This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/zVElElmNHqfMWbO7Mv_RAuDBQI8.roa File: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (raw, json) Hash identifier: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ= Subject key identifier: CD:51:25:12:59:8D:1E:A7:CC:59:B3:BB:32:FF:D1:02:E0:C1:40:8F Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661 Certificate serial: 019B77C74F184D0F5E2792D9A06FF0E89251 Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/zVElElmNHqfMWbO7Mv_RAuDBQI8.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39150 IP address blocks: 2a02:d0c0::/32 maxlen: 32 2a02:d0c1::/32 maxlen: 32 2a02:ec40::/29 maxlen: 29 2a02:ec40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4f:18:4d:0f:5e:27:92:d9:a0:6f:f0:e8:92:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd512512598d1ea7cc59b3bb32ffd102e0c1408f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:1b:7c:c1:6e:0f:0d:54:3d:b7:4f:50:eb: 0d:39:15:e4:23:9b:98:5b:39:d9:07:69:fd:08:a4: 99:11:9f:ec:40:8a:49:2b:ce:0e:a1:c8:41:62:7c: 17:a5:da:17:23:2c:dd:64:29:b3:1c:16:ab:a2:e4: 0d:3a:e8:5c:47:52:34:94:d8:f5:6b:e8:7d:2a:3d: 76:ff:9c:0e:08:8a:00:48:20:90:bb:25:cb:37:24: 0b:92:f4:70:e5:0e:c2:b4:79:8b:3e:40:e1:27:ad: 0e:0c:d2:82:27:b9:96:f8:49:ce:c6:30:aa:ba:72: c2:3a:77:39:10:80:98:68:dc:c5:b1:12:e9:42:a0: 21:7f:f8:8c:2a:60:c7:e6:03:d4:dd:e4:00:77:f2: b8:2b:d7:27:09:4e:4e:d3:0e:41:ce:26:13:b4:ee: 4e:be:d1:27:af:3d:99:6f:24:08:01:bd:84:f0:cb: 58:87:cf:ae:d8:de:b6:b1:d4:9d:5f:40:78:80:4a: 7f:16:39:d1:f9:71:ab:44:c3:3a:a3:ab:21:5a:da: 56:dc:27:cf:75:6a:73:07:8d:40:92:22:04:c7:02: 86:da:d9:c2:1c:9e:35:cb:fa:7c:a9:9a:a2:57:2e: 78:75:77:87:06:e9:41:d6:8e:36:91:9b:15:5c:f7: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:51:25:12:59:8D:1E:A7:CC:59:B3:BB:32:FF:D1:02:E0:C1:40:8F X509v3 Authority Key Identifier: keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/zVElElmNHqfMWbO7Mv_RAuDBQI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:d0c0::/31 2a02:ec40::/29 Signature Algorithm: sha256WithRSAEncryption 3e:d6:dd:ba:47:f3:20:dc:95:54:e4:d9:d1:64:ba:18:e7:dd: 13:9a:00:b3:e4:20:91:7b:f0:9a:30:b8:1a:75:74:33:ea:32: c5:59:96:df:00:9a:a9:62:75:fb:cf:21:7e:07:13:19:2a:d3: f0:77:00:7f:cb:00:af:c2:8c:c1:d3:ce:61:f9:d0:81:67:1a: eb:a8:60:d1:b8:f5:25:ab:d4:4d:70:23:64:61:3a:e6:ae:0c: 27:6d:3b:b0:9c:29:41:e4:5c:79:00:43:47:aa:8b:e7:bc:0f: aa:8d:d9:7c:17:78:a0:1b:b8:d5:2c:e1:9b:a6:3e:36:30:28: 6b:6c:7c:73:1d:aa:24:4e:10:30:7c:63:ae:2b:ba:cd:5d:a2: 55:86:c0:82:7d:21:8f:99:fd:c6:b6:43:d3:1d:a2:2d:de:ea: 8f:b3:b0:18:81:5b:80:b0:86:f9:b2:1d:08:a4:80:42:91:9e: 94:35:69:3e:fd:31:6e:b7:35:91:73:c9:5a:e2:ef:ff:3e:8e: c7:e6:0b:92:fb:01:73:cc:a6:c7:41:2b:c8:9f:67:36:79:e8: f1:ea:cc:a4:6e:32:a6:15:69:c0:d8:c0:4c:09:7d:80:8b:0d: 1e:53:9c:76:ef:37:d9:1e:67:2e:70:ca:8e:4e:22:43:a5:09: 8b:71:9d:1d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3x08YTQ9eJ5LZoG/w6JJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw ZGU2NjEwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDUxMjUxMjU5OGQxZWE3Y2M1OWIzYmIzMmZmZDEwMmUwYzE0MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnEbfMFuDw1UPbdPUOsNORXkI5uY WznZB2n9CKSZEZ/sQIpJK84OochBYnwXpdoXIyzdZCmzHBarouQNOuhcR1I0lNj1 a+h9Kj12/5wOCIoASCCQuyXLNyQLkvRw5Q7CtHmLPkDhJ60ODNKCJ7mW+EnOxjCq unLCOnc5EICYaNzFsRLpQqAhf/iMKmDH5gPU3eQAd/K4K9cnCU5O0w5BziYTtO5O vtEnrz2ZbyQIAb2E8MtYh8+u2N62sdSdX0B4gEp/FjnR+XGrRMM6o6shWtpW3CfP dWpzB41AkiIExwKG2tnCHJ41y/p8qZqiVy54dXeHBulB1o42kZsVXPc/3wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM1RJRJZjR6nzFmzuzL/0QLgwUCPMB8GA1UdIwQY MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt OWMxNzRlNTNlNGZlLzEvelZFbEVsbU5IcWZNV2JPN012X1JBdURCUUk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUBKgLQwAMF AyoC7EAwDQYJKoZIhvcNAQELBQADggEBAD7W3bpH8yDclVTk2dFkuhjn3ROaALPk IJF78JowuBp1dDPqMsVZlt8AmqlidfvPIX4HExkq0/B3AH/LAK/CjMHTzmH50IFn GuuoYNG49SWr1E1wI2RhOuauDCdtO7CcKUHkXHkAQ0eqi+e8D6qN2XwXeKAbuNUs 4ZumPjYwKGtsfHMdqiROEDB8Y64rus1dolWGwIJ9IY+Z/ca2Q9Mdoi3e6o+zsBiB W4CwhvmyHQikgEKRnpQ1aT79MW63NZFzyVri7/8+jsfmC5L7AXPMpsdBK8ifZzZ5 6PHqzKRuMqYVacDYwEwJfYCLDR5TnHbvN9keZy5wyo5OIkOlCYtxnR0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:04 2026 by rpki-client