This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa File: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (raw, json) Hash identifier: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q= Subject key identifier: 64:D5:DB:3B:7C:1A:EF:73:B1:66:C1:9A:0B:BD:D3:BF:A3:9F:18:BE Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F84167523C613BB6FAB2F2E36FDA2A7 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa Signing time: Fri 02 Jan 2026 16:22:01 +0000 ROA not before: Fri 02 Jan 2026 16:22:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397514 IP address blocks: 2a01:488:bb15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:16:75:23:c6:13:bb:6f:ab:2f:2e:36:fd:a2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:22:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d5db3b7c1aef73b166c19a0bbdd3bfa39f18be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:a0:8c:b1:b2:13:d6:7b:58:b3:5a:51:96: ab:9f:c6:10:e2:ac:4f:fd:4b:b8:d2:08:8e:84:84: 7d:b8:9d:7d:1c:75:2b:ea:74:bb:aa:71:6d:d9:08: ca:5b:b2:6b:1e:71:5e:cb:ab:40:65:9a:e7:3d:b3: 0a:f9:a8:40:09:0b:23:cb:95:66:dc:2c:42:92:ee: 01:7d:82:dc:1b:d9:a1:6e:fe:ab:8d:00:9d:42:3a: a8:3c:c3:54:ce:eb:40:6a:74:3c:57:bc:6b:88:6f: 9f:6a:f6:f8:11:a9:2f:0f:56:46:a5:a4:0d:1f:af: 5c:21:78:90:ba:f6:c8:f5:bd:4e:f2:98:a6:95:9c: 53:44:dc:f4:bf:34:da:cb:68:05:83:12:1b:38:1d: 0d:3e:6a:66:1d:ed:2a:f2:e4:33:1e:04:48:a5:c7: b0:90:8a:7a:1a:06:ab:52:ca:6a:88:fd:9d:ad:13: 47:84:5d:04:82:7d:a5:51:31:03:6b:fa:3f:97:b4: 9b:76:35:46:ac:66:20:ab:53:99:d3:17:05:20:13: b5:e5:72:a2:20:ef:f6:2a:fe:98:a5:f1:63:49:68: f0:0e:d7:d2:a1:c8:11:29:20:34:03:d5:8e:a8:77: 7a:ad:ad:b3:79:51:95:85:e8:09:ec:f8:9a:15:8f: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D5:DB:3B:7C:1A:EF:73:B1:66:C1:9A:0B:BD:D3:BF:A3:9F:18:BE X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:488:bb15::/48 Signature Algorithm: sha256WithRSAEncryption 4a:d1:1b:e2:87:57:37:fd:ea:38:a2:2e:39:1f:a6:cb:8d:de: 4d:23:af:b2:e8:22:cb:fc:32:2f:02:23:1f:ff:bf:90:77:df: 98:46:22:64:19:fa:42:b8:47:5c:c7:9f:04:91:a7:b7:81:ec: ba:27:80:42:b5:94:3c:0f:d4:0d:7d:05:e3:98:04:b5:a8:be: 84:4b:58:24:1e:d3:9d:7e:a2:03:59:c6:7f:1a:9f:cf:b4:3a: 4a:6c:55:cb:34:a5:67:4a:f0:70:f6:ac:23:12:54:e8:95:4a: ce:b5:d9:e9:ec:9a:85:76:65:a0:18:0b:16:e2:60:76:94:86: cf:3b:9c:7b:2b:66:fd:af:ca:87:2d:02:5e:a9:4b:77:f9:35: 3f:97:ac:92:d3:5a:de:19:20:07:22:a0:a3:97:2e:f9:55:b7: ac:8b:7a:ef:1a:e0:33:e5:47:2d:af:de:49:4b:e5:ac:35:25: db:9d:95:a4:8b:c1:f8:66:3b:07:47:bd:77:5f:f7:05:19:02: 66:bd:2c:b2:ef:f7:07:a1:8b:db:6b:1f:a9:10:85:18:fd:d0: 8a:ea:c9:f5:b8:f4:55:87:43:7e:03:7f:1c:1f:d8:06:b2:cb: 2f:51:4c:0b:e8:b2:38:96:3c:4a:70:66:ee:06:05:1f:91:81: d6:f7:7d:f7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hBZ1I8YTu2+rLy42/aKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQ1ZGIzYjdjMWFlZjczYjE2NmMxOWEwYmJkZDNiZmEzOWYxOGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBygjLGyE9Z7WLNaUZarn8YQ4qxP /Uu40giOhIR9uJ19HHUr6nS7qnFt2QjKW7JrHnFey6tAZZrnPbMK+ahACQsjy5Vm 3CxCku4BfYLcG9mhbv6rjQCdQjqoPMNUzutAanQ8V7xriG+favb4EakvD1ZGpaQN H69cIXiQuvbI9b1O8pimlZxTRNz0vzTay2gFgxIbOB0NPmpmHe0q8uQzHgRIpcew kIp6GgarUspqiP2drRNHhF0Egn2lUTEDa/o/l7SbdjVGrGYgq1OZ0xcFIBO15XKi IO/2Kv6YpfFjSWjwDtfSocgRKSA0A9WOqHd6ra2zeVGVhegJ7PiaFY9M9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGTV2zt8Gu9zsWbBmgu907+jnxi+MB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvWk5YYk8zd2E3M094WnNHYUM3M1R2Nk9mR0w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEEiLsV MA0GCSqGSIb3DQEBCwUAA4IBAQBK0Rvih1c3/eo4oi45H6bLjd5NI6+y6CLL/DIv AiMf/7+Qd9+YRiJkGfpCuEdcx58Ekae3gey6J4BCtZQ8D9QNfQXjmAS1qL6ES1gk HtOdfqIDWcZ/Gp/PtDpKbFXLNKVnSvBw9qwjElTolUrOtdnp7JqFdmWgGAsW4mB2 lIbPO5x7K2b9r8qHLQJeqUt3+TU/l6yS01reGSAHIqCjly75Vbesi3rvGuAz5Uct r95JS+WsNSXbnZWki8H4ZjsHR713X/cFGQJmvSyy7/cHoYvbax+pEIUY/dCK6sn1 uPRVh0N+A38cH9gGsssvUUwL6LI4ljxKcGbuBgUfkYHW9333 -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:18 2026 by rpki-client