5b:d4:d7:af:d8: 04:0c:1b:cc:a1:6d:03:ba:88:08:b4:80:69:1b:1b:73:f0:4c: 38:46:4b:30:9d:56:74:7f:ca:91:5f:df:e2:97:cd:d7:bc:06: 27:b8:34:dd:f4:e9:2d:11:a2:95:64:10:00:37:67:42:0c:8f: 84:2b:a9:2b:7a:48:d7:d3:0f:aa:a4:4c:54:cb:6f:ed:c8:38: 79:50:e9:1f:79:8b:4a:a8:fe:03:07:b7:e8:c8:49:62:88:dc: 84:1e:53:15 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oqfoPQI02nisxYrv20PwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj ZWYzMTEwHhcNMjYwMTAxMDgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDgxMGM1NzZjYzg5NjgxMzlkYmVhYTAzOTc3NDU4YjU4ZmNlNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxZJx6WWyqpSZwH4V+olwbNGXjtr C7jkfRDfy15HOTk+KvCvRnMEGxQlaSGhQo+ciiaqzDRuGSNG0wkjiM/o4S8dssvH 2h1Y5gasf6X9HgtRms/iQiYJBm36Q5jI7YEKhnP8FEbqkWFbkXUNO1d8Oa6R+Ul4 nb5gbUDb/sROhylc1+bt1QScmsJ+ADJnZ4A/6P54B7xP/3bvwWsvCduOdLihNhki EEyP5nrxWIJNlbs/26Fhbi/JraDD2DCrmruaLjjuHBR7STPZ2PR3lsyXVX9A7dIl 0cIulwSEvb6Cwn8jRPQyQSXL/KvSw/b4rs7/E1BAdDj2fTVpOxivbsv5ywIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGSBDFdsyJaBOdvqoDl3RYtY/OU5MB8GA1UdIwQY MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct YzhmMTgyZTk1ZWE1LzEvWklFTVYyeklsb0U1Mi1xZ09YZEZpMWo4NVRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1 LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhKjADAN BgkqhkiG9w0BAQsFAAOCAQEAeUSyCIaLSwivYy0IF9N11S0I8qWomYGL8AxtgFf8 ZVMBKIUGAioQ6flr1kPH9ti/oe1NI9v89cPUaBLqdmhmclP+M6u+xCMGAfbKUN4w A8xhlQWKBoPpwyf/9zsVRwuygYAAnvGMuGoVJP3Mn0okdptU6girpuGminh0xOU+ sefuTtMHzbj8QwzxmCutYkxj6N6/jW/9gMdmGpKwuFvU16/YBAwbzKFtA7qICLSA aRsbc/BMOEZLMJ1WdH/KkV/f4pfN17wGJ7g03fTpLRGilWQQADdnQgyPhCupK3pI 19MPqqRMVMtv7cg4eVDpH3mLSqj+Awe36MhJYojchB5TFQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:39 2026 by rpki-client