This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/pZWv9aR-lAPmI9FegQDU1_TsJGQ.roa File: pZWv9aR-lAPmI9FegQDU1_TsJGQ.roa (raw, json) Hash identifier: zi9P3PwATT1zpaHWwrjwAJyWvhGqfYUdHlC1nMks7rY= Subject key identifier: A5:95:AF:F5:A4:7E:94:03:E6:23:D1:5E:81:00:D4:D7:F4:EC:24:64 Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792 Certificate serial: 019B7EA58057E642CCE9C30291747133DA6F Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/pZWv9aR-lAPmI9FegQDU1_TsJGQ.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 2a02:45c0:14::/48 maxlen: 48 2a02:45c0:16::/48 maxlen: 48 2a02:45c0:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:80:57:e6:42:cc:e9:c3:02:91:74:71:33:da:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792 Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a595aff5a47e9403e623d15e8100d4d7f4ec2464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:2f:50:59:16:e3:47:7d:96:a7:eb:e0:f8: 85:f4:0a:66:e9:23:5d:fd:6d:bf:b4:a2:2e:9e:28: 3c:63:56:45:a5:bf:f5:b0:8a:39:6e:df:a4:87:47: 61:02:dd:90:e1:d8:a3:87:69:ba:4f:cd:77:99:ea: 8b:80:97:1d:36:e0:92:06:1e:5e:ae:88:c5:f2:af: 01:59:58:8c:d4:9f:13:74:d7:38:eb:7c:06:94:77: 64:94:fb:05:3b:be:0c:c4:8c:7c:fa:e2:de:65:71: 14:8d:18:df:da:6d:1c:f9:42:ef:70:f4:7a:6d:99: 8c:96:6d:46:04:9a:31:76:87:90:88:c9:5a:e5:ca: 3f:1d:1f:73:ef:cc:8b:59:f5:62:6a:c4:57:ad:0f: bc:ae:2b:72:03:c8:70:bd:30:1b:43:a3:e6:77:8e: b8:05:e9:aa:5f:6d:3e:6a:8a:91:f6:c3:7a:b1:61: 70:cf:af:6a:cf:41:6d:54:eb:e2:11:3c:71:68:95: db:0f:30:9f:2b:1c:ef:7a:8e:b8:5d:18:73:98:7e: 66:52:74:92:3a:ce:db:79:17:05:28:75:6e:3d:7b: f6:3a:66:35:74:c6:9e:01:84:d4:0e:9a:de:9b:d1: 5e:d4:cb:78:f2:4e:85:59:a1:3b:10:eb:31:b4:9c: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:95:AF:F5:A4:7E:94:03:E6:23:D1:5E:81:00:D4:D7:F4:EC:24:64 X509v3 Authority Key Identifier: keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/pZWv9aR-lAPmI9FegQDU1_TsJGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:45c0:14::/48 2a02:45c0:16::/47 Signature Algorithm: sha256WithRSAEncryption 28:12:80:30:1f:5d:9b:83:28:9d:82:ab:50:33:4d:59:74:66: 23:bc:64:27:e6:e7:d0:53:4e:40:c2:02:18:c1:6f:c9:37:77: f0:96:ee:04:78:09:2e:4a:22:85:69:bb:16:ad:09:5b:02:2e: c9:87:6c:f1:e5:8a:ee:a5:6c:64:90:4f:fd:39:68:7d:d2:30: 87:bb:21:e7:8b:f2:91:f6:08:b3:f0:30:83:4a:7c:10:ab:4d: 9e:50:02:18:f5:58:29:cf:d4:0e:a4:a2:74:7a:2f:94:e9:46: 99:cb:5f:02:2b:5e:25:d7:c5:69:87:7d:5a:be:26:dd:2a:ec: 46:f5:11:0a:2e:bb:6a:d3:a2:4c:af:4f:7b:21:26:87:25:2f: 1e:17:5c:f3:a2:1c:22:78:ec:6a:3f:fe:4e:b8:a1:a2:af:25: df:64:ce:94:30:a1:3f:64:11:4f:14:c5:22:e0:46:8f:c0:f3: ae:fb:12:d0:63:49:43:89:d1:32:19:9c:13:98:74:fd:80:99: e8:54:9e:63:dd:87:7b:1f:2c:eb:f9:d3:4f:c1:14:f3:4c:21: bc:f0:f6:4a:92:bb:d5:d1:ab:ae:06:7e:fb:60:25:b1:f6:4a: 02:f9:31:53:f8:a2:6a:5b:84:6c:43:8b:af:74:0c:7c:58:af: 48:bb:bd:03 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pYBX5kLM6cMCkXRxM9pvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDRmOGU0NzYyMzc3Zjg2YjA3YTg3NTNmNmU5OGY2ZjRi NmI3OTIwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTk1YWZmNWE0N2U5NDAzZTYyM2QxNWU4MTAwZDRkN2Y0ZWMyNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i8vUFkW40d9lqfr4PiF9Apm6SNd /W2/tKIunig8Y1ZFpb/1sIo5bt+kh0dhAt2Q4dijh2m6T813meqLgJcdNuCSBh5e rojF8q8BWViM1J8TdNc463wGlHdklPsFO74MxIx8+uLeZXEUjRjf2m0c+ULvcPR6 bZmMlm1GBJoxdoeQiMla5co/HR9z78yLWfViasRXrQ+8rityA8hwvTAbQ6Pmd464 BemqX20+aoqR9sN6sWFwz69qz0FtVOviETxxaJXbDzCfKxzveo64XRhzmH5mUnSS Os7beRcFKHVuPXv2OmY1dMaeAYTUDprem9Fe1Mt48k6FWaE7EOsxtJzWzwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKWVr/WkfpQD5iPRXoEA1Nf07CRkMB8GA1UdIwQY MBaAFNvU+OR2I3f4aweodT9umPb0treSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUt NjIwYTc5Y2Y3OTJiLzEvcFpXdjlhUi1sQVBtSTlGZWdRRFUxX1RzSkdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUtNjIwYTc5Y2Y3OTJi LzEvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgJFwAAU AwcBKgJFwAAWMA0GCSqGSIb3DQEBCwUAA4IBAQAoEoAwH12bgyidgqtQM01ZdGYj vGQn5ufQU05AwgIYwW/JN3fwlu4EeAkuSiKFabsWrQlbAi7Jh2zx5YrupWxkkE/9 OWh90jCHuyHni/KR9giz8DCDSnwQq02eUAIY9Vgpz9QOpKJ0ei+U6UaZy18CK14l 18Vph31avibdKuxG9REKLrtq06JMr097ISaHJS8eF1zzohwieOxqP/5OuKGiryXf ZM6UMKE/ZBFPFMUi4EaPwPOu+xLQY0lDidEyGZwTmHT9gJnoVJ5j3Yd7Hyzr+dNP wRTzTCG88PZKkrvV0auuBn77YCWx9koC+TFT+KJqW4RsQ4uvdAx8WK9Iu70D -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:10 2026 by rpki-client