This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/2zalanC3hLAiWZsaueYly5WPDys.roa File: 2zalanC3hLAiWZsaueYly5WPDys.roa (raw, json) Hash identifier: 3Cvvx3fMpG05zoy3dWgCjRA7P5/lfhhLiU2Ruh29QyA= Subject key identifier: DB:36:A5:6A:70:B7:84:B0:22:59:9B:1A:B9:E6:25:CB:95:8F:0F:2B Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Certificate serial: 019B7A5B4A212B16B594002C1D164B5A9F3F Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/2zalanC3hLAiWZsaueYly5WPDys.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206754 IP address blocks: 2a04:5d00:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4a:21:2b:16:b5:94:00:2c:1d:16:4b:5a:9f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db36a56a70b784b022599b1ab9e625cb958f0f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:a7:99:88:af:7e:74:21:23:38:d7:8e:b7: 0a:91:7b:92:56:01:8c:30:40:15:d9:77:c5:6a:bb: d8:a1:b9:50:4b:e3:63:e9:72:68:cc:9e:a8:99:1c: 63:d2:dc:87:bf:bf:f9:4b:d5:8a:0c:3e:51:0c:49: a8:85:1f:01:b8:4b:eb:95:f9:7a:b3:fb:8d:8e:fa: 86:ef:2b:62:14:33:6d:6c:5d:ef:1d:62:66:c2:20: 4b:eb:34:e3:20:1f:b1:09:81:00:36:08:39:cb:c5: d1:8f:e6:1a:9b:76:cf:18:05:27:53:8a:00:35:a2: bf:90:82:58:e3:fd:21:eb:62:49:55:fb:55:03:1e: d7:be:d1:24:04:89:c6:a9:dd:8a:ef:eb:2b:ad:9c: c2:25:56:bc:bc:61:f4:44:5b:3d:41:3d:6b:23:8d: f9:b8:10:63:69:76:75:3b:6b:d6:ce:f3:be:72:4c: 7f:98:b8:9a:7d:5e:8c:b8:89:fe:1f:2a:45:cc:cb: b9:24:dc:6d:0c:37:9c:72:7f:c1:30:34:a7:21:08: 1b:5c:c2:66:50:00:d7:92:d9:b5:95:ec:ff:af:8d: 4c:73:30:86:23:d4:ee:7a:24:a7:e6:c3:ee:67:17: 5f:ae:11:73:c8:11:6b:e1:dd:e1:32:6f:05:f8:b9: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:36:A5:6A:70:B7:84:B0:22:59:9B:1A:B9:E6:25:CB:95:8F:0F:2B X509v3 Authority Key Identifier: keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/2zalanC3hLAiWZsaueYly5WPDys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5d00:80::/48 Signature Algorithm: sha256WithRSAEncryption 5c:db:7b:fc:20:93:83:ab:37:d1:56:3f:e5:ab:8f:65:b3:e1: d9:f5:bb:cf:92:3a:99:9d:1c:6f:9b:a0:e7:12:66:69:61:cf: 92:cb:34:01:e2:16:9d:75:5f:31:6a:e4:c4:72:13:66:0c:16: 8d:7f:f9:cb:48:be:13:9c:fb:ad:75:a8:62:3f:4f:ea:41:64: 7d:7f:21:c2:14:3c:ad:30:4f:16:62:5b:09:6b:b5:02:4f:51: 50:12:a3:04:69:11:de:0a:c5:c9:02:a7:1c:b7:52:27:b1:08: 5b:c6:e7:89:e2:bd:26:d9:ba:a7:0d:cc:c6:6e:b8:96:92:63: 54:03:6c:de:bc:f8:27:a3:11:ff:40:db:49:bb:04:74:be:4d: 5a:ea:6a:25:29:1c:42:51:31:35:be:09:c4:3f:37:d1:d1:c0: 39:b9:0e:3b:59:5e:77:d0:76:10:80:c0:91:be:4b:a2:36:12: 4e:bc:8a:99:b2:55:e8:bf:4f:c6:85:85:4c:3b:4c:a5:49:0f: 63:72:a9:d3:39:fa:5c:b9:e0:d6:57:10:fa:a8:5a:2d:bc:fb: 08:24:fc:5d:1f:00:86:67:78:b0:55:76:2b:5c:0c:20:89:25: 94:9d:e4:40:2c:e3:10:e0:a1:19:36:a3:14:b1:57:9c:df:f8: 52:03:e4:12 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W0ohKxa1lAAsHRZLWp8/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2 MjVmMjgwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjM2YTU2YTcwYjc4NGIwMjI1OTliMWFiOWU2MjVjYjk1OGYwZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyROnmYivfnQhIzjXjrcKkXuSVgGM MEAV2XfFarvYoblQS+Nj6XJozJ6omRxj0tyHv7/5S9WKDD5RDEmohR8BuEvrlfl6 s/uNjvqG7ytiFDNtbF3vHWJmwiBL6zTjIB+xCYEANgg5y8XRj+Yam3bPGAUnU4oA NaK/kIJY4/0h62JJVftVAx7XvtEkBInGqd2K7+srrZzCJVa8vGH0RFs9QT1rI435 uBBjaXZ1O2vWzvO+ckx/mLiafV6MuIn+HypFzMu5JNxtDDeccn/BMDSnIQgbXMJm UADXktm1lez/r41MczCGI9TueiSn5sPuZxdfrhFzyBFr4d3hMm8F+LmSxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNs2pWpwt4SwIlmbGrnmJcuVjw8rMB8GA1UdIwQY MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt MzhlZThmZDY0ZTdkLzEvMnphbGFuQzNoTEFpV1pzYXVlWWx5NVdQRHlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRdAACA MA0GCSqGSIb3DQEBCwUAA4IBAQBc23v8IJODqzfRVj/lq49ls+HZ9bvPkjqZnRxv m6DnEmZpYc+SyzQB4haddV8xauTEchNmDBaNf/nLSL4TnPutdahiP0/qQWR9fyHC FDytME8WYlsJa7UCT1FQEqMEaRHeCsXJAqcct1InsQhbxueJ4r0m2bqnDczGbriW kmNUA2zevPgnoxH/QNtJuwR0vk1a6molKRxCUTE1vgnEPzfR0cA5uQ47WV530HYQ gMCRvkuiNhJOvIqZslXov0/GhYVMO0ylSQ9jcqnTOfpcueDWVxD6qFotvPsIJPxd HwCGZ3iwVXYrXAwgiSWUneRALOMQ4KEZNqMUsVec3/hSA+QS -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:56 2026 by rpki-client