This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa File: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (raw, json) Hash identifier: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8= Subject key identifier: 66:E4:BE:81:12:E1:7C:2F:E7:FF:2A:5E:E3:18:FC:17:5C:73:3E:2C Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019B797EAB1A18642E24EE9FB1143670B6C8 Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216193 IP address blocks: 2a13:1c47:c0d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ab:1a:18:64:2e:24:ee:9f:b1:14:36:70:b6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66e4be8112e17c2fe7ff2a5ee318fc175c733e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:cd:f5:8c:65:ea:d6:f7:a1:fe:df:63:43: c7:22:b5:17:c4:33:f1:fb:80:d5:d2:93:a4:08:12: 5e:a5:cc:42:0e:86:de:53:0e:88:c1:a8:76:b7:7a: 78:73:2d:56:c7:c6:8d:97:1b:6a:3f:13:b5:df:41: 79:e2:96:c6:b0:88:3f:98:ae:5e:aa:14:ae:ce:42: 29:a4:8c:64:6f:ec:3e:fa:12:86:83:ec:78:3b:d4: 7f:10:8b:bd:fe:fa:25:4b:c6:ee:a5:7c:a2:ce:24: 43:55:49:5a:ca:cf:97:75:9f:aa:09:49:ad:98:9c: 79:ad:8a:2f:00:7a:bc:75:4c:2d:91:94:6d:11:21: 4d:37:b2:62:db:1c:8d:bd:4a:bf:0c:f1:38:e3:ff: ba:61:c3:a3:cc:60:8d:2b:39:ed:9e:f8:6f:09:39: 02:49:8c:a3:bc:84:b5:ce:0d:2b:f8:6d:94:f7:fc: ad:f8:c5:ce:fb:a8:c8:a1:9b:8f:f8:aa:84:9f:77: 03:6c:e3:3c:cd:9c:3b:13:6c:0a:02:23:58:af:97: 7b:f9:f0:a5:9f:79:2f:1d:56:80:a0:a4:27:8a:0a: 71:41:94:10:85:90:f6:81:7e:fa:cb:5e:ce:5f:54: 7e:64:c6:4c:9e:3b:7d:cf:81:57:4a:76:60:0c:57: 58:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E4:BE:81:12:E1:7C:2F:E7:FF:2A:5E:E3:18:FC:17:5C:73:3E:2C X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:1c47:c0d0::/44 Signature Algorithm: sha256WithRSAEncryption 2e:e8:be:c3:e2:09:3b:f3:16:39:75:05:6a:2a:7f:2d:28:c6: bc:74:26:29:ea:5f:2b:43:be:dd:38:d4:c7:a6:59:cb:6c:55: cc:d1:e4:40:b3:20:29:5c:b3:35:fb:e6:2e:78:ed:11:71:9b: 04:26:bc:3f:c0:ad:40:b1:8f:56:12:91:45:40:31:d8:01:dd: c8:1b:68:94:d0:08:1f:88:ea:1e:59:7f:16:10:0b:3e:6b:bd: 19:3f:a3:1a:1d:4f:29:dc:56:78:05:28:b6:da:9b:d0:d0:b3: ca:a7:d9:9c:73:aa:2c:f6:6b:3c:ca:10:06:00:d9:25:c4:37: 82:fc:e6:df:7e:c0:82:62:95:d8:7d:72:9d:71:7c:86:64:81: 57:f6:a0:5c:46:fc:c9:ba:ac:cf:60:ef:e0:9d:6a:14:82:43: 21:eb:17:a6:3e:b8:c0:4a:15:29:d3:07:94:da:a7:e9:cb:2c: 22:05:ff:70:cf:09:86:25:b9:18:c8:f6:1a:c0:b5:74:17:b5: 8b:93:d4:7a:51:be:8a:2b:0f:4c:c1:ed:39:00:81:70:37:03: fa:06:16:e1:72:4a:e9:75:56:ab:32:31:15:e0:0c:98:58:3b: 44:b6:31:29:62:b4:ac:0c:d4:41:53:01:d3:35:52:5b:78:57: 43:47:44:3e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqsaGGQuJO6fsRQ2cLbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmU0YmU4MTEyZTE3YzJmZTdmZjJhNWVlMzE4ZmMxNzVjNzMzZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzDN9Yxl6tb3of7fY0PHIrUXxDPx +4DV0pOkCBJepcxCDobeUw6Iwah2t3p4cy1Wx8aNlxtqPxO130F54pbGsIg/mK5e qhSuzkIppIxkb+w++hKGg+x4O9R/EIu9/volS8bupXyiziRDVUlays+XdZ+qCUmt mJx5rYovAHq8dUwtkZRtESFNN7Ji2xyNvUq/DPE44/+6YcOjzGCNKzntnvhvCTkC SYyjvIS1zg0r+G2U9/yt+MXO+6jIoZuP+KqEn3cDbOM8zZw7E2wKAiNYr5d7+fCl n3kvHVaAoKQnigpxQZQQhZD2gX76y17OX1R+ZMZMnjt9z4FXSnZgDFdYtQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGbkvoES4Xwv5/8qXuMY/Bdccz4sMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWnVTLWdSTGhmQ19uX3lwZTR4ajhGMXh6UGl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhMcR8DQ MA0GCSqGSIb3DQEBCwUAA4IBAQAu6L7D4gk78xY5dQVqKn8tKMa8dCYp6l8rQ77d ONTHplnLbFXM0eRAsyApXLM1++YueO0RcZsEJrw/wK1AsY9WEpFFQDHYAd3IG2iU 0AgfiOoeWX8WEAs+a70ZP6MaHU8p3FZ4BSi22pvQ0LPKp9mcc6os9ms8yhAGANkl xDeC/ObffsCCYpXYfXKdcXyGZIFX9qBcRvzJuqzPYO/gnWoUgkMh6xemPrjAShUp 0weU2qfpyywiBf9wzwmGJbkYyPYawLV0F7WLk9R6Ub6KKw9Mwe05AIFwNwP6Bhbh ckrpdVarMjEV4AyYWDtEtjEpYrSsDNRBUwHTNVJbeFdDR0Q+ -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:44 2026 by rpki-client