This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa File: Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa (raw, json) Hash identifier: QBWUjOIO2WUCsQtNPmImcsDTQ9b4oh/Op2GsR5eOGtY= Subject key identifier: 67:46:5F:4A:6E:6F:EA:F8:EA:27:51:0E:CB:8B:FA:33:B6:33:13:88 Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Certificate serial: 019B7E37DDB4990D177769A46EF54169B50C Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209907 IP address blocks: 2a0f:ca00:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dd:b4:99:0d:17:77:69:a4:6e:f5:41:69:b5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67465f4a6e6feaf8ea27510ecb8bfa33b6331388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:32:3e:98:70:bf:ab:6a:dd:8b:97:15:46:10: e9:8a:df:66:6d:68:c0:62:c6:b6:cf:e3:1b:23:15: 4e:54:5d:f1:b5:6c:75:f2:4f:fb:5c:01:79:fd:2f: 05:1e:5b:15:d5:75:d9:9a:c5:33:61:2d:51:9d:f3: a1:08:d3:02:22:66:eb:f2:13:88:50:cc:4c:ff:ac: ff:d2:3d:31:c6:80:76:32:c4:fb:32:7f:02:ad:eb: fa:b1:40:75:22:e3:64:9c:28:1b:60:f4:a2:dd:d9: 8c:c2:36:07:a6:b9:f0:ef:26:55:0e:2b:67:86:ec: a0:2f:ef:b7:6e:65:d8:67:5a:b6:ee:68:55:89:09: 49:34:32:ec:5f:10:cd:45:9f:fd:26:29:ae:3c:30: a1:3e:03:4a:c7:b4:c9:a6:3c:e9:a1:4d:a9:07:3b: e0:7b:f6:d4:b4:ca:33:69:b8:55:5f:58:8f:a9:2e: 4b:5d:63:e0:95:fe:4a:2c:a7:9d:85:41:df:fe:d8: d4:50:74:4b:9e:30:4d:fe:c4:51:4b:18:52:08:c9: 6a:cb:9f:b8:3c:a0:73:0d:8b:5b:e1:d0:1c:13:10: 2e:84:b6:d6:ec:1a:5a:f5:7b:77:ad:d0:cc:2b:ec: e1:31:a2:b1:90:0b:d9:7f:ef:8e:8b:f6:18:8e:6c: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:46:5F:4A:6E:6F:EA:F8:EA:27:51:0E:CB:8B:FA:33:B6:33:13:88 X509v3 Authority Key Identifier: keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Z0ZfSm5v6vjqJ1EOy4v6M7YzE4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:ca00:8002::/48 Signature Algorithm: sha256WithRSAEncryption 4f:9e:6e:cb:c8:7e:b7:eb:cd:37:1e:ee:11:4e:1c:3c:a7:28: ac:d6:10:a6:28:51:5c:33:b1:c0:88:05:4d:48:10:12:57:b8: d9:76:06:b7:ad:99:d0:94:bc:d4:52:58:cd:58:da:27:8d:2b: fa:b8:37:f0:9e:20:48:e3:91:6c:9a:95:e4:00:e8:68:70:0e: ec:cd:b9:dc:6d:62:6f:7b:d5:92:eb:31:0e:cc:84:37:9e:1c: 96:29:11:1a:92:4d:82:6f:0e:75:87:26:11:cf:ac:e1:31:2c: 05:b3:a9:e7:e2:fd:94:bd:92:10:18:f4:ef:27:71:c7:ed:4e: 11:4a:2a:a3:71:52:d8:36:55:69:04:c2:f0:48:41:71:55:45: 02:a9:f3:dc:5e:bf:fe:57:fc:29:d0:fd:e2:ca:5e:a4:19:5a: 39:50:1a:54:fe:0c:de:84:1d:e8:3c:12:42:34:94:2e:bf:5e: d8:d8:13:ea:93:b3:1c:e7:89:18:e8:9d:e5:34:90:1d:73:89: 8c:a6:04:a9:43:54:ee:3c:de:71:8c:67:6c:a0:9f:9e:46:85: a9:62:82:9d:af:5f:48:7f:f9:3a:b6:9e:2f:bb:60:89:a2:86: 79:37:08:40:a5:54:6e:73:a6:3e:b0:49:8f:8a:c5:d7:b6:c6: b3:fb:23:96 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+N920mQ0Xd2mkbvVBabUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4 ZmUzY2EwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzQ2NWY0YTZlNmZlYWY4ZWEyNzUxMGVjYjhiZmEzM2I2MzMxMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TI+mHC/q2rdi5cVRhDpit9mbWjA Ysa2z+MbIxVOVF3xtWx18k/7XAF5/S8FHlsV1XXZmsUzYS1RnfOhCNMCImbr8hOI UMxM/6z/0j0xxoB2MsT7Mn8Crev6sUB1IuNknCgbYPSi3dmMwjYHprnw7yZVDitn huygL++3bmXYZ1q27mhViQlJNDLsXxDNRZ/9JimuPDChPgNKx7TJpjzpoU2pBzvg e/bUtMozabhVX1iPqS5LXWPglf5KLKedhUHf/tjUUHRLnjBN/sRRSxhSCMlqy5+4 PKBzDYtb4dAcExAuhLbW7Bpa9Xt3rdDMK+zhMaKxkAvZf++Oi/YYjmzrlwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGdGX0pub+r46idRDsuL+jO2MxOIMB8GA1UdIwQY MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt MjBhMGQxMzBjNDU2LzEvWjBaZlNtNXY2dmpxSjFFT3k0djZNN1l6RTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2 LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/KAIAC MA0GCSqGSIb3DQEBCwUAA4IBAQBPnm7LyH636803Hu4RThw8pyis1hCmKFFcM7HA iAVNSBASV7jZdga3rZnQlLzUUljNWNonjSv6uDfwniBI45FsmpXkAOhocA7szbnc bWJve9WS6zEOzIQ3nhyWKREakk2Cbw51hyYRz6zhMSwFs6nn4v2UvZIQGPTvJ3HH 7U4RSiqjcVLYNlVpBMLwSEFxVUUCqfPcXr/+V/wp0P3iyl6kGVo5UBpU/gzehB3o PBJCNJQuv17Y2BPqk7Mc54kY6J3lNJAdc4mMpgSpQ1TuPN5xjGdsoJ+eRoWpYoKd r19If/k6tp4vu2CJooZ5NwhApVRuc6Y+sEmPisXXtsaz+yOW -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:01 2026 by rpki-client