This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Kuus5tEJY2H-4f0b-HCZ9HDM7xs.roa File: Kuus5tEJY2H-4f0b-HCZ9HDM7xs.roa (raw, json) Hash identifier: v0ZXzFXACBYiQTsyGsScZ3Ud/6d5cNxSW9Ouh5O2NBc= Subject key identifier: 2A:EB:AC:E6:D1:09:63:61:FE:E1:FD:1B:F8:70:99:F4:70:CC:EF:1B Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E383430864E468A9CAE975284155679 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Kuus5tEJY2H-4f0b-HCZ9HDM7xs.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216236 IP address blocks: 37.139.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:34:30:86:4e:46:8a:9c:ae:97:52:84:15:56:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2aebace6d1096361fee1fd1bf87099f470ccef1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:ac:52:9b:61:68:d8:05:b2:b3:dc:6a:c5: cb:39:66:76:23:9b:7b:c6:83:58:07:9f:33:17:0f: 1c:7f:7d:cf:e1:3f:ba:4c:14:18:b3:40:14:e8:b4: dd:c2:00:85:1b:bc:dc:87:03:65:34:37:90:02:3b: fd:c7:96:b8:2b:ec:97:f2:4c:5f:09:31:b4:ed:39: 79:1a:4f:29:da:0b:14:b3:c1:b5:b0:9f:d3:88:30: 26:ab:cb:2a:47:5c:d3:f7:21:24:64:94:db:d8:a9: 1e:c8:b5:83:5a:dd:29:cb:4b:9b:02:1d:e4:e4:70: fd:81:4c:4c:2a:00:a5:45:d5:5e:b2:b4:e4:35:a0: 89:7c:fe:95:07:97:25:5d:d6:54:a3:e9:b4:34:3e: cd:b7:8f:20:f6:54:92:ac:b2:7e:cd:04:c0:ea:b0: 2f:2c:e0:45:30:ae:05:b1:1b:1a:5b:07:7f:ef:8d: d0:ce:eb:36:6e:aa:6e:6d:36:25:60:ef:43:bd:8c: 2c:ae:d3:b2:78:80:d6:fe:5d:40:03:39:11:6e:2c: 95:f8:03:e4:a8:00:2a:ed:4d:78:de:d0:d5:cd:70: 16:8c:ed:b1:50:b0:b7:d7:ed:fa:e7:bf:b6:74:08: 9d:2c:ce:df:e1:a1:eb:5b:65:ea:43:69:91:c4:5f: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:AC:E6:D1:09:63:61:FE:E1:FD:1B:F8:70:99:F4:70:CC:EF:1B X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Kuus5tEJY2H-4f0b-HCZ9HDM7xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.38.0/24 Signature Algorithm: sha256WithRSAEncryption a2:54:f4:48:69:24:e8:f1:d7:04:05:22:b8:e4:b1:ad:ad:cd: 59:c3:a9:28:26:9e:fa:b5:d4:a3:e4:e9:ae:cb:6a:75:17:b3: bb:bc:58:fe:8b:bf:5c:ee:9b:37:b5:9b:ae:6b:6b:fe:20:26: bf:1e:09:55:c9:88:a6:c1:62:93:ce:45:db:ff:3e:d0:8d:6a: 78:57:fc:c5:30:31:8f:f0:af:db:e0:d2:b0:2a:70:b3:04:83: b1:e8:b8:11:39:c5:27:cb:5f:8e:45:51:4d:f1:fd:0f:4a:a8: cc:c9:19:a7:c6:c3:a3:0c:5a:25:84:0d:ee:a0:6c:05:16:2c: 9e:3b:fe:0e:4e:a7:77:db:9c:51:2c:56:4d:cb:ee:26:20:6a: 13:2f:71:b3:30:d0:de:9a:0a:b8:55:ae:3e:7f:0b:a4:3c:c3: 71:1e:ab:d1:b4:ef:15:9e:51:d1:04:86:a0:ac:5a:ea:01:16: a7:24:22:02:68:01:1c:23:12:13:bd:57:d3:ba:17:c1:9e:10: c8:80:9b:0a:6a:56:67:98:70:aa:0f:75:bc:6a:53:c5:bd:16: ec:a0:10:d2:97:49:04:cc:61:e1:b0:12:cb:df:19:c3:77:b8: 4f:da:7f:65:5a:50:d6:9e:e9:ca:80:85:e1:c3:f5:f6:35:4e: 00:bf:4e:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ODQwhk5Gipyul1KEFVZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWViYWNlNmQxMDk2MzYxZmVlMWZkMWJmODcwOTlmNDcwY2NlZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCOsUpthaNgFsrPcasXLOWZ2I5t7 xoNYB58zFw8cf33P4T+6TBQYs0AU6LTdwgCFG7zchwNlNDeQAjv9x5a4K+yX8kxf CTG07Tl5Gk8p2gsUs8G1sJ/TiDAmq8sqR1zT9yEkZJTb2KkeyLWDWt0py0ubAh3k 5HD9gUxMKgClRdVesrTkNaCJfP6VB5clXdZUo+m0ND7Nt48g9lSSrLJ+zQTA6rAv LOBFMK4FsRsaWwd/743Qzus2bqpubTYlYO9DvYwsrtOyeIDW/l1AAzkRbiyV+APk qAAq7U143tDVzXAWjO2xULC31+3657+2dAidLM7f4aHrW2XqQ2mRxF9blwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCrrrObRCWNh/uH9G/hwmfRwzO8bMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvS3V1czV0RUpZMkgtNGYwYi1IQ1o5SERNN3hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYsmMA0G CSqGSIb3DQEBCwUAA4IBAQCiVPRIaSTo8dcEBSK45LGtrc1Zw6koJp76tdSj5Omu y2p1F7O7vFj+i79c7ps3tZuua2v+ICa/HglVyYimwWKTzkXb/z7QjWp4V/zFMDGP 8K/b4NKwKnCzBIOx6LgROcUny1+ORVFN8f0PSqjMyRmnxsOjDFolhA3uoGwFFiye O/4OTqd325xRLFZNy+4mIGoTL3GzMNDemgq4Va4+fwukPMNxHqvRtO8VnlHRBIag rFrqARanJCICaAEcIxITvVfTuhfBnhDIgJsKalZnmHCqD3W8alPFvRbsoBDSl0kE zGHhsBLL3xnDd7hP2n9lWlDWnunKgIXhw/X2NU4Av05B -----END CERTIFICATE-----Generated at Tue Jan 20 09:22:23 2026 by rpki-client