This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Z-4CpN1tKsoOSMb4TB3JCchHY58.roa File: Z-4CpN1tKsoOSMb4TB3JCchHY58.roa (raw, json) Hash identifier: Z7eAgELYlzl5EqtJ31YuJrjV0dN4fNOaXu4xaJp9Ymo= Subject key identifier: 67:EE:02:A4:DD:6D:2A:CA:0E:48:C6:F8:4C:1D:C9:09:C8:47:63:9F Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 019B791130E9E9C920BBEB2730C771B4483D Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Z-4CpN1tKsoOSMb4TB3JCchHY58.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208454 IP address blocks: 2a07:22c1:ffec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:30:e9:e9:c9:20:bb:eb:27:30:c7:71:b4:48:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67ee02a4dd6d2aca0e48c6f84c1dc909c847639f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:43:ae:23:32:9c:2a:43:03:58:66:29:3e: ab:22:be:c9:c0:06:41:14:fd:f0:2f:69:bc:07:ad: 4b:d6:d6:5a:2f:6b:13:de:01:41:b1:3b:85:43:b2: 81:15:e2:a8:ce:78:c2:34:03:0f:c0:08:56:3f:51: 80:48:72:d8:61:6d:bb:f9:1d:75:31:75:28:f9:60: cd:f5:93:ee:d3:17:b1:df:03:86:d0:c0:d0:0d:0e: e0:34:08:88:3b:97:41:63:bb:df:a1:c1:90:31:f0: 22:25:4d:2e:1d:47:e4:23:a6:9a:8b:14:34:64:df: 08:8a:ff:cc:b4:f6:ea:a0:5d:e4:dd:39:47:1d:98: e4:16:cb:3e:15:00:fd:3d:1d:31:63:2e:be:c9:54: 4f:93:1f:b4:0b:22:3f:3d:8f:91:ee:78:dd:92:7b: 83:42:bf:73:73:40:f6:0c:81:c9:ab:40:41:c5:cf: 17:ce:69:5e:e8:c3:33:fd:35:88:9c:c0:82:ad:18: 48:5b:3b:1e:eb:e2:fe:34:7d:c9:d2:bb:1f:38:d2: 99:01:17:d0:61:05:df:8f:f6:f5:c3:6c:f2:0f:18: 34:04:98:1d:51:79:79:ff:16:c8:1d:17:ca:89:cb: c5:25:c9:00:96:d4:b3:c1:4e:1f:09:36:53:48:88: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EE:02:A4:DD:6D:2A:CA:0E:48:C6:F8:4C:1D:C9:09:C8:47:63:9F X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Z-4CpN1tKsoOSMb4TB3JCchHY58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:22c1:ffec::/48 Signature Algorithm: sha256WithRSAEncryption 58:80:b1:a7:07:a5:eb:e1:f0:68:d3:58:2d:46:48:8c:45:ce: 24:89:b0:55:21:a8:99:07:b6:29:41:57:9c:98:31:11:c6:37: 7b:42:d1:3a:0c:11:47:51:12:62:dc:d8:54:ed:4a:a3:f2:c1: a1:22:0a:b9:81:c6:3b:fd:a1:cd:ea:b0:28:e5:04:8d:27:ee: f6:6a:38:59:bd:89:e9:54:53:8a:87:28:ea:20:89:d2:c2:0e: cf:af:c4:7b:5e:c6:65:84:f3:9f:0a:80:42:71:41:8f:3f:98: 28:a2:ab:a7:43:b4:b2:ef:91:bb:27:0b:24:7c:60:9a:1a:ea: 05:28:0b:eb:29:9b:ae:d2:97:8f:78:df:79:64:f8:25:6b:43: 1b:e5:b3:fd:e6:3b:6f:bb:6d:5d:6b:95:c6:fd:42:1d:b4:fa: 23:ac:c9:86:6a:84:33:c4:7c:bf:b9:17:e7:e6:75:43:0c:7a: 36:15:5b:f2:e5:78:ad:b5:1f:11:44:bf:b4:ae:82:29:31:69: 63:8e:00:36:79:e8:92:59:10:ce:bc:24:4a:50:1c:09:29:36: 45:92:bd:17:8d:37:c8:96:04:63:f4:23:db:29:19:42:68:c3: d0:54:d9:4b:aa:5a:07:aa:ac:4b:b1:0c:63:97:40:1a:87:fd: b8:30:e0:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ETDp6ckgu+snMMdxtEg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2VlMDJhNGRkNmQyYWNhMGU0OGM2Zjg0YzFkYzkwOWM4NDc2MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuFDriMynCpDA1hmKT6rIr7JwAZB FP3wL2m8B61L1tZaL2sT3gFBsTuFQ7KBFeKoznjCNAMPwAhWP1GASHLYYW27+R11 MXUo+WDN9ZPu0xex3wOG0MDQDQ7gNAiIO5dBY7vfocGQMfAiJU0uHUfkI6aaixQ0 ZN8Iiv/MtPbqoF3k3TlHHZjkFss+FQD9PR0xYy6+yVRPkx+0CyI/PY+R7njdknuD Qr9zc0D2DIHJq0BBxc8Xzmle6MMz/TWInMCCrRhIWzse6+L+NH3J0rsfONKZARfQ YQXfj/b1w2zyDxg0BJgdUXl5/xbIHRfKicvFJckAltSzwU4fCTZTSIhCGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGfuAqTdbSrKDkjG+EwdyQnIR2OfMB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvWi00Q3BOMXRLc29PU01iNFRCM0pDY2hIWTU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgciwf/s MA0GCSqGSIb3DQEBCwUAA4IBAQBYgLGnB6Xr4fBo01gtRkiMRc4kibBVIaiZB7Yp QVecmDERxjd7QtE6DBFHURJi3NhU7Uqj8sGhIgq5gcY7/aHN6rAo5QSNJ+72ajhZ vYnpVFOKhyjqIInSwg7Pr8R7XsZlhPOfCoBCcUGPP5gooqunQ7Sy75G7JwskfGCa GuoFKAvrKZuu0pePeN95ZPgla0Mb5bP95jtvu21da5XG/UIdtPojrMmGaoQzxHy/ uRfn5nVDDHo2FVvy5XittR8RRL+0roIpMWljjgA2eeiSWRDOvCRKUBwJKTZFkr0X jTfIlgRj9CPbKRlCaMPQVNlLqloHqqxLsQxjl0Aah/24MOAp -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:04 2026 by rpki-client