This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/zafpGp_sXGMh4yV6m5qLy7sLUpc.roa File: zafpGp_sXGMh4yV6m5qLy7sLUpc.roa (raw, json) Hash identifier: 2igpnziXWmq3SSWSag4FaHfVQQZsNnQ4/MO8icdVPHM= Subject key identifier: CD:A7:E9:1A:9F:EC:5C:63:21:E3:25:7A:9B:9A:8B:CB:BB:0B:52:97 Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d Certificate serial: 019B7D5ACE4FDF14F1757BE6FF505B663E72 Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/zafpGp_sXGMh4yV6m5qLy7sLUpc.roa Signing time: Fri 02 Jan 2026 06:17:41 +0000 ROA not before: Fri 02 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214359 IP address blocks: 2001:3680::/29 maxlen: 29 2001:3680::/48 maxlen: 48 2001:3680:1::/48 maxlen: 48 2001:3680:2::/48 maxlen: 48 2001:3680:3::/48 maxlen: 48 2001:3680:4::/48 maxlen: 48 2001:3680:5::/48 maxlen: 48 2001:3680:6::/48 maxlen: 48 2001:3680:7::/48 maxlen: 48 2001:3680:8::/48 maxlen: 48 2001:3680:9::/48 maxlen: 48 2001:3680:a::/48 maxlen: 48 2001:3680:b::/48 maxlen: 48 2001:3680:c::/48 maxlen: 48 2001:3680:d::/48 maxlen: 48 2001:3680:e::/48 maxlen: 48 2001:3680:f::/48 maxlen: 48 2001:3680:10::/48 maxlen: 48 2001:3680:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ce:4f:df:14:f1:75:7b:e6:ff:50:5b:66:3e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d Validity Not Before: Jan 2 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cda7e91a9fec5c6321e3257a9b9a8bcbbb0b5297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9d:4e:e7:d6:37:91:fb:ed:97:3b:f4:6c:d7: 7a:91:28:a3:b9:d3:d0:25:27:a1:41:7c:78:fd:45: 33:6e:18:b4:5c:ba:23:38:7d:dc:97:8b:e4:9a:13: 49:e5:3f:8b:00:75:8c:47:77:47:25:f2:be:ee:64: b1:c8:60:61:40:ec:86:99:23:d0:f1:dd:a9:5e:4d: d2:d3:45:ae:b9:73:b1:53:e6:23:92:f5:57:ad:cc: c3:06:9d:82:c9:88:36:4c:7a:93:bf:f7:bb:55:fd: ca:b6:73:1f:cc:4f:9c:9d:e5:e5:f0:45:f1:eb:67: d8:6e:28:af:a8:a3:60:83:f1:21:bd:e1:39:59:17: 94:46:ed:5d:5c:90:2f:82:04:19:6d:1d:14:51:d2: 4c:a9:10:94:eb:4d:09:0b:a5:49:7a:70:65:c3:57: a0:a8:26:62:e2:58:5a:8d:15:23:e4:62:63:03:f1: 4c:79:78:26:6a:4c:bf:88:99:51:9d:b3:4e:65:64: 9a:89:32:67:32:4d:7b:6f:d5:97:41:55:1a:ef:49: 6c:23:62:45:d3:d2:7e:61:66:00:d5:02:af:4e:17: 8a:2d:c2:52:0a:f1:9d:03:51:02:47:7f:49:b1:70: 40:fa:6d:12:be:73:41:e8:83:65:c3:a1:01:46:5e: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A7:E9:1A:9F:EC:5C:63:21:E3:25:7A:9B:9A:8B:CB:BB:0B:52:97 X509v3 Authority Key Identifier: keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/zafpGp_sXGMh4yV6m5qLy7sLUpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3680::/29 