This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/ZZSujaCywYYBPGcUKJLCx-iYKGY.roa File: ZZSujaCywYYBPGcUKJLCx-iYKGY.roa (raw, json) Hash identifier: A7oLxvVZYFnaxAjlUArrfm3Zu1qybxKzD2ovuJ4kp4g= Subject key identifier: 65:94:AE:8D:A0:B2:C1:86:01:3C:67:14:28:92:C2:C7:E8:98:28:66 Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7 Certificate serial: 019B7FF241B580E3CBDE5F053B8E8BE4CC76 Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/ZZSujaCywYYBPGcUKJLCx-iYKGY.roa Signing time: Fri 02 Jan 2026 18:22:21 +0000 ROA not before: Fri 02 Jan 2026 18:22:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47582 IP address blocks: 185.175.100.0/22 maxlen: 24 2a0b:e500::/31 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:41:b5:80:e3:cb:de:5f:05:3b:8e:8b:e4:cc:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7 Validity Not Before: Jan 2 18:22:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6594ae8da0b2c186013c67142892c2c7e8982866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a1:bf:45:6c:5b:a3:a3:7f:b1:ab:b5:ba:8d: 1a:e3:b0:68:c4:e1:e4:f9:b4:a8:c6:cc:1c:7b:ed: 46:7b:ed:47:19:2e:3e:4c:2e:13:4e:0f:25:7d:97: a5:97:bb:1d:e6:79:7f:a8:f4:de:82:7c:2c:23:32: 0a:bb:c2:b4:b0:b6:fc:5b:e5:d5:82:67:ee:4d:74: 94:e3:cb:e7:f3:bb:96:0b:53:4f:9b:ab:0e:af:a1: 6d:2f:a9:c1:ca:9e:d5:65:20:b1:7f:bc:fe:8b:01: 3a:b4:d7:45:af:b1:bf:8b:31:4a:c6:ff:11:7f:4a: 7f:09:ba:ca:16:64:fc:9b:29:64:e6:c3:92:2b:60: 01:2d:ac:20:1a:79:d2:63:01:c5:d2:cf:fb:66:3a: 5c:35:77:f5:a2:4f:87:1c:4a:88:ed:73:b7:d9:9a: 5b:11:8b:8d:75:7f:e9:49:30:07:60:e1:fc:b2:f0: e4:19:5c:37:b8:11:86:02:20:ad:01:8b:09:4f:4e: 3b:ca:18:4a:0b:fb:8b:24:3e:7e:70:bc:c7:65:84: 86:d3:6c:d8:08:f4:96:0f:c0:cf:f4:bc:fa:29:d4: 96:73:de:37:b0:22:44:25:1f:13:40:d0:2e:01:d8: 82:05:92:0b:e1:01:a9:8e:b2:0c:89:e0:53:75:56: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:AE:8D:A0:B2:C1:86:01:3C:67:14:28:92:C2:C7:E8:98:28:66 X509v3 Authority Key Identifier: keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/ZZSujaCywYYBPGcUKJLCx-iYKGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.100.0/22 IPv6: 2a0b:e500::/31 Signature Algorithm: sha256WithRSAEncryption 56:10:2f:c5:c3:59:2b:8f:7a:ab:31:3c:5a:07:97:d1:eb:1f: 7d:ee:30:76:38:1f:a3:b6:6c:b0:96:a3:52:a3:24:33:76:71: 49:5b:6a:35:a8:e0:57:46:fc:2f:f9:cf:31:2d:e9:fa:e2:2b: ea:b1:8a:d4:35:d4:72:f7:c3:44:c2:59:14:3a:b5:c3:2e:d7: 95:49:cd:f6:e5:b0:0e:3f:f5:39:ff:2a:69:1f:24:b6:25:22: ba:9c:4d:26:a9:18:ae:7d:b1:1a:ab:27:4f:43:b8:c9:3a:9a: c0:1f:07:36:ef:2a:84:c8:e5:dd:a5:64:85:9c:f2:fc:b3:f3: ff:79:3b:e5:90:b6:2b:1f:b1:db:50:7a:a1:cc:da:19:1f:7f: 3e:62:c2:c3:ef:47:23:e0:6f:2a:36:98:5f:43:e3:c1:76:80: da:a4:2e:48:61:53:00:fa:0f:c3:04:6c:7c:a0:35:54:ac:1a: 46:d9:a7:64:2c:25:c0:6f:12:4d:5e:f7:cb:cc:4d:83:69:10: 42:03:e8:55:6a:43:2f:0b:f6:77:ee:8f:8c:09:1d:91:2b:12: 27:a5:35:ec:29:43:7e:a1:06:af:ea:24:78:1f:50:7c:fb:27: fb:1b:bd:50:16:67:b8:56:35:b1:f6:82:c4:af:8b:72:04:b4: 75:0d:aa:b0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8kG1gOPL3l8FO46L5Mx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGYwNmJmZjNhNWI4NTE1MWI2NTcwNWI0MzA4ZTlhZmIx ZmQ4ZjcwHhcNMjYwMTAyMTgyMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTk0YWU4ZGEwYjJjMTg2MDEzYzY3MTQyODkyYzJjN2U4OTgyODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6G/RWxbo6N/sau1uo0a47BoxOHk +bSoxswce+1Ge+1HGS4+TC4TTg8lfZell7sd5nl/qPTegnwsIzIKu8K0sLb8W+XV gmfuTXSU48vn87uWC1NPm6sOr6FtL6nByp7VZSCxf7z+iwE6tNdFr7G/izFKxv8R f0p/CbrKFmT8mylk5sOSK2ABLawgGnnSYwHF0s/7ZjpcNXf1ok+HHEqI7XO32Zpb EYuNdX/pSTAHYOH8svDkGVw3uBGGAiCtAYsJT047yhhKC/uLJD5+cLzHZYSG02zY CPSWD8DP9Lz6KdSWc943sCJEJR8TQNAuAdiCBZIL4QGpjrIMieBTdVauBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGWUro2gssGGATxnFCiSwsfomChmMB8GA1UdIwQY MBaAFP9PBr/zpbhRUbZXBbQwjpr7H9j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2Et MjVlZmZkZDc5NmRjLzEvWlpTdWphQ3l3WVlCUEdjVUtKTEN4LWlZS0dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2EtMjVlZmZkZDc5NmRj LzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua9kMA0E AgACMAcDBQEqC+UAMA0GCSqGSIb3DQEBCwUAA4IBAQBWEC/Fw1krj3qrMTxaB5fR 6x997jB2OB+jtmywlqNSoyQzdnFJW2o1qOBXRvwv+c8xLen64ivqsYrUNdRy98NE wlkUOrXDLteVSc325bAOP/U5/yppHyS2JSK6nE0mqRiufbEaqydPQ7jJOprAHwc2 7yqEyOXdpWSFnPL8s/P/eTvlkLYrH7HbUHqhzNoZH38+YsLD70cj4G8qNphfQ+PB doDapC5IYVMA+g/DBGx8oDVUrBpG2adkLCXAbxJNXvfLzE2DaRBCA+hVakMvC/Z3 7o+MCR2RKxInpTXsKUN+oQav6iR4H1B8+yf7G71QFme4VjWx9oLEr4tyBLR1Daqw -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:12 2026 by rpki-client