This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa File: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (raw, json) Hash identifier: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag= Subject key identifier: CE:E7:09:E9:88:2B:40:91:83:2C:83:98:2C:C4:69:18:E1:6B:27:4C Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Certificate serial: 019B7834C53242D3D2A5211F230E35FEA0FE Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa Signing time: Thu 01 Jan 2026 06:18:02 +0000 ROA not before: Thu 01 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134743 IP address blocks: 192.145.72.0/22 maxlen: 24 192.145.74.0/23 maxlen: 23 2a09:7080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c5:32:42:d3:d2:a5:21:1f:23:0e:35:fe:a0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cee709e9882b4091832c83982cc46918e16b274c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:5a:08:42:85:d0:b4:d8:68:91:67:3f:6f: 90:8a:4e:aa:88:50:e4:b1:15:3b:81:83:e0:17:b8: ff:76:3c:9f:2f:3b:74:e9:38:4e:de:a2:33:0b:67: f3:d3:a7:72:ef:88:25:dd:00:6e:26:21:b3:07:87: c1:62:ae:2b:93:b5:5b:49:43:94:9a:e1:25:b6:66: fe:7b:f0:ae:6a:bc:42:8d:1d:ec:c4:ce:47:a7:8e: 6c:0a:25:2a:6f:7e:f3:70:70:0a:a9:af:b8:af:16: 31:9f:da:23:7c:7e:cc:35:d9:d2:40:d1:07:fb:e4: 69:86:2a:ea:ca:ae:ae:4a:07:ed:62:26:90:6f:f0: 9d:0b:b9:6e:4a:7a:bc:1c:6f:10:60:cb:b9:6d:63: 98:87:16:1c:33:1b:e2:aa:79:de:92:ec:f3:11:4e: 04:6f:05:ac:3f:2b:9c:03:87:9b:da:12:08:1a:f8: 5d:09:9b:0a:0d:a3:92:cc:08:58:e0:80:21:fd:b9: bf:07:68:c2:30:d9:08:38:b9:68:48:78:69:a3:97: ae:fd:a1:dd:13:85:14:da:f5:8e:e0:af:0c:46:71: 27:fd:ce:2b:78:c5:b6:d0:01:73:c3:2a:97:49:fc: 8d:fa:7c:63:c7:9a:20:83:1e:b2:7e:40:b7:c8:42: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E7:09:E9:88:2B:40:91:83:2C:83:98:2C:C4:69:18:E1:6B:27:4C X509v3 Authority Key Identifier: keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.72.0/22 IPv6: 2a09:7080::/29 Signature Algorithm: sha256WithRSAEncryption 55:d2:51:3f:9b:94:14:4f:20:04:fe:97:63:54:d9:09:3d:99: 96:f7:7e:6a:92:fa:fa:39:75:db:d4:ff:d9:6c:69:ba:9e:0d: 1c:24:41:79:2d:54:1f:72:5f:84:1c:4e:7a:43:ef:19:6f:68: 34:76:82:80:34:a0:c8:8f:32:73:4c:18:98:e4:98:c0:c3:ce: ac:30:d4:77:36:a3:1e:f4:aa:45:7f:17:b9:0e:1d:10:9e:83: 1e:4a:1c:09:07:5e:6f:93:d4:bd:ee:f3:56:51:19:fe:22:2a: 03:9a:49:4a:8e:31:0f:ce:63:c2:61:42:90:a8:eb:13:b6:06: 91:93:d1:ac:3e:65:f9:08:d0:2e:50:16:e2:35:45:72:35:5b: 01:e1:66:a6:18:08:b6:c1:c5:d9:b4:2e:21:e7:57:1d:40:60: 17:28:0b:90:62:af:3f:fc:89:10:dd:bd:10:9c:56:8a:28:03: 54:eb:8f:20:f3:2b:5b:74:62:04:e7:12:e9:ae:d3:b7:78:08: bd:50:fc:25:ee:e2:cc:30:18:ec:0c:6b:a7:fd:63:0d:0e:da: d4:62:b9:3b:6f:22:2a:26:c3:80:68:79:85:cb:43:3a:da:e0: 85:56:8d:73:e4:6c:5b:0c:76:ae:61:0a:5e:11:ec:b7:01:ec: e1:99:06:dc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NMUyQtPSpSEfIw41/qD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzFlNWQ5OGNlZWUzNGQ3ODNhNTFjY2NiNmVlNGRjNGVl NDM3OTMwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWU3MDllOTg4MmI0MDkxODMyYzgzOTgyY2M0NjkxOGUxNmIyNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA021aCEKF0LTYaJFnP2+Qik6qiFDk sRU7gYPgF7j/djyfLzt06ThO3qIzC2fz06dy74gl3QBuJiGzB4fBYq4rk7VbSUOU muEltmb+e/CuarxCjR3sxM5Hp45sCiUqb37zcHAKqa+4rxYxn9ojfH7MNdnSQNEH ++Rphirqyq6uSgftYiaQb/CdC7luSnq8HG8QYMu5bWOYhxYcMxviqnnekuzzEU4E bwWsPyucA4eb2hIIGvhdCZsKDaOSzAhY4IAh/bm/B2jCMNkIOLloSHhpo5eu/aHd E4UU2vWO4K8MRnEn/c4reMW20AFzwyqXSfyN+nxjx5oggx6yfkC3yEKFHQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFM7nCemIK0CRgyyDmCzEaRjhaydMMB8GA1UdIwQY MBaAFDgx5dmM7uNNeDpRzMtu5NxO5DeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODct MzUyY2QyOTZlYmI4LzEvenVjSjZZZ3JRSkdETElPWUxNUnBHT0ZySjB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODctMzUyY2QyOTZlYmI4 LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwJFIMA0E AgACMAcDBQMqCXCAMA0GCSqGSIb3DQEBCwUAA4IBAQBV0lE/m5QUTyAE/pdjVNkJ PZmW935qkvr6OXXb1P/ZbGm6ng0cJEF5LVQfcl+EHE56Q+8Zb2g0doKANKDIjzJz TBiY5JjAw86sMNR3NqMe9KpFfxe5Dh0QnoMeShwJB15vk9S97vNWURn+IioDmklK jjEPzmPCYUKQqOsTtgaRk9GsPmX5CNAuUBbiNUVyNVsB4WamGAi2wcXZtC4h51cd QGAXKAuQYq8//IkQ3b0QnFaKKANU648g8ytbdGIE5xLprtO3eAi9UPwl7uLMMBjs DGun/WMNDtrUYrk7byIqJsOAaHmFy0M62uCFVo1z5GxbDHauYQpeEey3AezhmQbc -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:39 2026 by rpki-client