This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ZAR3134MSG7c8pQeqt21BjTKzHk.roa File: ZAR3134MSG7c8pQeqt21BjTKzHk.roa (raw, json) Hash identifier: H4qYUBv0F0ZniT9I1OT/UVS7jhOeC3g/GkknK01ImTE= Subject key identifier: 64:04:77:D7:7E:0C:48:6E:DC:F2:94:1E:AA:DD:B5:06:34:CA:CC:79 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E91C092321CDEEC7DCEF1B49F466 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ZAR3134MSG7c8pQeqt21BjTKzHk.roa Signing time: Thu 01 Jan 2026 18:19:05 +0000 ROA not before: Thu 01 Jan 2026 18:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207807 IP address blocks: 2a00:7180:800c::/46 maxlen: 46 2a04:800:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e9:1c:09:23:21:cd:ee:c7:dc:ef:1b:49:f4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=640477d77e0c486edcf2941eaaddb50634cacc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:85:37:ec:07:da:83:5f:1d:80:49:88:67: 3c:b9:aa:32:7e:f5:fc:96:b0:7c:9c:8d:fb:56:84: f3:12:19:06:47:29:92:71:08:95:66:03:0b:05:2d: 87:34:55:36:9a:0b:dd:28:6c:97:0c:d8:f9:c3:b5: bb:24:de:e8:36:bc:05:99:df:6f:ee:9a:8a:ba:fd: df:0f:36:49:d8:a5:3a:d3:e9:58:b8:23:96:5e:d2: 92:d0:08:11:a6:6d:db:06:47:d1:13:51:50:d0:ca: 14:09:a9:cf:ef:b9:6d:37:1a:cf:4e:0e:e2:a3:b7: e5:60:1c:e8:1b:e7:25:98:e9:b2:44:a6:32:48:96: 90:59:0f:3a:b4:19:a1:37:94:ab:6b:61:16:1c:15: a4:f5:84:ca:aa:55:89:f3:9b:06:72:44:f2:4f:51: 51:ea:5b:69:d9:1f:d0:12:42:a4:fb:8b:e4:d9:eb: 6d:ed:1d:c9:51:df:b4:5d:1c:ae:ba:52:f1:cc:95: 24:9a:31:fd:50:49:c1:6e:eb:09:da:fc:77:3a:89: 64:34:92:41:16:28:66:f7:6d:a7:92:b7:46:bb:49: c3:f8:a8:95:3f:cb:2c:01:ea:ef:04:9a:a5:0f:56: cc:ab:b5:ee:2e:26:ed:17:93:75:9e:02:80:58:90: 37:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:04:77:D7:7E:0C:48:6E:DC:F2:94:1E:AA:DD:B5:06:34:CA:CC:79 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ZAR3134MSG7c8pQeqt21BjTKzHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:7180:800c::/46 2a04:800:8000::/36 Signature Algorithm: sha256WithRSAEncryption 62:f1:8c:e2:db:f5:37:8c:7c:c7:68:7f:2f:5d:60:d0:54:65: 1f:23:44:58:ac:e2:4d:96:c5:7a:96:f5:a4:37:88:3f:06:ba: fd:be:11:25:78:65:92:1c:b5:21:cc:b7:ef:89:80:d6:61:21: e8:9f:42:56:c1:7c:2a:82:df:2b:a2:7f:0d:05:4c:fa:35:eb: 76:46:bc:31:7b:7f:76:fc:60:9d:17:e3:fc:e3:52:f7:40:26: 7f:ba:46:26:c8:f9:15:8d:c4:dd:51:4b:d8:ad:af:75:e0:36: ce:6d:a6:64:04:44:04:2e:c0:58:87:8d:a7:31:57:7e:d2:21: da:54:79:62:83:58:42:be:f3:9b:25:c8:4c:68:5b:4b:42:bf: 83:67:96:8c:72:c3:02:fa:34:1e:e5:22:12:13:23:f6:a8:96: 24:5a:b2:2e:d3:26:eb:bd:86:cb:5f:00:9f:1a:01:5e:0d:54: 2d:35:b7:ce:a9:be:1e:4d:34:24:3a:36:77:1c:f2:a9:57:b7: 2d:e9:42:84:92:3c:67:68:d9:e7:c2:c4:b3:50:da:41:5e:f9: 29:fd:d6:9e:ab:e3:82:b1:9f:86:b6:05:86:19:f1:c9:fd:35: 33:ad:d7:53:a3:40:30:38:e1:b7:19:b7:df:56:37:24:20:a6: 3e:2b:7e:bf -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt6yOkcCSMhze7H3O8bSfRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDA0NzdkNzdlMGM0ODZlZGNmMjk0MWVhYWRkYjUwNjM0Y2FjYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SSFN+wH2oNfHYBJiGc8uaoyfvX8 lrB8nI37VoTzEhkGRymScQiVZgMLBS2HNFU2mgvdKGyXDNj5w7W7JN7oNrwFmd9v 7pqKuv3fDzZJ2KU60+lYuCOWXtKS0AgRpm3bBkfRE1FQ0MoUCanP77ltNxrPTg7i o7flYBzoG+clmOmyRKYySJaQWQ86tBmhN5Sra2EWHBWk9YTKqlWJ85sGckTyT1FR 6ltp2R/QEkKk+4vk2ett7R3JUd+0XRyuulLxzJUkmjH9UEnBbusJ2vx3OolkNJJB Fihm922nkrdGu0nD+KiVP8ssAervBJqlD1bMq7XuLibtF5N1ngKAWJA3/wIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFGQEd9d+DEhu3PKUHqrdtQY0ysx5MB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvWkFSMzEzNE1TRzdjOHBRZXF0MjFCalRLekhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcCKgBxgIAM AwYEKgQIAIAwDQYJKoZIhvcNAQELBQADggEBAGLxjOLb9TeMfMdofy9dYNBUZR8j RFis4k2WxXqW9aQ3iD8Guv2+ESV4ZZIctSHMt++JgNZhIeifQlbBfCqC3yuifw0F TPo163ZGvDF7f3b8YJ0X4/zjUvdAJn+6RibI+RWNxN1RS9itr3XgNs5tpmQERAQu wFiHjacxV37SIdpUeWKDWEK+85slyExoW0tCv4NnloxywwL6NB7lIhITI/aoliRa si7TJuu9hstfAJ8aAV4NVC01t86pvh5NNCQ6Nncc8qlXty3pQoSSPGdo2efCxLNQ 2kFe+Sn91p6r44Kxn4a2BYYZ8cn9NTOt11OjQDA44bcZt99WNyQgpj4rfr8= -----END CERTIFICATE-----Generated at Mon Jan 26 05:06:12 2026 by rpki-client