This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ZwfYtQdpPsN9KHpPY5fXnHwXUYg.roa File: ZwfYtQdpPsN9KHpPY5fXnHwXUYg.roa (raw, json) Hash identifier: 2C5kdsdsC9MylZkl1qPNwxfNrw/IRAEIjKuvYWD7gp0= Subject key identifier: 67:07:D8:B5:07:69:3E:C3:7D:28:7A:4F:63:97:D7:9C:7C:17:51:88 Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDEF3CACE7C9ECCE270B38E2BC532E Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ZwfYtQdpPsN9KHpPY5fXnHwXUYg.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207740 IP address blocks: 2a05:1082:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ef:3c:ac:e7:c9:ec:ce:27:0b:38:e2:bc:53:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6707d8b507693ec37d287a4f6397d79c7c175188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:3d:6b:5f:ac:47:80:76:74:f5:9d:12:5f: 2e:9b:07:62:95:be:9e:6e:92:6d:1c:c5:4a:7a:7b: d6:2d:3d:5a:2c:2b:b7:9f:f4:23:6b:fa:97:bd:33: e0:38:97:4b:e9:9e:c5:4d:3c:10:ae:e3:cc:20:c3: 4d:ce:3f:8d:9f:a5:7c:f1:e2:d3:a1:08:7b:6f:5b: 69:37:9f:04:ed:0b:f4:ef:7c:de:28:71:d8:f8:fc: 2e:60:7f:81:ce:22:71:16:bd:3e:18:c8:97:07:19: a7:d2:f5:60:1f:52:0c:f0:a4:fc:f2:6c:79:5b:c9: c7:f1:3f:1b:61:9e:7d:12:43:b6:12:83:b1:b4:64: 2d:4b:f2:55:01:1b:6f:34:aa:11:5d:81:90:d3:fa: fe:f1:14:3f:5e:f6:7b:85:c6:13:3a:52:2e:1c:9d: 2d:60:45:d6:a1:f2:8d:32:9a:cd:c2:52:61:f8:74: cc:d7:da:47:99:8c:10:cd:f9:dd:3c:f9:b8:2a:c3: 98:fe:d8:e5:75:07:e1:4f:60:c9:b6:f1:68:6f:dd: 8d:29:0d:98:5f:48:9e:e1:aa:32:fe:27:53:4f:cd: 55:1b:a4:73:01:ba:83:9d:28:b8:76:ac:a7:82:aa: 14:78:e3:33:de:46:21:2e:27:a3:2b:71:22:cb:29: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:07:D8:B5:07:69:3E:C3:7D:28:7A:4F:63:97:D7:9C:7C:17:51:88 X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ZwfYtQdpPsN9KHpPY5fXnHwXUYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:1082:f::/48 Signature Algorithm: sha256WithRSAEncryption 56:53:78:aa:9c:9a:1e:dc:59:f6:4a:00:77:ab:62:a7:c1:b7: b4:84:8a:e6:77:17:cc:9a:3d:2f:2b:c9:cf:93:62:47:87:18: 65:5c:89:57:10:69:17:42:2e:eb:69:11:b8:41:15:08:be:cd: 2b:8e:32:a6:16:1e:ee:60:44:d3:bb:ad:d2:09:fa:bb:54:a8: c1:b0:59:ea:b9:b9:65:00:59:b8:f9:9b:9a:82:cd:b9:16:23: 8a:2f:a4:cc:92:1c:19:1e:74:51:71:57:f3:af:60:47:c1:c3: 0a:d9:e6:cb:25:06:76:e2:a0:41:33:04:f3:08:5f:94:4e:3d: 8c:ad:d0:58:0b:dd:63:de:c9:7c:7a:ce:c6:e1:f3:f2:ad:de: 53:3d:e5:9b:b1:bc:b1:a3:52:11:75:0c:3d:ec:ee:29:fe:d4: a1:da:9c:9c:c4:61:31:9c:4c:7d:0a:3a:88:95:51:7a:89:08: 10:38:90:69:6e:8d:2a:55:f6:5b:c7:72:5f:d7:4f:e9:68:04: b4:a6:06:a8:41:ae:b7:4a:d9:70:38:f9:62:9e:78:5b:3c:9e: 17:84:be:13:81:26:83:6f:d9:28:5c:7a:e2:a0:d4:90:56:12: 10:af:0f:d1:36:3f:a9:4a:57:e6:2d:53:5a:19:f0:dc:98:35: bf:90:5e:9c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87e88rOfJ7M4nCzjivFMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzA3ZDhiNTA3NjkzZWMzN2QyODdhNGY2Mzk3ZDc5YzdjMTc1MTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0E9a1+sR4B2dPWdEl8umwdilb6e bpJtHMVKenvWLT1aLCu3n/Qja/qXvTPgOJdL6Z7FTTwQruPMIMNNzj+Nn6V88eLT oQh7b1tpN58E7Qv073zeKHHY+PwuYH+BziJxFr0+GMiXBxmn0vVgH1IM8KT88mx5 W8nH8T8bYZ59EkO2EoOxtGQtS/JVARtvNKoRXYGQ0/r+8RQ/XvZ7hcYTOlIuHJ0t YEXWofKNMprNwlJh+HTM19pHmYwQzfndPPm4KsOY/tjldQfhT2DJtvFob92NKQ2Y X0ie4aoy/idTT81VG6RzAbqDnSi4dqyngqoUeOMz3kYhLiejK3EiyymfgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGcH2LUHaT7DfSh6T2OX15x8F1GIMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvWndmWXRRZHBQc045S0hwUFk1ZlhuSHdYVVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgUQggAP MA0GCSqGSIb3DQEBCwUAA4IBAQBWU3iqnJoe3Fn2SgB3q2Knwbe0hIrmdxfMmj0v K8nPk2JHhxhlXIlXEGkXQi7raRG4QRUIvs0rjjKmFh7uYETTu63SCfq7VKjBsFnq ubllAFm4+Zuags25FiOKL6TMkhwZHnRRcVfzr2BHwcMK2ebLJQZ24qBBMwTzCF+U Tj2MrdBYC91j3sl8es7G4fPyrd5TPeWbsbyxo1IRdQw97O4p/tSh2pycxGExnEx9 CjqIlVF6iQgQOJBpbo0qVfZbx3Jf10/paAS0pgaoQa63StlwOPlinnhbPJ4XhL4T gSaDb9koXHrioNSQVhIQrw/RNj+pSlfmLVNaGfDcmDW/kF6c -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:34 2026 by rpki-client