This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zuskcUflXphhzTlf0LaZS6qj5hY.roa File: zuskcUflXphhzTlf0LaZS6qj5hY.roa (raw, json) Hash identifier: Dcche/TOof8ny6tBcbCH+bPLowf5+rAJL6Y4Ngqn11Y= Subject key identifier: CE:EB:24:71:47:E5:5E:98:61:CD:39:5F:D0:B6:99:4B:AA:A3:E6:16 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75169AA27F7DB139682A0E5ACEF16 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zuskcUflXphhzTlf0LaZS6qj5hY.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203478 IP address blocks: 2a06:e881:5600::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:51:69:aa:27:f7:db:13:96:82:a0:e5:ac:ef:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceeb247147e55e9861cd395fd0b6994baaa3e616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:5a:f9:d1:3f:ac:c5:45:3b:63:23:3a:40: 88:50:3a:e9:78:87:ab:c7:b9:31:7a:f9:25:97:ad: 8e:46:34:aa:50:4e:11:d9:0e:dd:a8:52:04:23:a3: 79:40:9a:52:c5:97:ee:4a:14:b6:16:ee:6b:2e:34: b5:0c:6e:13:69:9f:af:96:95:2b:d7:70:f1:69:63: 8c:84:98:71:f9:49:74:3e:0d:f9:4c:0a:b7:36:58: 6b:38:d7:b9:0d:5b:7c:1f:d3:fd:3f:82:a2:0d:d9: 72:e7:aa:12:74:68:9f:46:ed:73:dd:e3:42:d3:e1: 22:38:48:ed:05:68:cf:56:7f:fa:6c:0d:90:9d:61: d8:20:0a:ec:29:e9:ba:50:e6:cb:98:5f:a0:03:76: e3:3b:1b:a3:95:81:08:26:3b:39:6a:c4:e7:ca:b6: e3:1d:94:68:4d:43:a2:d1:0b:c2:6c:f9:26:d9:b6: 0f:a1:28:26:ef:ee:0c:a3:01:e4:f1:ab:c9:a2:c8: bf:3c:34:af:8f:c6:ad:dc:aa:2c:95:2c:7b:7f:5b: 70:79:a5:f4:0b:4d:7b:2c:48:8f:33:4d:ff:76:7a: fe:dc:90:44:54:3a:ad:b4:b8:1a:a2:0d:81:4d:6b: 1d:39:25:db:c7:fe:eb:19:00:e0:96:e4:30:44:ba: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EB:24:71:47:E5:5E:98:61:CD:39:5F:D0:B6:99:4B:AA:A3:E6:16 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zuskcUflXphhzTlf0LaZS6qj5hY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:5600::/44 Signature Algorithm: sha256WithRSAEncryption 6e:d2:33:45:be:ca:c2:58:d9:78:85:4d:7b:f0:23:65:36:29: b5:78:42:f0:02:9e:a0:0a:ff:5c:56:b2:58:1e:36:0b:e2:77: bb:6d:f5:41:e2:98:5e:57:bf:2e:01:38:14:4e:ad:30:a8:58: fa:5c:5f:69:be:91:28:fa:02:3b:c8:e4:7f:20:ea:7c:40:3b: b8:42:56:64:fe:bd:e9:ab:cf:13:65:38:15:9f:18:f0:4c:17: 72:23:37:68:36:89:6a:f3:5e:bd:47:08:d8:a7:08:97:27:f0: c4:9e:7f:c1:8b:5b:00:37:53:51:45:c5:9c:ec:06:e5:33:54: af:8a:5a:41:02:a4:94:df:04:a8:55:81:c1:b1:56:44:e6:5e: b4:e9:a6:ba:2a:1b:43:d0:31:ba:b3:e8:d2:7c:15:ab:ad:52: 65:70:ba:33:a0:07:0f:06:14:14:05:81:40:2d:f6:d1:1b:33: 47:5b:f4:0c:c5:0a:90:f3:fe:56:c0:79:42:a8:f0:21:34:56: be:9c:21:dd:17:f4:36:69:5f:93:66:76:5f:a3:31:5e:42:d8: 67:38:f4:1e:78:46:18:a7:2c:5e:b6:a8:62:4b:b3:6f:2f:46: f9:b2:a8:d2:54:02:4d:fb:22:02:77:72:6c:5b:3a:15:62:7b: b8:80:6c:3e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1Fpqif32xOWgqDlrO8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWViMjQ3MTQ3ZTU1ZTk4NjFjZDM5NWZkMGI2OTk0YmFhYTNlNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRxa+dE/rMVFO2MjOkCIUDrpeIer x7kxevkll62ORjSqUE4R2Q7dqFIEI6N5QJpSxZfuShS2Fu5rLjS1DG4TaZ+vlpUr 13DxaWOMhJhx+Ul0Pg35TAq3NlhrONe5DVt8H9P9P4KiDdly56oSdGifRu1z3eNC 0+EiOEjtBWjPVn/6bA2QnWHYIArsKem6UObLmF+gA3bjOxujlYEIJjs5asTnyrbj HZRoTUOi0QvCbPkm2bYPoSgm7+4MowHk8avJosi/PDSvj8at3KoslSx7f1tweaX0 C017LEiPM03/dnr+3JBEVDqttLgaog2BTWsdOSXbx/7rGQDgluQwRLrCJwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM7rJHFH5V6YYc05X9C2mUuqo+YWMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvenVza2NVZmxYcGhoelRsZjBMYVpTNnFqNWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogVYA MA0GCSqGSIb3DQEBCwUAA4IBAQBu0jNFvsrCWNl4hU178CNlNim1eELwAp6gCv9c VrJYHjYL4ne7bfVB4pheV78uATgUTq0wqFj6XF9pvpEo+gI7yOR/IOp8QDu4QlZk /r3pq88TZTgVnxjwTBdyIzdoNolq8169RwjYpwiXJ/DEnn/Bi1sAN1NRRcWc7Abl M1SvilpBAqSU3wSoVYHBsVZE5l606aa6KhtD0DG6s+jSfBWrrVJlcLozoAcPBhQU BYFALfbRGzNHW/QMxQqQ8/5WwHlCqPAhNFa+nCHdF/Q2aV+TZnZfozFeQthnOPQe eEYYpyxetqhiS7NvL0b5sqjSVAJN+yICd3JsWzoVYnu4gGw+ -----END CERTIFICATE-----Generated at Tue Jan 20 21:17:19 2026 by rpki-client