This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/ZS49NoR0xEt4EkcswjIY6hISabQ.roa File: ZS49NoR0xEt4EkcswjIY6hISabQ.roa (raw, json) Hash identifier: l3Du0mInbrihmNOTEOBYAtuZ0coi5mG0KsyicEw3aoA= Subject key identifier: 65:2E:3D:36:84:74:C4:4B:78:12:47:2C:C2:32:18:EA:12:12:69:B4 Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Certificate serial: 019B7AC9152BA2FDDB1D89D184981033A9DB Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/ZS49NoR0xEt4EkcswjIY6hISabQ.roa Signing time: Thu 01 Jan 2026 18:19:17 +0000 ROA not before: Thu 01 Jan 2026 18:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205574 IP address blocks: 2001:67c:1890::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:15:2b:a2:fd:db:1d:89:d1:84:98:10:33:a9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=652e3d368474c44b7812472cc23218ea121269b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:8a:d9:52:9e:6d:aa:6f:94:93:76:23:68: 4e:42:19:04:ba:f9:09:ac:87:e8:27:cc:2b:c9:e0: 25:7d:ea:9e:5c:41:aa:02:e8:9a:f8:b9:44:07:93: 6d:0b:8f:11:2b:49:d3:8a:f7:4c:7d:21:32:0a:40: dd:2b:ab:99:fc:ed:2f:f6:6f:e3:33:1c:18:3f:76: f5:b0:a3:f9:48:5d:34:5c:74:2a:f9:d4:d2:e1:c9: e2:34:c2:c1:4b:3c:3f:2a:bc:16:e1:48:a1:e4:b9: 3b:5e:6d:f8:65:b9:96:c1:67:a7:fc:a5:88:70:b3: d3:87:1c:e3:57:7f:1b:14:d2:9c:23:f9:df:d3:79: 3c:11:cc:36:b3:2e:54:c8:e4:98:36:25:03:9f:7f: 51:5c:6d:08:43:ee:c0:05:7c:31:82:a0:22:b8:ca: 07:6b:60:12:4f:87:f6:7b:7c:8b:3d:e1:bc:de:46: cd:a3:ca:21:55:8c:8b:2a:4f:37:84:84:22:5a:d7: 99:9c:d2:4a:44:07:43:80:f8:63:e7:ae:1c:e1:5b: f8:0b:10:28:77:4e:a4:91:60:30:05:e6:44:d0:ce: a6:27:1e:b3:89:cf:89:a0:3c:6f:0f:f0:d5:fa:ae: aa:41:e8:fc:1a:b9:e2:88:ec:70:00:68:46:70:64: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2E:3D:36:84:74:C4:4B:78:12:47:2C:C2:32:18:EA:12:12:69:B4 X509v3 Authority Key Identifier: keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/ZS49NoR0xEt4EkcswjIY6hISabQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1890::/48 Signature Algorithm: sha256WithRSAEncryption 14:84:d8:5b:19:b3:10:45:e7:91:de:bd:c0:e3:8d:6f:da:cf: c1:2e:9b:14:1c:a9:79:e2:74:83:8e:68:9f:07:91:53:77:72: 00:b2:44:cb:fb:c4:60:20:84:7d:e0:ac:1c:b6:52:22:e8:0e: 69:d8:fb:0e:01:0b:30:a9:38:4f:e8:86:44:44:e0:19:77:7b: 24:ee:cb:67:fb:5a:9c:4c:02:21:4a:30:41:84:0a:cf:b1:d9: 7d:53:a6:dd:6d:1d:05:bc:ed:41:5a:0f:08:f7:1e:82:0e:be: e1:ff:b8:91:54:6b:c9:d7:b7:66:70:a8:1f:81:1c:1a:88:ea: de:ec:37:a1:5d:19:01:ad:ce:8a:ca:0f:c1:a2:a7:8b:58:a5: f7:01:cb:7e:c4:0d:ab:8f:cb:64:40:35:4d:d9:24:e1:b9:e0: c9:19:2d:ab:ca:76:ea:99:80:23:5c:e1:20:67:0c:d8:2d:36: 8e:51:89:55:47:5f:6b:47:da:8b:06:db:df:f6:24:ae:ce:d1: f5:b3:02:d6:e8:e6:bd:5f:3e:0e:69:af:f5:d4:75:22:fb:56: 8f:2d:b8:81:52:8e:3f:d7:be:b9:38:7c:12:51:ea:77:c3:f9: f2:f0:fc:1d:37:4b:1b:26:9f:70:b0:f0:d4:96:99:a9:1f:5b: 1d:37:87:5e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yRUrov3bHYnRhJgQM6nbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTQzZGQ2Njc2OWRiMTgzYjhiZDc5YjkwZmM4M2Q5NWQ2 ZTQ4ZmIwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTJlM2QzNjg0NzRjNDRiNzgxMjQ3MmNjMjMyMThlYTEyMTI2OWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluqK2VKebapvlJN2I2hOQhkEuvkJ rIfoJ8wryeAlfeqeXEGqAuia+LlEB5NtC48RK0nTivdMfSEyCkDdK6uZ/O0v9m/j MxwYP3b1sKP5SF00XHQq+dTS4cniNMLBSzw/KrwW4Uih5Lk7Xm34ZbmWwWen/KWI cLPThxzjV38bFNKcI/nf03k8Ecw2sy5UyOSYNiUDn39RXG0IQ+7ABXwxgqAiuMoH a2AST4f2e3yLPeG83kbNo8ohVYyLKk83hIQiWteZnNJKRAdDgPhj564c4Vv4CxAo d06kkWAwBeZE0M6mJx6zic+JoDxvD/DV+q6qQej8GrniiOxwAGhGcGSGAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGUuPTaEdMRLeBJHLMIyGOoSEmm0MB8GA1UdIwQY MBaAFEcUPdZnadsYO4vXm5D8g9ldbkj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It MzQ2MDI2MjQ1NWIyLzEvWlM0OU5vUjB4RXQ0RWtjc3dqSVk2aElTYWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy LzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBiQ MA0GCSqGSIb3DQEBCwUAA4IBAQAUhNhbGbMQReeR3r3A441v2s/BLpsUHKl54nSD jmifB5FTd3IAskTL+8RgIIR94KwctlIi6A5p2PsOAQswqThP6IZEROAZd3sk7stn +1qcTAIhSjBBhArPsdl9U6bdbR0FvO1BWg8I9x6CDr7h/7iRVGvJ17dmcKgfgRwa iOre7DehXRkBrc6Kyg/BoqeLWKX3Act+xA2rj8tkQDVN2SThueDJGS2rynbqmYAj XOEgZwzYLTaOUYlVR19rR9qLBtvf9iSuztH1swLW6Oa9Xz4Oaa/11HUi+1aPLbiB Uo4/1765OHwSUep3w/ny8PwdN0sbJp9wsPDUlpmpH1sdN4de -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:19 2026 by rpki-client