This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0Z1L3S80E3c5Vwjy9pfYBVGp7hU.roa File: 0Z1L3S80E3c5Vwjy9pfYBVGp7hU.roa (raw, json) Hash identifier: X3SCuousZzhyQFRU7wo3beHVgwj+maR/o6kvgijazR8= Subject key identifier: D1:9D:4B:DD:2F:34:13:77:39:57:08:F2:F6:97:D8:05:51:A9:EE:15 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD7FAD8D11C7FD0830EFB72AFB21C Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0Z1L3S80E3c5Vwjy9pfYBVGp7hU.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214168 IP address blocks: 2a11:f085::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d7:fa:d8:d1:1c:7f:d0:83:0e:fb:72:af:b2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d19d4bdd2f341377395708f2f697d80551a9ee15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:00:a6:3a:de:da:e2:f8:7e:02:a2:63:e4:1c: b9:78:f8:1d:9a:c8:2f:88:63:0d:c4:9a:4f:75:3d: dc:13:5d:cd:62:c5:85:79:0d:98:6f:80:b8:9a:ff: 2a:6e:ee:f0:b4:64:e0:1d:fb:a4:43:3e:58:14:2a: 5b:a3:68:52:36:9f:a6:e3:14:41:e3:ec:b1:51:37: 56:2a:6f:df:40:be:a5:f2:84:2c:d0:6a:1d:6c:89: 97:52:77:b5:f7:4d:28:01:40:f1:b7:a1:c8:e0:85: a2:4b:b6:5c:5f:b2:9f:f2:5a:fb:78:0a:79:ec:77: a6:7d:cf:9a:8c:30:9c:49:9d:c0:68:ba:c1:10:f2: bf:3d:9c:5b:70:38:5e:7e:4b:de:a3:02:3b:02:a4: 82:4c:97:9d:33:90:26:b5:a6:d7:e3:6d:b0:c7:5d: fe:93:9b:ea:9b:bd:b2:4c:e9:14:c7:fe:89:8c:44: 5c:41:e3:b1:97:9f:b3:16:e6:8c:d2:94:3b:75:ac: c3:85:5e:18:78:27:18:16:3d:59:9d:c9:b9:eb:af: 0e:1d:87:db:75:e1:c0:41:fc:7a:9e:17:7a:ea:f6: 7f:3e:af:55:41:3c:04:2d:10:28:64:ad:a7:ff:8e: 99:6c:ee:ab:16:a3:19:c4:f4:e2:18:b3:37:e0:6a: 57:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9D:4B:DD:2F:34:13:77:39:57:08:F2:F6:97:D8:05:51:A9:EE:15 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0Z1L3S80E3c5Vwjy9pfYBVGp7hU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f085::/32 Signature Algorithm: sha256WithRSAEncryption d2:c2:24:7d:c5:3f:40:5b:6d:af:7d:6a:90:a9:cb:f2:a5:3c: 9a:3f:68:6f:51:a5:08:08:02:02:3d:6d:a8:8f:df:d0:2f:42: 7d:d2:6f:8b:93:e8:06:e8:91:38:27:0b:d9:bb:1d:15:7f:58: 0f:02:29:bd:3c:75:3f:51:d9:dc:87:01:0b:ca:41:db:1c:e4: cc:2e:93:28:f4:ad:e2:b4:7b:86:16:e2:52:8f:71:7a:b7:a7: d8:b6:ae:3a:7e:b0:31:dd:80:72:b3:4e:c8:ac:9a:0f:7c:e7: f1:b3:6b:81:ba:04:e4:9e:d7:6d:3a:0d:f5:76:96:c4:e7:ae: 63:24:0b:ae:ae:31:fd:69:b8:76:3a:6a:cd:1b:f4:0a:1d:40: 70:93:dc:f6:23:d0:d0:17:40:3d:a7:50:01:bb:6d:44:81:7d: 59:39:2c:d9:42:7d:7f:a3:43:b6:b8:7d:27:0c:da:50:e4:27: f5:de:e0:1b:f2:85:58:06:53:99:cb:82:d3:d8:b7:0f:36:f8: 81:08:59:cd:6c:30:d1:36:f9:d7:f8:8a:5c:02:5a:a7:38:df: e6:a0:24:07:27:ee:6c:4e:eb:46:c4:7a:0b:2b:25:be:9f:e5: 6c:fa:31:aa:cd:9c:d5:7a:3f:1b:dc:4f:53:46:b1:ab:90:f3: d3:d3:07:9c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt26tf62NEcf9CDDvtyr7IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTlkNGJkZDJmMzQxMzc3Mzk1NzA4ZjJmNjk3ZDgwNTUxYTllZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlACmOt7a4vh+AqJj5By5ePgdmsgv iGMNxJpPdT3cE13NYsWFeQ2Yb4C4mv8qbu7wtGTgHfukQz5YFCpbo2hSNp+m4xRB 4+yxUTdWKm/fQL6l8oQs0GodbImXUne1900oAUDxt6HI4IWiS7ZcX7Kf8lr7eAp5 7Hemfc+ajDCcSZ3AaLrBEPK/PZxbcDhefkveowI7AqSCTJedM5AmtabX422wx13+ k5vqm72yTOkUx/6JjERcQeOxl5+zFuaM0pQ7dazDhV4YeCcYFj1Zncm5668OHYfb deHAQfx6nhd66vZ/Pq9VQTwELRAoZK2n/46ZbO6rFqMZxPTiGLM34GpXWwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNGdS90vNBN3OVcI8vaX2AVRqe4VMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvMFoxTDNTODBFM2M1VndqeTlwZllCVkdwN2hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhHwhTAN BgkqhkiG9w0BAQsFAAOCAQEA0sIkfcU/QFttr31qkKnL8qU8mj9ob1GlCAgCAj1t qI/f0C9CfdJvi5PoBuiROCcL2bsdFX9YDwIpvTx1P1HZ3IcBC8pB2xzkzC6TKPSt 4rR7hhbiUo9xeren2LauOn6wMd2AcrNOyKyaD3zn8bNrgboE5J7XbToN9XaWxOeu YyQLrq4x/Wm4djpqzRv0Ch1AcJPc9iPQ0BdAPadQAbttRIF9WTks2UJ9f6NDtrh9 JwzaUOQn9d7gG/KFWAZTmcuC09i3Dzb4gQhZzWww0Tb51/iKXAJapzjf5qAkByfu bE7rRsR6Cyslvp/lbPoxqs2c1Xo/G9xPU0axq5Dz09MHnA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:20 2026 by rpki-client