This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Zjh5y2Kd8cSRzdszQnign9Lz3l4.roa File: Zjh5y2Kd8cSRzdszQnign9Lz3l4.roa (raw, json) Hash identifier: TMEeISdGQlH/KULrec6oWy2p2scTUrKdaSvlMRJx3eE= Subject key identifier: 66:38:79:CB:62:9D:F1:C4:91:CD:DB:33:42:78:A0:9F:D2:F3:DE:5E Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019B7EA6B00FC30D11152618E9761FF1AB99 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Zjh5y2Kd8cSRzdszQnign9Lz3l4.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5378 IP address blocks: 2a01:840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b0:0f:c3:0d:11:15:26:18:e9:76:1f:f1:ab:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=663879cb629df1c491cddb334278a09fd2f3de5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:46:f1:32:5e:50:55:30:e3:0c:f4:ef:71:5c: 5a:10:a3:67:5d:10:f2:2c:12:ca:46:ca:11:5b:2d: bf:86:ee:1d:8d:e6:a1:bc:d9:e1:c8:33:0f:78:35: f3:7d:6f:53:fc:ec:f0:c9:8e:b1:b1:3e:40:7b:46: ea:69:57:eb:86:7b:16:da:43:03:24:12:a4:a7:35: f5:2f:e0:94:3d:04:2b:45:f6:b7:3d:44:f3:57:a5: ad:b0:fb:54:b8:b6:cf:93:d7:4e:ad:cc:29:ab:c9: 93:2c:55:ff:bc:78:e9:54:87:65:fd:1a:3e:6a:b0: 3d:fa:70:46:0c:a6:28:8a:25:d7:b7:2f:dd:67:8c: b9:06:a4:a7:e4:18:d9:a9:c9:69:3f:83:e7:c7:1b: 0a:f6:3b:1c:ea:f9:c4:09:70:29:a7:6b:60:2d:07: 39:f8:a2:2c:51:6c:e7:3c:e2:4c:06:fb:67:7e:9b: 76:f4:e8:5f:7c:a6:c5:8a:9d:63:0c:f0:f8:9c:0d: 98:2a:47:f4:9f:38:e5:ab:d2:02:5c:89:f9:15:49: 2a:e6:b5:d7:73:6d:1e:a0:24:3e:22:0d:7c:f6:f0: 41:31:22:8b:93:f8:74:fb:9e:7d:d3:3c:1e:48:ee: 28:2a:05:a7:7b:00:c2:2c:0f:42:64:12:94:75:e5: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:38:79:CB:62:9D:F1:C4:91:CD:DB:33:42:78:A0:9F:D2:F3:DE:5E X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Zjh5y2Kd8cSRzdszQnign9Lz3l4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:840::/32 Signature Algorithm: sha256WithRSAEncryption ae:78:5b:09:88:4d:84:9f:37:d0:bb:5b:0b:ee:12:f0:1d:3d: 3d:ff:86:6d:0b:2e:03:27:2d:12:df:76:45:eb:f3:7e:b3:90: 0f:e6:a3:14:a3:b7:76:3a:c2:96:3d:27:68:49:7e:b6:ee:1d: 3b:8f:88:b6:dc:04:67:cd:e6:4c:bb:39:a2:61:d4:dc:eb:3a: c1:d5:fa:63:e0:a7:d7:fb:2e:74:a3:57:58:53:a2:8e:05:07: 9d:31:07:81:eb:f7:69:0b:b4:5b:42:a9:2d:de:0b:dc:af:e1: 25:3b:62:dc:86:30:24:fc:d0:d2:23:9c:67:ba:72:6f:7f:a2: 60:2b:44:0b:07:14:a0:0d:42:01:5b:01:17:17:4b:49:87:15: 7b:0e:0a:e2:d0:36:75:ce:27:32:e6:9c:df:32:11:31:29:1d: 9a:5f:59:4f:4f:a8:76:fa:ab:9e:55:6f:e1:20:01:29:f2:21: 95:0f:f4:19:bd:5d:d0:fb:82:41:e5:fb:2d:17:7c:ba:d8:f7: 10:08:5d:68:54:fd:ea:d4:72:0e:48:30:4c:a8:69:13:81:2c: bb:d6:40:50:2b:0d:b6:fa:2d:22:61:03:07:d9:ed:3a:60:ee: e2:d5:c4:29:a4:da:c8:72:e4:ee:a4:45:20:33:10:7e:32:83: 5f:07:eb:fa -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+prAPww0RFSYY6XYf8auZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjM4NzljYjYyOWRmMWM0OTFjZGRiMzM0Mjc4YTA5ZmQyZjNkZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30bxMl5QVTDjDPTvcVxaEKNnXRDy LBLKRsoRWy2/hu4djeahvNnhyDMPeDXzfW9T/OzwyY6xsT5Ae0bqaVfrhnsW2kMD JBKkpzX1L+CUPQQrRfa3PUTzV6WtsPtUuLbPk9dOrcwpq8mTLFX/vHjpVIdl/Ro+ arA9+nBGDKYoiiXXty/dZ4y5BqSn5BjZqclpP4PnxxsK9jsc6vnECXApp2tgLQc5 +KIsUWznPOJMBvtnfpt29OhffKbFip1jDPD4nA2YKkf0nzjlq9ICXIn5FUkq5rXX c20eoCQ+Ig189vBBMSKLk/h0+5590zweSO4oKgWnewDCLA9CZBKUdeV0ywIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGY4ectinfHEkc3bM0J4oJ/S895eMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvWmpoNXkyS2Q4Y1NSemRzelFuaWduOUx6M2w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgEIQDAN BgkqhkiG9w0BAQsFAAOCAQEArnhbCYhNhJ830LtbC+4S8B09Pf+GbQsuAyctEt92 RevzfrOQD+ajFKO3djrClj0naEl+tu4dO4+IttwEZ83mTLs5omHU3Os6wdX6Y+Cn 1/sudKNXWFOijgUHnTEHgev3aQu0W0KpLd4L3K/hJTti3IYwJPzQ0iOcZ7pyb3+i YCtECwcUoA1CAVsBFxdLSYcVew4K4tA2dc4nMuac3zIRMSkdml9ZT0+odvqrnlVv 4SABKfIhlQ/0Gb1d0PuCQeX7LRd8utj3EAhdaFT96tRyDkgwTKhpE4Esu9ZAUCsN tvotImEDB9ntOmDu4tXEKaTayHLk7qRFIDMQfjKDXwfr+g== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:08 2026 by rpki-client