This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/aiZn6kgS43qbYGzLkAmQKdo6gA4.roa File: aiZn6kgS43qbYGzLkAmQKdo6gA4.roa (raw, json) Hash identifier: G/KuL+VXWSSvavjd4cxqh2acdQDd5A1ry4sWQqi5S1E= Subject key identifier: 6A:26:67:EA:48:12:E3:7A:9B:60:6C:CB:90:09:90:29:DA:3A:80:0E Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B797E3FDABCC9D3896D512C86B828E376 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/aiZn6kgS43qbYGzLkAmQKdo6gA4.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50338 IP address blocks: 5.39.202.0/23 maxlen: 23 2a04:7bc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3f:da:bc:c9:d3:89:6d:51:2c:86:b8:28:e3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a2667ea4812e37a9b606ccb90099029da3a800e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:e3:08:3a:eb:7e:99:35:3c:55:4e:3b:9e: 0e:af:7e:c2:b6:89:fa:b8:4a:07:e4:33:f2:cb:e6: 9b:78:22:c6:b6:7b:26:05:c8:16:db:82:30:14:30: 7c:57:64:5e:5e:24:b7:a6:6d:6b:0d:22:cc:78:9d: 2f:2f:7a:b3:0c:37:31:dd:24:e7:9a:b1:0b:18:06: 9d:08:38:f8:46:60:2e:7b:40:62:14:d2:2e:fa:77: fe:03:b0:d5:c7:9f:09:13:96:25:4b:94:45:0f:ed: 22:0c:5b:52:7b:fe:b5:1f:af:ed:f0:42:ae:4a:ba: 5a:38:b7:aa:cb:3a:7f:ad:87:c6:cd:bd:73:d3:57: a3:20:f7:05:ce:3f:c4:51:49:a6:53:b4:dd:aa:6c: 79:3f:70:b6:f1:7e:fc:f5:21:75:c8:49:9b:2c:aa: 06:ce:dc:ec:ae:5b:cc:7f:62:3b:cd:bd:40:54:83: 81:3a:d7:b2:37:38:12:6d:08:ad:18:b4:49:8c:8e: 8b:4d:b7:fa:f7:88:28:55:09:82:9f:f3:d3:b8:1a: 0c:c4:29:36:3c:5e:e2:82:e7:26:91:78:6f:70:48: f7:64:7d:a1:1c:36:cf:b4:39:8a:b5:3a:e6:42:a1: 29:6e:64:4c:e3:9e:85:6c:75:dd:04:b8:3e:f3:a9: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:26:67:EA:48:12:E3:7A:9B:60:6C:CB:90:09:90:29:DA:3A:80:0E X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/aiZn6kgS43qbYGzLkAmQKdo6gA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.202.0/23 IPv6: 2a04:7bc1::/32 Signature Algorithm: sha256WithRSAEncryption 93:a9:3d:cb:a6:1c:4a:c9:b6:da:28:ab:10:9b:a7:da:8c:94: e9:59:52:ad:22:f5:0d:fb:ca:84:9f:9f:90:1c:b6:b0:6e:61: db:e4:45:83:f0:f3:ff:23:e7:ed:78:d1:11:0e:98:40:76:c6: 63:33:a3:1b:2f:62:40:62:b3:94:d5:0d:d3:99:87:03:d0:55: ee:03:ff:0e:f5:50:cd:1d:0f:f8:40:34:1b:57:4a:bb:80:b4: 08:f5:9d:07:cf:34:2e:47:2d:cf:1d:fd:7a:16:ae:d7:be:48: cb:e3:97:1d:88:34:34:b8:a9:69:7a:24:2c:96:85:57:42:79: ad:25:f9:7f:68:b3:52:5d:9c:4e:99:ac:2c:3f:aa:13:07:13: 23:bc:fc:3b:c0:9c:9c:7c:f9:96:6f:66:cc:31:b3:ed:9c:84: 6a:d6:5d:cd:c2:57:ef:0c:d6:68:64:6a:92:f7:66:01:f6:38: 00:3d:ef:6d:12:92:ad:26:a7:f0:35:e8:33:a1:55:00:32:b4: 8d:a1:18:32:be:11:af:ae:0d:c1:5b:39:4e:99:14:eb:3f:70: b6:c3:83:ae:72:50:f7:71:92:7d:79:e5:84:87:f0:ac:07:4b: a9:f9:39:32:33:8d:0b:92:d5:20:e5:30:7d:d5:f3:19:41:8f: 59:b9:8b:da -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fj/avMnTiW1RLIa4KON2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTI2NjdlYTQ4MTJlMzdhOWI2MDZjY2I5MDA5OTAyOWRhM2E4MDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PrjCDrrfpk1PFVOO54Or37Cton6 uEoH5DPyy+abeCLGtnsmBcgW24IwFDB8V2ReXiS3pm1rDSLMeJ0vL3qzDDcx3STn mrELGAadCDj4RmAue0BiFNIu+nf+A7DVx58JE5YlS5RFD+0iDFtSe/61H6/t8EKu SrpaOLeqyzp/rYfGzb1z01ejIPcFzj/EUUmmU7Tdqmx5P3C28X789SF1yEmbLKoG ztzsrlvMf2I7zb1AVIOBOteyNzgSbQitGLRJjI6LTbf694goVQmCn/PTuBoMxCk2 PF7igucmkXhvcEj3ZH2hHDbPtDmKtTrmQqEpbmRM456FbHXdBLg+86lcmwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGomZ+pIEuN6m2Bsy5AJkCnaOoAOMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvYWlabjZrZ1M0M3FiWUd6TGtBbVFLZG82Z0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBBSfKMA0E AgACMAcDBQAqBHvBMA0GCSqGSIb3DQEBCwUAA4IBAQCTqT3LphxKybbaKKsQm6fa jJTpWVKtIvUN+8qEn5+QHLawbmHb5EWD8PP/I+fteNERDphAdsZjM6MbL2JAYrOU 1Q3TmYcD0FXuA/8O9VDNHQ/4QDQbV0q7gLQI9Z0HzzQuRy3PHf16Fq7XvkjL45cd iDQ0uKlpeiQsloVXQnmtJfl/aLNSXZxOmawsP6oTBxMjvPw7wJycfPmWb2bMMbPt nIRq1l3NwlfvDNZoZGqS92YB9jgAPe9tEpKtJqfwNegzoVUAMrSNoRgyvhGvrg3B WzlOmRTrP3C2w4OuclD3cZJ9eeWEh/CsB0up+TkyM40LktUg5TB91fMZQY9ZuYva -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:02 2026 by rpki-client