Signature Algorithm: sha256WithRSAEncryption 6d:8d:00:43:2b:76:14:9c:e3:44:59:ce:76:60:37:29:19:50: 35:af:28:30:f6:4e:1b:57:ca:a0:d8:fe:24:d8:9c:d6:b0:dd: 2f:19:87:e6:2f:6d:d4:95:fb:61:55:88:b0:c8:5e:87:21:4f: e5:3c:9d:8a:5a:9b:72:ca:a7:08:b0:d3:cc:7b:ce:d8:c4:97: 9f:60:3b:db:84:05:8a:0d:b6:70:33:47:af:23:f6:9e:f7:8c: 5c:19:df:1a:3f:27:c4:2b:73:dc:5b:f3:8a:70:95:be:7b:ce: e3:3e:9d:be:02:2a:9f:4c:ab:f5:a0:9f:94:77:be:cf:7f:0e: e3:ec:57:c5:e8:e0:60:cb:22:94:5b:63:62:aa:e2:35:04:55: c8:e3:14:f0:a2:04:b8:97:99:53:fd:f6:d8:fd:75:50:f3:92: fa:e9:31:1b:a5:00:c4:59:96:e4:37:de:5e:d6:fd:2e:5c:d3: 2b:4c:94:25:e7:84:8d:62:d8:d7:a6:ea:99:38:34:57:25:ef: 4b:63:b9:c8:db:4a:aa:f7:01:34:ff:32:f5:de:63:69:e9:09: 97:6f:20:26:10:77:c8:14:1a:32:40:0b:fb:89:b7:80:70:ad: f3:95:f8:56:2b:b9:04:21:95:06:1b:98:69:ec:4a:6a:b9:7a: 4b:94:d2:06 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9Ws5P3xTxdXvm/1BbZj5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMDA3OGEyN2YxMDAzMjYzYzRjNTYxYjAyNTA3NjZmMmY1 MjZlN2QwHhcNMjYwMTAyMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGE3ZTkxYTlmZWM1YzYzMjFlMzI1N2E5YjlhOGJjYmJiMGI1Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA651O59Y3kfvtlzv0bNd6kSijudPQ JSehQXx4/UUzbhi0XLojOH3cl4vkmhNJ5T+LAHWMR3dHJfK+7mSxyGBhQOyGmSPQ 8d2pXk3S00WuuXOxU+YjkvVXrczDBp2CyYg2THqTv/e7Vf3KtnMfzE+cneXl8EXx 62fYbiivqKNgg/EhveE5WReURu1dXJAvggQZbR0UUdJMqRCU600JC6VJenBlw1eg qCZi4lhajRUj5GJjA/FMeXgmaky/iJlRnbNOZWSaiTJnMk17b9WXQVUa70lsI2JF 09J+YWYA1QKvTheKLcJSCvGdA1ECR39JsXBA+m0SvnNB6INlw6EBRl4FBwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFM2n6Rqf7FxjIeMlepuai8u7C1KXMB8GA1UdIwQY MBaAFLwAeKJ/EAMmPExWGwJQdm8vUm59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jMTViYTctZDgyZi00ZGRhLTkwM2Mt YzE0YWFjNDFhMWMyLzEvemFmcEdwX3NYR01oNHlWNm01cUx5N3NMVXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9jMTViYTctZDgyZi00ZGRhLTkwM2MtYzE0YWFjNDFhMWMy LzEvdkFCNG9uOFFBeVk4VEZZYkFsQjJieTlTYm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE2gDAN BgkqhkiG9w0BAQsFAAOCAQEAbY0AQyt2FJzjRFnOdmA3KRlQNa8oMPZOG1fKoNj+ JNic1rDdLxmH5i9t1JX7YVWIsMhehyFP5TydilqbcsqnCLDTzHvO2MSXn2A724QF ig22cDNHryP2nveMXBnfGj8nxCtz3FvzinCVvnvO4z6dvgIqn0yr9aCflHe+z38O 4+xXxejgYMsilFtjYqriNQRVyOMU8KIEuJeZU/322P11UPOS+ukxG6UAxFmW5Dfe Xtb9LlzTK0yUJeeEjWLY16bqmTg0VyXvS2O5yNtKqvcBNP8y9d5jaekJl28gJhB3 yBQaMkAL+4m3gHCt85X4Viu5BCGVBhuYaexKarl6S5TSBg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:06 2026 by rpki-client