This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/za88ND0OSXOKBDkHlXDSgAc0j-o.roa File: za88ND0OSXOKBDkHlXDSgAc0j-o.roa (raw, json) Hash identifier: 3SNDrnhjIHUyQtYp1P1Obkb/xEBrgav3aCIr/q2YN6A= Subject key identifier: CD:AF:3C:34:3D:0E:49:73:8A:04:39:07:95:70:D2:80:07:34:8F:EA Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55D47F8644824E3BB338D745901B1 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/za88ND0OSXOKBDkHlXDSgAc0j-o.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210864 IP address blocks: 2a10:4646:a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5d:47:f8:64:48:24:e3:bb:33:8d:74:59:01:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cdaf3c343d0e49738a0439079570d28007348fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9e:b6:1b:5a:bd:9e:ed:6d:3d:fb:5b:25:e9: cb:46:4b:b8:06:9d:52:35:20:8f:ad:70:dd:70:4a: 51:85:91:38:2d:f8:49:10:23:81:c4:02:9f:33:31: 8f:e7:cd:f6:b2:4b:0f:a3:cc:2b:94:0a:35:c2:a2: d1:75:5d:72:43:4e:b8:d7:8d:31:aa:23:ac:10:d0: d7:c3:0e:41:99:e9:c1:0a:12:0c:2b:ac:1c:a4:6d: ff:a0:60:98:36:1f:34:2c:69:d9:18:9d:46:ae:cf: 5b:a2:98:e8:33:22:2e:f2:3c:86:0d:e3:c1:23:41: c1:bf:c1:0f:d6:17:52:78:11:d7:38:c5:20:1b:cf: 62:0a:75:34:0f:e2:7c:08:5d:ec:1a:76:23:b1:16: 3d:92:d6:0d:10:a7:2c:8b:47:21:f7:3c:3b:db:5a: 36:c4:ef:38:95:65:a4:0d:93:5d:bd:82:ab:2a:98: 5a:af:d3:0a:c4:ce:fa:59:f9:e8:c4:7d:fd:53:b2: 44:75:67:48:73:35:34:bb:38:eb:78:d2:ca:b2:67: d1:31:6a:26:2d:4e:7f:77:d3:97:a7:35:2c:d4:7a: 6d:05:15:2c:bd:1d:bf:60:4d:81:70:ab:38:40:b7: c5:7e:1a:43:77:b9:69:f1:2e:86:91:68:ff:e3:91: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AF:3C:34:3D:0E:49:73:8A:04:39:07:95:70:D2:80:07:34:8F:EA X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/za88ND0OSXOKBDkHlXDSgAc0j-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:a0::/44 Signature Algorithm: sha256WithRSAEncryption 37:69:82:64:9b:73:9d:e0:e0:c0:89:1f:af:94:d4:cd:11:98: 89:6f:07:29:68:29:7c:94:a4:08:c1:58:52:3b:71:72:80:67: 8a:6a:0b:2f:cd:0c:1b:90:38:21:a2:3e:ea:60:c4:32:8e:6b: af:15:52:c0:09:7f:90:06:c0:53:d3:13:3d:10:8f:b2:1a:c3: 8b:22:14:6b:ac:4c:d9:c2:c0:d6:a8:13:18:42:3c:af:ee:72: 4d:ba:67:7a:46:fd:c4:7d:dc:89:b0:01:6c:e4:d3:c5:e6:92: 03:28:de:c1:ee:d2:cb:6f:df:8b:e4:e3:60:01:19:f0:98:9c: 7f:48:ae:96:ed:bc:da:b6:59:3f:90:14:80:2c:c6:86:d6:10: be:36:69:50:5a:2b:fa:55:0f:ae:a5:e0:86:01:bb:3a:40:f3: 7d:2b:81:c9:02:2f:29:e3:02:4b:bf:c3:65:ea:d4:6a:d8:c9: f7:66:b1:ad:2e:09:21:7b:09:57:ad:92:5c:87:4e:69:77:31: c2:27:0c:58:67:d6:34:64:24:ae:22:d7:c8:57:09:d1:c8:bc: 7a:d0:1c:66:92:30:5c:7e:68:1f:5c:e4:f7:86:2a:1a:56:b9: 9e:7b:84:91:b5:d3:90:50:40:12:79:0d:5b:c1:4f:b7:34:9c: bc:c7:da:5f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pV1H+GRIJOO7M410WQGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGFmM2MzNDNkMGU0OTczOGEwNDM5MDc5NTcwZDI4MDA3MzQ4ZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ62G1q9nu1tPftbJenLRku4Bp1S NSCPrXDdcEpRhZE4LfhJECOBxAKfMzGP5832sksPo8wrlAo1wqLRdV1yQ064140x qiOsENDXww5BmenBChIMK6wcpG3/oGCYNh80LGnZGJ1Grs9bopjoMyIu8jyGDePB I0HBv8EP1hdSeBHXOMUgG89iCnU0D+J8CF3sGnYjsRY9ktYNEKcsi0ch9zw721o2 xO84lWWkDZNdvYKrKphar9MKxM76WfnoxH39U7JEdWdIczU0uzjreNLKsmfRMWom LU5/d9OXpzUs1HptBRUsvR2/YE2BcKs4QLfFfhpDd7lp8S6GkWj/45EZ3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM2vPDQ9DklzigQ5B5Vw0oAHNI/qMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvemE4OE5EME9TWE9LQkRrSGxYRFNnQWMwai1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgCg MA0GCSqGSIb3DQEBCwUAA4IBAQA3aYJkm3Od4ODAiR+vlNTNEZiJbwcpaCl8lKQI wVhSO3FygGeKagsvzQwbkDghoj7qYMQyjmuvFVLACX+QBsBT0xM9EI+yGsOLIhRr rEzZwsDWqBMYQjyv7nJNumd6Rv3EfdyJsAFs5NPF5pIDKN7B7tLLb9+L5ONgARnw mJx/SK6W7bzatlk/kBSALMaG1hC+NmlQWiv6VQ+upeCGAbs6QPN9K4HJAi8p4wJL v8Nl6tRq2Mn3ZrGtLgkhewlXrZJch05pdzHCJwxYZ9Y0ZCSuItfIVwnRyLx60Bxm kjBcfmgfXOT3hioaVrmee4SRtdOQUEASeQ1bwU+3NJy8x9pf -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:01 2026 by rpki-client