This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa File: Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa (raw, json) Hash identifier: gXeTwArkfxqcz+pXi1st+kC+rkoJqziqVPsg4xV6p4Q= Subject key identifier: 67:7B:7F:CF:0D:C3:E9:01:B7:01:AD:FF:7B:BD:9E:B9:ED:7E:88:81 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE2496DFC682E02AE1A61DB0DD53B Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44511 IP address blocks: 2a02:20c8:1241::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e2:49:6d:fc:68:2e:02:ae:1a:61:db:0d:d5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=677b7fcf0dc3e901b701adff7bbd9eb9ed7e8881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:28:fc:a3:0e:4c:0c:2b:ab:df:57:3f:14: 60:2c:f9:16:5c:02:db:88:4f:77:6a:73:2d:7d:7e: 87:04:68:00:c0:a7:2d:a5:6c:12:17:09:67:a6:2b: 9e:37:18:00:60:b1:ae:e3:21:cc:b0:aa:31:be:c4: 0e:55:0a:ae:48:2a:b0:05:6c:04:6f:41:4d:b6:b0: d1:ca:21:a7:c7:30:51:53:f8:28:e2:8e:2a:4d:bd: a8:00:47:42:39:d0:0c:2b:14:d4:11:e0:5c:27:6a: d2:c8:4e:f9:a9:f1:9b:34:c4:b4:38:a4:6d:46:85: 14:9c:e3:89:2e:4f:96:a9:cd:61:5f:1a:38:21:45: ab:e0:5c:d8:0e:38:7e:11:88:35:d9:31:28:bd:94: b9:7c:de:22:ba:71:a4:6b:df:83:8d:a1:1c:23:7a: 8b:31:b5:4d:9d:71:c1:43:f0:f2:74:f5:66:a1:23: 7f:09:4f:7f:df:65:1e:76:ba:30:06:35:9f:9f:d6: fe:6d:7b:02:46:51:ce:5c:c2:53:19:83:31:f8:f4: d9:f0:5e:6b:90:d2:c8:7c:cb:54:58:49:e6:cf:5a: b8:4f:20:44:83:a9:e2:81:3c:e8:6d:36:84:00:63: 62:0b:71:0c:74:6e:4a:00:e6:65:e8:c6:e3:2f:17: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:7F:CF:0D:C3:E9:01:B7:01:AD:FF:7B:BD:9E:B9:ED:7E:88:81 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Z3t_zw3D6QG3Aa3_e72eue1-iIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:20c8:1241::/48 Signature Algorithm: sha256WithRSAEncryption 65:49:06:92:1f:c7:e4:ec:16:3a:45:b7:ae:64:e4:1c:6b:50: 14:bc:60:4f:53:97:9d:2d:4c:6e:42:75:7c:5a:12:28:58:d3: 41:0f:ad:c1:fb:a4:15:c5:6b:18:40:b2:ec:3b:e8:be:3c:82: 3d:93:a0:23:7a:a1:64:ca:f4:34:4e:7c:43:52:c3:57:48:49: 9b:c3:84:8d:3b:43:3b:4c:1c:ad:1e:2c:02:84:dc:cb:cb:e0: 62:ca:f1:05:e4:e5:cf:c0:a3:65:9a:47:1b:a6:64:04:8c:cc: 61:fd:7a:e4:8f:fa:20:e2:0d:19:9d:8c:62:e5:f1:52:d1:a7: c5:c7:1b:5e:f3:e7:5e:8d:4d:c1:3f:a9:fb:a8:63:96:6c:ee: ee:31:02:cc:e5:36:01:b2:40:47:c3:4f:c4:2f:b0:83:a0:86: 9d:e8:1b:49:9c:7f:6a:29:52:e1:4e:b3:16:e4:69:c7:dc:33: b5:17:fd:c9:b7:7e:19:9c:e1:b8:1d:3a:ed:23:71:2d:8a:34: db:a5:9c:50:d0:f5:e2:ca:5f:19:95:dc:f7:f2:1d:14:09:60: 24:ec:2b:68:f1:ad:03:32:43:85:6f:bc:b4:68:ad:bf:e6:40: 37:8c:fa:ff:2a:6a:9f:2b:29:1e:55:84:ab:71:2e:b8:6b:d9: 7b:af:e6:08 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87OJJbfxoLgKuGmHbDdU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzdiN2ZjZjBkYzNlOTAxYjcwMWFkZmY3YmJkOWViOWVkN2U4ODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Yo/KMOTAwrq99XPxRgLPkWXALb iE93anMtfX6HBGgAwKctpWwSFwlnpiueNxgAYLGu4yHMsKoxvsQOVQquSCqwBWwE b0FNtrDRyiGnxzBRU/go4o4qTb2oAEdCOdAMKxTUEeBcJ2rSyE75qfGbNMS0OKRt RoUUnOOJLk+Wqc1hXxo4IUWr4FzYDjh+EYg12TEovZS5fN4iunGka9+DjaEcI3qL MbVNnXHBQ/DydPVmoSN/CU9/32UedrowBjWfn9b+bXsCRlHOXMJTGYMx+PTZ8F5r kNLIfMtUWEnmz1q4TyBEg6nigTzobTaEAGNiC3EMdG5KAOZl6MbjLxdgEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGd7f88Nw+kBtwGt/3u9nrntfoiBMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWjN0X3p3M0Q2UUczQWEzX2U3MmV1ZTEtaUlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIgyBJB MA0GCSqGSIb3DQEBCwUAA4IBAQBlSQaSH8fk7BY6RbeuZOQca1AUvGBPU5edLUxu QnV8WhIoWNNBD63B+6QVxWsYQLLsO+i+PII9k6AjeqFkyvQ0TnxDUsNXSEmbw4SN O0M7TBytHiwChNzLy+BiyvEF5OXPwKNlmkcbpmQEjMxh/Xrkj/og4g0ZnYxi5fFS 0afFxxte8+dejU3BP6n7qGOWbO7uMQLM5TYBskBHw0/EL7CDoIad6BtJnH9qKVLh TrMW5GnH3DO1F/3Jt34ZnOG4HTrtI3EtijTbpZxQ0PXiyl8Zldz38h0UCWAk7Cto 8a0DMkOFb7y0aK2/5kA3jPr/KmqfKykeVYSrcS64a9l7r+YI -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:11 2026 by rpki-client