This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZQGjgVxu_W8IEus16B5XR2PkbE0.roa File: ZQGjgVxu_W8IEus16B5XR2PkbE0.roa (raw, json) Hash identifier: /rZIt1UMyP3jxgF4BQPsNfoHxIvZSbl7HKiUVsqnksY= Subject key identifier: 65:01:A3:81:5C:6E:FD:6F:08:12:EB:35:E8:1E:57:47:63:E4:6C:4D Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75AB06C7963D68BD04E2F4144F141 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZQGjgVxu_W8IEus16B5XR2PkbE0.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207755 IP address blocks: 2a06:e881:7108::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5a:b0:6c:79:63:d6:8b:d0:4e:2f:41:44:f1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6501a3815c6efd6f0812eb35e81e574763e46c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:b7:58:22:8d:45:dc:de:f3:d1:fe:e8:57: 3a:2e:f8:39:f9:7f:2a:d8:a7:b1:bd:c6:fe:13:79: 9d:8c:c1:10:84:68:b5:54:d5:4c:f5:c2:73:cb:f5: da:85:83:cf:8e:c4:a2:8b:f3:f2:21:5a:19:c7:15: e1:f3:df:6d:9a:1f:5a:d0:49:f3:17:9a:0c:dd:b2: 93:2e:44:ad:84:c5:e4:5e:78:ae:ca:58:70:95:53: df:d6:07:ba:ea:7e:74:c0:4b:40:ee:dc:98:08:82: 02:57:ff:04:62:2b:8d:e7:62:a3:e3:df:ba:12:66: 27:3a:15:2e:50:a7:d7:ac:c7:20:56:78:b7:f5:b4: 8c:c3:0e:c4:77:0e:ed:2e:99:96:40:5f:63:e0:e2: d4:f8:80:80:71:eb:73:38:34:96:06:80:a1:3d:24: 4c:f5:ea:c9:44:d0:98:f7:ff:9d:ac:24:e0:9d:ea: 8b:83:73:ff:c4:c8:1a:78:55:0c:a4:15:ce:c2:b8: 33:99:01:b7:f4:cc:27:9e:bd:67:09:8d:45:97:26: 05:61:37:32:bf:56:19:8c:07:28:7c:0b:e5:b0:47: de:aa:0e:bb:31:6c:ba:34:10:3f:64:03:15:cb:ec: 71:03:bc:25:e8:d3:f6:80:8c:34:3b:01:f9:b7:75: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:01:A3:81:5C:6E:FD:6F:08:12:EB:35:E8:1E:57:47:63:E4:6C:4D X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZQGjgVxu_W8IEus16B5XR2PkbE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:7108::/46 Signature Algorithm: sha256WithRSAEncryption 34:96:64:a0:91:a2:eb:85:07:37:63:f3:f0:bc:c5:9d:6d:ba: 64:55:74:ed:ab:92:60:7b:ca:de:f6:b3:3a:c1:57:6a:5b:3d: 11:6e:99:d1:42:d0:b5:cc:c7:7f:73:c3:e7:3e:a6:69:5e:dd: 07:ae:ac:40:1c:e4:6d:41:35:d2:72:57:44:4a:05:92:ec:a9: fc:92:c8:3e:20:81:fc:7a:10:70:10:f3:91:65:45:8d:87:ba: 18:6d:4c:17:bd:64:0e:ad:07:20:f1:f7:e6:2a:5a:52:48:77: b9:fb:18:40:7c:6d:f2:70:3d:c1:57:96:86:21:13:45:0d:80: 84:8f:ba:c1:5b:4d:d2:11:74:92:84:7c:a9:14:5b:78:e2:81: 4a:0b:9e:d9:ef:99:1c:b6:6a:07:82:74:82:7b:ed:42:11:59: ab:ee:cf:d6:78:41:45:6d:65:19:2e:ae:80:16:8e:30:fe:c2: 59:b3:24:11:44:ec:18:f0:f0:1b:7b:c3:f0:c9:5e:01:e9:9e: fc:7b:a5:62:d8:ba:fa:2d:62:c5:bc:49:b8:f7:de:79:22:2a: a6:53:58:aa:df:5c:d0:61:8a:9c:4f:78:27:67:1c:db:b1:f3: 5f:bf:bc:c3:df:f3:8d:88:73:2f:36:5a:55:25:3e:47:f2:83: 79:db:e0:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1qwbHlj1ovQTi9BRPFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTAxYTM4MTVjNmVmZDZmMDgxMmViMzVlODFlNTc0NzYzZTQ2YzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pS3WCKNRdze89H+6Fc6Lvg5+X8q 2Kexvcb+E3mdjMEQhGi1VNVM9cJzy/XahYPPjsSii/PyIVoZxxXh899tmh9a0Enz F5oM3bKTLkSthMXkXniuylhwlVPf1ge66n50wEtA7tyYCIICV/8EYiuN52Kj49+6 EmYnOhUuUKfXrMcgVni39bSMww7Edw7tLpmWQF9j4OLU+ICAcetzODSWBoChPSRM 9erJRNCY9/+drCTgneqLg3P/xMgaeFUMpBXOwrgzmQG39Mwnnr1nCY1FlyYFYTcy v1YZjAcofAvlsEfeqg67MWy6NBA/ZAMVy+xxA7wl6NP2gIw0OwH5t3UDfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGUBo4Fcbv1vCBLrNegeV0dj5GxNMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvWlFHamdWeHVfVzhJRXVzMTZCNVhSMlBrYkUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgbogXEI MA0GCSqGSIb3DQEBCwUAA4IBAQA0lmSgkaLrhQc3Y/PwvMWdbbpkVXTtq5Jge8re 9rM6wVdqWz0RbpnRQtC1zMd/c8PnPqZpXt0HrqxAHORtQTXScldESgWS7Kn8ksg+ IIH8ehBwEPORZUWNh7oYbUwXvWQOrQcg8ffmKlpSSHe5+xhAfG3ycD3BV5aGIRNF DYCEj7rBW03SEXSShHypFFt44oFKC57Z75kctmoHgnSCe+1CEVmr7s/WeEFFbWUZ Lq6AFo4w/sJZsyQRROwY8PAbe8PwyV4B6Z78e6Vi2Lr6LWLFvEm49955IiqmU1iq 31zQYYqcT3gnZxzbsfNfv7zD3/ONiHMvNlpVJT5H8oN52+Cu -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:33 2026 by rpki-client