This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/z1g6IVNfelVtJ3ruc6v117EmMOM.roa File: z1g6IVNfelVtJ3ruc6v117EmMOM.roa (raw, json) Hash identifier: Nm253NpZatd7RqxMvrinv6oQUpdzhUYrPUnsdn7rdFM= Subject key identifier: CF:58:3A:21:53:5F:7A:55:6D:27:7A:EE:73:AB:F5:D7:B1:26:30:E3 Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94 Certificate serial: 019B797E02EF0C36688C614A2FEA3F59E5C7 Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/z1g6IVNfelVtJ3ruc6v117EmMOM.roa Signing time: Thu 01 Jan 2026 12:17:40 +0000 ROA not before: Thu 01 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 2a13:e940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:02:ef:0c:36:68:8c:61:4a:2f:ea:3f:59:e5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153f24183d6c95185919349e6e92533736437b94 Validity Not Before: Jan 1 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf583a21535f7a556d277aee73abf5d7b12630e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:bb:53:02:73:8b:d6:49:dd:00:94:3f:79: 50:85:7e:f9:02:00:72:14:81:15:18:a8:f1:c9:ab: 4b:4d:64:4b:48:a8:84:e2:27:bc:5b:b0:d3:14:63: 94:1d:58:b4:c2:b9:31:60:1f:f2:ed:f3:f3:26:34: d8:ed:f5:8c:a3:50:36:c8:77:be:ae:37:39:a2:92: fc:7a:89:d2:b1:c9:65:cf:1a:66:42:10:0b:33:41: 1e:47:aa:76:59:d0:c5:84:45:8c:76:22:11:0d:bf: 88:77:58:0b:2e:81:65:df:fe:d0:ee:ce:1a:b1:4d: 5b:62:50:39:8b:e8:ad:26:c9:76:d0:8a:fc:a3:5b: 3c:26:7a:df:58:de:d3:8d:38:59:19:2a:97:50:c2: a3:80:9f:7a:1a:91:ca:3e:3d:93:c5:6b:4c:7e:60: fc:2b:4f:41:57:bc:a5:9a:a6:33:fc:16:dd:4b:f7: 98:70:c3:cb:ff:93:f6:32:c6:85:48:02:a7:d4:3e: ac:7c:a0:f1:c6:93:f8:a2:d6:4b:02:83:8b:52:25: 5e:5d:68:e6:e0:5b:31:75:e0:97:33:6c:e1:51:d9: 72:8a:01:f5:4d:8b:77:6b:25:3d:08:5d:c1:c4:7f: a1:d8:5a:81:1f:7d:06:03:59:25:92:76:2b:b2:66: 43:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:58:3A:21:53:5F:7A:55:6D:27:7A:EE:73:AB:F5:D7:B1:26:30:E3 X509v3 Authority Key Identifier: keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/z1g6IVNfelVtJ3ruc6v117EmMOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:e940::/29 Signature Algorithm: sha256WithRSAEncryption 37:2e:95:52:46:46:d4:a3:1e:2c:59:c0:33:ad:c7:93:5b:66: a5:bd:0f:da:05:68:99:fd:27:c0:49:f1:6f:b1:67:c5:75:91: 4e:3b:b8:03:d0:2f:d8:a0:b3:36:dd:ae:b7:d4:2a:f8:06:59: bc:e4:f6:f9:43:8e:de:b5:99:d6:cb:4c:24:4c:83:c4:ed:72: 89:92:ab:3f:e4:a4:80:ed:51:fd:ca:3b:90:d6:af:55:1c:31: 97:62:99:bf:f3:4f:62:df:56:5c:5d:02:f3:e4:74:4c:20:a7: 57:6c:d8:cc:fa:0f:e1:c9:f4:bd:f7:d7:15:f4:1d:d5:2a:77: d5:55:16:fd:6e:97:0c:c1:76:40:48:c4:7a:26:f9:cc:8a:86: 9c:a0:c8:0f:0a:e5:a6:ae:34:1e:89:8b:4c:66:e5:9f:7e:ca: ad:6d:1b:f8:8b:a0:37:07:55:da:02:d2:21:31:2e:e4:fc:3f: 04:66:13:8e:95:08:9f:22:7c:20:be:b7:6b:b6:27:5a:2d:50: 8e:a4:f4:31:dc:11:e4:09:83:5a:24:03:40:17:17:55:36:af: e0:39:df:e6:41:e8:8e:15:62:50:58:1f:2b:f1:c1:08:9b:6d: 22:ec:73:21:8d:8a:b0:a2:12:cb:29:c1:ae:ba:ee:c7:4f:f4: 30:a6:5b:82 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fgLvDDZojGFKL+o/WeXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0 MzdiOTQwHhcNMjYwMTAxMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjU4M2EyMTUzNWY3YTU1NmQyNzdhZWU3M2FiZjVkN2IxMjYzMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPC7UwJzi9ZJ3QCUP3lQhX75AgBy FIEVGKjxyatLTWRLSKiE4ie8W7DTFGOUHVi0wrkxYB/y7fPzJjTY7fWMo1A2yHe+ rjc5opL8eonSscllzxpmQhALM0EeR6p2WdDFhEWMdiIRDb+Id1gLLoFl3/7Q7s4a sU1bYlA5i+itJsl20Ir8o1s8JnrfWN7TjThZGSqXUMKjgJ96GpHKPj2TxWtMfmD8 K09BV7ylmqYz/BbdS/eYcMPL/5P2MsaFSAKn1D6sfKDxxpP4otZLAoOLUiVeXWjm 4FsxdeCXM2zhUdlyigH1TYt3ayU9CF3BxH+h2FqBH30GA1klknYrsmZDfQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFM9YOiFTX3pVbSd67nOr9dexJjDjMB8GA1UdIwQY MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt NTgwNWQzZjNkYmIyLzEvejFnNklWTmZlbFZ0SjNydWM2djExN0VtTU9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPpQDAN BgkqhkiG9w0BAQsFAAOCAQEANy6VUkZG1KMeLFnAM63Hk1tmpb0P2gVomf0nwEnx b7FnxXWRTju4A9Av2KCzNt2ut9Qq+AZZvOT2+UOO3rWZ1stMJEyDxO1yiZKrP+Sk gO1R/co7kNavVRwxl2KZv/NPYt9WXF0C8+R0TCCnV2zYzPoP4cn0vffXFfQd1Sp3 1VUW/W6XDMF2QEjEeib5zIqGnKDIDwrlpq40HomLTGbln37KrW0b+IugNwdV2gLS ITEu5Pw/BGYTjpUInyJ8IL63a7YnWi1QjqT0MdwR5AmDWiQDQBcXVTav4Dnf5kHo jhViUFgfK/HBCJttIuxzIY2KsKISyynBrrrux0/0MKZbgg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:26 2026 by rpki-client