This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/ZbRHE63NTowomZ--6hRN7-VQWd4.roa File: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (raw, json) Hash identifier: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY= Subject key identifier: 65:B4:47:13:AD:CD:4E:8C:28:99:9F:BE:EA:14:4D:EF:E5:50:59:DE Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Certificate serial: 019B791060F01EC2108A07407B2B6B054B1B Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/ZbRHE63NTowomZ--6hRN7-VQWd4.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209553 IP address blocks: 2a09:1c40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:60:f0:1e:c2:10:8a:07:40:7b:2b:6b:05:4b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65b44713adcd4e8c28999fbeea144defe55059de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:6a:7c:db:d8:9d:c3:a0:49:a9:c6:95:56: 0b:3d:90:78:31:e0:94:bc:a0:d9:60:5b:ca:f0:4e: c1:bc:91:1d:b4:32:9b:26:f5:55:cd:05:9c:a3:fd: 8b:0d:5c:4b:85:5f:41:70:3b:7b:e3:ec:ed:97:6b: 9d:6b:2d:3f:1f:d6:48:87:dc:43:40:14:ae:05:a1: d4:8d:e8:4e:b3:fe:1c:6e:c8:a8:4e:01:0e:a5:41: 29:e3:e9:fd:70:44:6a:fb:31:92:92:9a:ba:6f:97: 5b:4f:93:4a:6f:73:ac:e4:5c:77:d6:68:1b:88:c0: 30:97:c6:47:e0:a0:1a:26:bd:92:d3:c0:72:bf:12: 6c:6a:ba:c8:50:20:fb:b1:7b:a7:3e:d5:8c:df:41: 0b:9c:ea:ce:42:52:67:3d:da:6f:67:7c:98:5f:46: 9e:3c:1c:17:fd:1b:8d:f8:9c:36:2a:c8:18:9b:21: 12:df:c8:d3:b7:ce:08:e0:90:a4:e2:e7:5e:0d:9b: a3:01:47:ae:e2:13:f9:b9:67:8e:bd:42:3b:7c:5e: ed:72:12:02:7d:06:ca:18:89:4c:c9:4c:70:c6:1b: e0:4e:ff:90:e8:b8:dd:84:d6:62:c1:7f:88:f6:2a: f7:30:5f:8b:dd:d3:7c:dd:7b:07:06:f8:d4:9f:ba: 9d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B4:47:13:AD:CD:4E:8C:28:99:9F:BE:EA:14:4D:EF:E5:50:59:DE X509v3 Authority Key Identifier: keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/ZbRHE63NTowomZ--6hRN7-VQWd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:1c40::/32 Signature Algorithm: sha256WithRSAEncryption 71:2c:33:52:03:e3:92:27:18:ec:23:0e:72:6f:fa:ab:61:e9: 29:ea:4e:e0:07:65:e4:8f:d4:21:15:f1:24:53:31:ab:05:55: 78:0e:3e:9d:a5:f6:4a:1a:f8:78:5f:56:cf:78:15:25:b4:74: 30:e0:1f:6e:b0:e1:51:63:3a:21:a5:ca:16:af:bf:b0:be:9a: ba:da:e1:65:00:aa:92:1b:00:f9:7b:49:f0:3c:aa:25:20:94: 84:e6:11:78:2a:ff:b0:f8:22:e2:1c:f7:0c:5c:cc:3b:60:18: 6d:d0:7c:bd:72:99:fb:33:41:48:ee:b3:d6:8e:2e:52:56:05: 74:7b:ff:e0:d7:70:9b:a5:81:b8:74:ad:36:b4:09:6c:08:29: f4:33:ff:32:d8:8f:61:7e:ce:33:a8:43:d6:5c:78:7f:ce:30: 28:84:f8:44:ea:09:dd:d3:de:63:ce:84:7d:34:7d:d5:8e:a1: 82:f3:30:3e:c9:f6:ab:b2:39:70:75:b3:b4:15:b6:b8:c9:b9: 08:2b:83:7e:14:33:e3:9f:9f:3a:cc:7b:77:5c:af:62:a9:91: e3:31:8b:b1:bb:75:16:08:5e:ce:a1:62:55:aa:8b:75:c7:62: 96:b5:85:f5:48:cf:78:e7:b7:0b:8d:6a:e5:6f:84:ff:70:6a: 04:11:f2:94 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EGDwHsIQigdAeytrBUsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZThiYWVhOTVkNDA0MDM0OGYwYTg5ZWM0ZTRiZDE1Mjc1 ZjZjMzkwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWI0NDcxM2FkY2Q0ZThjMjg5OTlmYmVlYTE0NGRlZmU1NTA1OWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkNqfNvYncOgSanGlVYLPZB4MeCU vKDZYFvK8E7BvJEdtDKbJvVVzQWco/2LDVxLhV9BcDt74+ztl2uday0/H9ZIh9xD QBSuBaHUjehOs/4cbsioTgEOpUEp4+n9cERq+zGSkpq6b5dbT5NKb3Os5Fx31mgb iMAwl8ZH4KAaJr2S08ByvxJsarrIUCD7sXunPtWM30ELnOrOQlJnPdpvZ3yYX0ae PBwX/RuN+Jw2KsgYmyES38jTt84I4JCk4udeDZujAUeu4hP5uWeOvUI7fF7tchIC fQbKGIlMyUxwxhvgTv+Q6LjdhNZiwX+I9ir3MF+L3dN83XsHBvjUn7qd5QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFGW0RxOtzU6MKJmfvuoUTe/lUFneMB8GA1UdIwQY MBaAFGjouuqV1AQDSPConsTkvRUnX2w5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2Ut MzcxMWZhZThjYTc3LzEvWmJSSEU2M05Ub3dvbVotLTZoUk43LVZRV2Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2UtMzcxMWZhZThjYTc3 LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgkcQDAN BgkqhkiG9w0BAQsFAAOCAQEAcSwzUgPjkicY7CMOcm/6q2HpKepO4Adl5I/UIRXx JFMxqwVVeA4+naX2Shr4eF9Wz3gVJbR0MOAfbrDhUWM6IaXKFq+/sL6autrhZQCq khsA+XtJ8DyqJSCUhOYReCr/sPgi4hz3DFzMO2AYbdB8vXKZ+zNBSO6z1o4uUlYF dHv/4Ndwm6WBuHStNrQJbAgp9DP/MtiPYX7OM6hD1lx4f84wKIT4ROoJ3dPeY86E fTR91Y6hgvMwPsn2q7I5cHWztBW2uMm5CCuDfhQz45+fOsx7d1yvYqmR4zGLsbt1 FghezqFiVaqLdcdilrWF9UjPeOe3C41q5W+E/3BqBBHylA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:59 2026 by rpki-client