This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/Za9edju3Ak6jIpbbM-dgDTiQRg8.roa File: Za9edju3Ak6jIpbbM-dgDTiQRg8.roa (raw, json) Hash identifier: 5PiTVwFMt5aJsM/PWU2Wdhe9NkgdD2qpEw6g00g9GxY= Subject key identifier: 65:AF:5E:76:3B:B7:02:4E:A3:22:96:DB:33:E7:60:0D:38:90:46:0F Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93 Certificate serial: 019B7758896D88E0A8E3BDAE7C5EC7C99F44 Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/Za9edju3Ak6jIpbbM-dgDTiQRg8.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213953 IP address blocks: 2a14:ec00:3::/48 maxlen: 48 2a14:ec00:4::/48 maxlen: 48 2a14:ec00:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:89:6d:88:e0:a8:e3:bd:ae:7c:5e:c7:c9:9f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65af5e763bb7024ea32296db33e7600d3890460f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:b8:3d:d9:c9:33:13:ca:82:76:5a:a2:20: 88:9e:af:34:16:5e:fe:52:9d:05:f9:f4:f5:44:db: a5:09:91:07:ba:c2:ae:3e:6e:58:b2:7a:f7:4a:d1: 9c:a1:cd:08:20:c0:29:c8:0d:b3:33:45:9f:b0:57: e6:6c:15:d5:2d:06:2a:5a:36:e0:6d:24:cf:6f:45: ba:59:b4:c1:67:da:45:94:28:35:ca:a2:31:fc:fb: 46:08:a8:80:00:3b:42:99:19:43:b9:cc:38:98:8f: c7:2b:62:f4:7f:2f:f4:74:bd:1d:6e:01:55:6b:7a: ac:20:b9:63:79:47:55:c9:21:6d:69:51:5f:1d:60: c0:a8:4e:34:1b:7b:61:59:92:db:d9:d8:81:f9:02: c5:23:2e:c4:91:d8:53:11:79:d8:d4:16:ca:ce:be: 26:be:a4:12:ee:3d:18:2b:b5:91:a1:a3:74:6a:4f: af:04:3c:d2:d6:b4:59:d6:34:2c:a7:8d:c0:61:80: 11:2c:fc:34:9c:59:bf:02:15:4e:26:e3:d9:68:74: 44:54:38:19:a9:05:c4:c8:35:78:c8:a0:4d:3c:f8: b6:a0:e4:ff:40:e5:a5:c3:52:6b:d9:25:fa:e0:f2: 9a:47:8a:be:71:40:e4:24:96:d8:2b:24:45:23:28: a0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AF:5E:76:3B:B7:02:4E:A3:22:96:DB:33:E7:60:0D:38:90:46:0F X509v3 Authority Key Identifier: keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/Za9edju3Ak6jIpbbM-dgDTiQRg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ec00:3::-2a14:ec00:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption aa:fc:4f:ea:99:24:e9:83:0c:a7:6f:67:46:f2:e0:68:6e:15: f9:15:f3:a2:5f:ae:94:2a:ea:80:43:2b:ff:b8:57:a1:d8:51: 2d:20:83:2a:44:84:b7:a9:a7:dc:ea:9c:a7:a9:39:99:bd:e4: 68:61:6e:c2:25:0b:2c:53:c2:b4:41:57:fa:a8:9a:bf:84:cc: 6e:8a:de:bc:a9:1c:96:ca:b8:57:0a:1d:a7:9b:b3:53:4d:19: ff:b8:e4:15:ed:10:5a:8d:2a:c9:19:ff:d0:e9:74:6c:b4:de: 87:24:09:d7:44:f2:f2:16:69:5a:8b:2e:39:bb:80:34:29:a4: f3:65:d8:8a:df:b5:31:38:32:a4:bc:51:ce:16:01:6a:c0:2e: fd:41:69:c3:6a:f2:b0:bf:ac:35:1d:7a:ec:c6:cf:0e:e6:43: e7:e9:21:bc:82:ff:62:74:d7:a9:69:c2:8f:38:92:eb:41:70: 47:06:ec:53:92:98:ea:0b:a1:2a:06:f9:ae:28:86:28:8c:f3: 56:b2:53:a8:3d:32:59:b6:7a:70:75:b4:6f:98:41:1c:83:97: 21:78:80:45:87:cf:48:cc:ff:8a:63:d9:0d:d4:20:c2:2d:0a: 69:e2:d8:2c:24:65:41:1d:3d:f4:d9:83:93:0b:32:94:6c:0b: b0:3b:b6:0b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WIltiOCo472ufF7HyZ9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjY2YzM2NmNzg0NzczMTNjNzM4MmU4OWIxNzU3M2VkNjg1 ODhiOTMwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWFmNWU3NjNiYjcwMjRlYTMyMjk2ZGIzM2U3NjAwZDM4OTA0NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR64PdnJMxPKgnZaoiCInq80Fl7+ Up0F+fT1RNulCZEHusKuPm5Ysnr3StGcoc0IIMApyA2zM0WfsFfmbBXVLQYqWjbg bSTPb0W6WbTBZ9pFlCg1yqIx/PtGCKiAADtCmRlDucw4mI/HK2L0fy/0dL0dbgFV a3qsILljeUdVySFtaVFfHWDAqE40G3thWZLb2diB+QLFIy7EkdhTEXnY1BbKzr4m vqQS7j0YK7WRoaN0ak+vBDzS1rRZ1jQsp43AYYARLPw0nFm/AhVOJuPZaHREVDgZ qQXEyDV4yKBNPPi2oOT/QOWlw1Jr2SX64PKaR4q+cUDkJJbYKyRFIyigJQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGWvXnY7twJOoyKW2zPnYA04kEYPMB8GA1UdIwQY MBaAFBzPM894R3MTxzguibF1c+1oWIuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2Mt MTI4ZTAwNTNkY2NmLzEvWmE5ZWRqdTNBazZqSXBiYk0tZGdEVGlRUmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZWYyN2UtOTkwMy00YzNmLTgwN2MtMTI4ZTAwNTNkY2Nm LzEvSE04enozaEhjeFBIT0M2SnNYVno3V2hZaTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqFOwA AAMDBwEqFOwAAAQwDQYJKoZIhvcNAQELBQADggEBAKr8T+qZJOmDDKdvZ0by4Ghu FfkV86JfrpQq6oBDK/+4V6HYUS0ggypEhLepp9zqnKepOZm95GhhbsIlCyxTwrRB V/qomr+EzG6K3rypHJbKuFcKHaebs1NNGf+45BXtEFqNKskZ/9DpdGy03ockCddE 8vIWaVqLLjm7gDQppPNl2IrftTE4MqS8Uc4WAWrALv1BacNq8rC/rDUdeuzGzw7m Q+fpIbyC/2J016lpwo84kutBcEcG7FOSmOoLoSoG+a4ohiiM81ayU6g9Mlm2enB1 tG+YQRyDlyF4gEWHz0jM/4pj2Q3UIMItCmni2CwkZUEdPfTZg5MLMpRsC7A7tgs= -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:47 2026 by rpki-client