This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zBsKn6aKSGw0oDiJPIF86p6ylYE.roa File: zBsKn6aKSGw0oDiJPIF86p6ylYE.roa (raw, json) Hash identifier: FB4I3gRLDjVQUzKivQ3e7z52JzqEXlXy6GlDxAJio0k= Subject key identifier: CC:1B:0A:9F:A6:8A:48:6C:34:A0:38:89:3C:81:7C:EA:9E:B2:95:81 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F151BF079063EB67A810557EACD6CAD Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zBsKn6aKSGw0oDiJPIF86p6ylYE.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400328 IP address blocks: 2a14:c380:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1b:f0:79:06:3e:b6:7a:81:05:57:ea:cd:6c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc1b0a9fa68a486c34a038893c817cea9eb29581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:47:0a:1f:6c:13:9b:00:c7:e0:ee:5d:c6: 99:82:4e:a5:b0:6b:c0:9f:dc:3d:91:ca:da:0e:57: 0b:11:b3:65:84:30:70:c3:6b:84:2d:b2:6a:e1:90: ac:8f:54:85:49:9b:a2:b2:33:3b:28:de:95:45:de: 4d:a0:fe:bf:46:94:1a:8d:09:aa:25:56:46:b6:b2: a2:1d:7e:6a:b4:bc:5d:ba:ac:fb:32:6c:92:93:22: f8:61:44:35:e1:40:57:7f:9b:53:ae:47:6b:b5:2c: 19:67:64:ea:50:5c:c1:05:a4:d9:3f:f9:0c:66:10: 95:cc:b9:98:28:9f:1a:30:a7:20:8e:64:e4:08:99: 22:02:8c:eb:d2:1f:cd:a8:5f:a1:89:bd:5f:4d:6d: 77:36:c0:bb:7e:2e:1a:6d:8b:0f:91:ea:7b:88:0e: 07:dc:cb:d8:2d:36:41:91:42:66:88:f3:50:8c:42: 36:56:52:57:74:f3:be:77:f2:78:4a:44:fd:92:2d: 04:ad:29:99:0e:ab:b2:e3:7a:4f:b1:6a:db:16:7f: 9c:b5:bd:2b:ef:18:dc:ef:24:6f:07:57:ab:2f:c6: 59:55:ef:b9:8b:bd:92:4a:ca:dd:b7:33:5e:98:95: 87:c0:c9:74:e5:23:3c:96:95:41:ac:5a:b7:69:6d: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1B:0A:9F:A6:8A:48:6C:34:A0:38:89:3C:81:7C:EA:9E:B2:95:81 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/zBsKn6aKSGw0oDiJPIF86p6ylYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:12::/48 Signature Algorithm: sha256WithRSAEncryption 8f:bc:3a:23:0c:8d:0d:73:15:45:a4:d0:fc:92:90:f7:7d:d2: 11:2a:13:48:e2:18:08:75:be:cb:bc:22:3a:57:1d:90:18:5b: 1e:37:0e:75:96:3a:02:7d:c4:aa:ce:c4:ac:28:14:1b:12:54: eb:05:3e:35:a5:cd:4b:6a:79:9a:f4:99:a7:74:23:44:05:cb: 77:64:95:3d:73:23:67:e5:95:cd:07:f3:ed:ed:95:58:05:fc: 72:a4:fb:12:f5:ef:b5:9e:59:ba:4f:34:94:0b:09:2b:45:3e: fd:56:d2:48:c1:5e:81:da:2c:ae:aa:30:ac:ec:3a:e9:1a:fd: 31:44:88:12:c4:5b:44:3e:47:c9:15:a6:9c:06:43:ee:7b:1a: 00:15:a0:8e:74:99:6d:73:06:5d:61:30:78:f0:31:41:d7:18: 47:c2:91:19:45:d6:92:58:29:87:e8:2c:6e:c6:f3:ca:6f:4c: a4:1b:91:0a:af:bd:a5:de:20:a0:42:30:e2:3e:f5:a7:71:0a: 28:1f:6b:87:89:42:21:62:47:a3:74:4c:c2:69:5b:f0:de:4a: 97:f4:c7:00:4f:de:95:b9:00:d3:8b:93:48:9b:f6:10:b7:ed: f5:62:85:c0:60:6b:38:15:5e:a4:17:54:63:71:20:02:61:73: 75:f5:7d:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRvweQY+tnqBBVfqzWytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzFiMGE5ZmE2OGE0ODZjMzRhMDM4ODkzYzgxN2NlYTllYjI5NTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQNHCh9sE5sAx+DuXcaZgk6lsGvA n9w9kcraDlcLEbNlhDBww2uELbJq4ZCsj1SFSZuisjM7KN6VRd5NoP6/RpQajQmq JVZGtrKiHX5qtLxduqz7MmySkyL4YUQ14UBXf5tTrkdrtSwZZ2TqUFzBBaTZP/kM ZhCVzLmYKJ8aMKcgjmTkCJkiAozr0h/NqF+hib1fTW13NsC7fi4abYsPkep7iA4H 3MvYLTZBkUJmiPNQjEI2VlJXdPO+d/J4SkT9ki0ErSmZDquy43pPsWrbFn+ctb0r 7xjc7yRvB1erL8ZZVe+5i72SSsrdtzNemJWHwMl05SM8lpVBrFq3aW3iGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMwbCp+mikhsNKA4iTyBfOqespWBMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvekJzS242YUtTR3cwb0RpSlBJRjg2cDZ5bFlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAS MA0GCSqGSIb3DQEBCwUAA4IBAQCPvDojDI0NcxVFpND8kpD3fdIRKhNI4hgIdb7L vCI6Vx2QGFseNw51ljoCfcSqzsSsKBQbElTrBT41pc1Lanma9JmndCNEBct3ZJU9 cyNn5ZXNB/Pt7ZVYBfxypPsS9e+1nlm6TzSUCwkrRT79VtJIwV6B2iyuqjCs7Drp Gv0xRIgSxFtEPkfJFaacBkPuexoAFaCOdJltcwZdYTB48DFB1xhHwpEZRdaSWCmH 6CxuxvPKb0ykG5EKr72l3iCgQjDiPvWncQooH2uHiUIhYkejdEzCaVvw3kqX9McA T96VuQDTi5NIm/YQt+31YoXAYGs4FV6kF1RjcSACYXN19X2q -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:44 2026 by rpki-client