This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa File: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (raw, json) Hash identifier: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI= Subject key identifier: 64:2C:00:09:B7:8B:1D:8E:44:70:07:0B:6B:AC:48:EA:B0:C1:54:9F Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019B7758EE318ABE24CCB8862FF3ED7F2669 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208227 IP address blocks: 2a04:ff00:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ee:31:8a:be:24:cc:b8:86:2f:f3:ed:7f:26:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=642c0009b78b1d8e4470070b6bac48eab0c1549f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:78:06:15:91:1f:ab:85:a8:7b:8b:06:7c: 4e:45:85:ae:87:5c:73:bd:16:74:fb:17:0b:b0:8d: 47:20:05:84:f3:b8:c2:4a:bd:9e:82:3f:15:e0:8c: 50:6f:52:2b:41:cc:20:58:8b:4a:e9:d0:68:ed:fe: 24:d6:be:f6:48:a6:c1:87:d8:4e:6d:24:d6:47:bb: 1a:34:8d:36:52:f9:4e:a2:67:f8:3a:9b:19:5e:96: 70:93:4c:37:73:af:64:d7:33:d5:f4:9b:71:76:e6: 36:58:b5:0a:00:41:28:09:7f:3e:3b:db:89:dd:5b: 97:9a:3c:e9:96:1b:3e:21:7d:0c:65:ed:01:ea:88: 26:7c:33:13:f4:e6:54:69:10:ef:22:e3:2f:18:81: f8:bb:28:e6:1d:2a:a2:a6:af:f6:69:c6:0a:8b:b1: 63:ef:af:52:ec:94:1f:e6:79:73:59:f5:c7:f7:e5: 33:ad:7d:1b:4d:08:b5:0d:35:ca:26:a8:41:f8:39: 4b:11:0d:cd:97:a5:d4:37:c5:65:be:ef:c3:89:db: 3f:a6:42:21:64:b4:c7:2e:36:1a:cc:1a:ed:30:96: f2:d8:06:ee:3c:28:f3:71:04:1e:ad:ea:43:c1:6f: b8:87:a6:b1:b6:9c:42:18:98:dc:66:10:68:7a:e7: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2C:00:09:B7:8B:1D:8E:44:70:07:0B:6B:AC:48:EA:B0:C1:54:9F X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:ff00:200::/40 Signature Algorithm: sha256WithRSAEncryption 4c:00:71:88:52:34:2d:4d:27:9b:46:0b:b5:3d:d0:fc:d3:2f: 20:6b:70:e3:74:79:e0:50:d0:6f:19:11:4d:7c:24:f2:4c:5e: 71:01:d7:fa:25:15:53:3a:b7:e6:6d:c5:70:96:e4:0f:60:1f: 36:cb:cc:25:79:fc:f4:92:12:88:2f:f0:bf:f8:9b:f3:08:31: 50:96:f9:53:13:68:c9:d7:fb:e2:c8:a4:c6:c6:7f:c6:4e:11: de:da:f4:07:53:ff:b5:07:06:04:cd:2d:00:a2:67:43:3e:ac: 65:01:46:d9:a1:61:ea:66:66:c0:6e:ee:f7:13:6f:9e:d5:fc: eb:e6:3c:9e:db:2e:44:a8:8b:4e:64:79:ac:09:f9:36:07:97: 8d:f5:12:29:05:f4:f6:f8:8d:4a:f9:55:6d:21:2a:a7:92:a4: e1:88:5e:5b:04:ef:6f:b1:e0:2f:21:f6:87:b8:1c:d9:dd:11: 95:f0:0a:d2:6f:cb:55:21:3c:96:50:73:32:45:9f:db:21:8f: 45:69:72:a3:2b:b0:b2:ad:a1:b9:a5:53:54:f7:f0:bd:90:4a: 23:6a:6e:4f:16:b4:9f:8d:19:97:a2:44:17:5d:74:54:05:76: 10:b6:e7:2e:ff:3a:d7:b9:73:a1:30:bc:a5:0e:40:bd:42:ee: 67:9d:3d:ea -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WO4xir4kzLiGL/PtfyZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDJjMDAwOWI3OGIxZDhlNDQ3MDA3MGI2YmFjNDhlYWIwYzE1NDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRl4BhWRH6uFqHuLBnxORYWuh1xz vRZ0+xcLsI1HIAWE87jCSr2egj8V4IxQb1IrQcwgWItK6dBo7f4k1r72SKbBh9hO bSTWR7saNI02UvlOomf4OpsZXpZwk0w3c69k1zPV9JtxduY2WLUKAEEoCX8+O9uJ 3VuXmjzplhs+IX0MZe0B6ogmfDMT9OZUaRDvIuMvGIH4uyjmHSqipq/2acYKi7Fj 769S7JQf5nlzWfXH9+UzrX0bTQi1DTXKJqhB+DlLEQ3Nl6XUN8Vlvu/Dids/pkIh ZLTHLjYazBrtMJby2AbuPCjzcQQerepDwW+4h6axtpxCGJjcZhBoeufnSQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGQsAAm3ix2ORHAHC2usSOqwwVSfMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvWkN3QUNiZUxIWTVFY0FjTGE2eEk2ckRCVko4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgT/AAIw DQYJKoZIhvcNAQELBQADggEBAEwAcYhSNC1NJ5tGC7U90PzTLyBrcON0eeBQ0G8Z EU18JPJMXnEB1/olFVM6t+ZtxXCW5A9gHzbLzCV5/PSSEogv8L/4m/MIMVCW+VMT aMnX++LIpMbGf8ZOEd7a9AdT/7UHBgTNLQCiZ0M+rGUBRtmhYepmZsBu7vcTb57V /OvmPJ7bLkSoi05keawJ+TYHl431EikF9Pb4jUr5VW0hKqeSpOGIXlsE72+x4C8h 9oe4HNndEZXwCtJvy1UhPJZQczJFn9shj0VpcqMrsLKtobmlU1T38L2QSiNqbk8W tJ+NGZeiRBdddFQFdhC25y7/Ote5c6EwvKUOQL1C7medPeo= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:40 2026 by rpki-client