This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/zu9vON3GTVdkXcFBWXM21OtK-sY.roa File: zu9vON3GTVdkXcFBWXM21OtK-sY.roa (raw, json) Hash identifier: oRLggeMjKA/oXwnbtC/44rxG30iQYGETUOL7zYRaXxM= Subject key identifier: CE:EF:6F:38:DD:C6:4D:57:64:5D:C1:41:59:73:36:D4:EB:4A:FA:C6 Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80 Certificate serial: 019B7834B86CB53AE9ADDCC68D6E70F8BA40 Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/zu9vON3GTVdkXcFBWXM21OtK-sY.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57498 IP address blocks: 194.187.30.0/23 maxlen: 23 194.187.30.0/24 maxlen: 24 194.187.31.0/24 maxlen: 24 2001:678:b8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b8:6c:b5:3a:e9:ad:dc:c6:8d:6e:70:f8:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ceef6f38ddc64d57645dc141597336d4eb4afac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:ae:09:7e:b4:9f:d4:97:d7:fb:63:a3:4f: 36:9f:97:16:60:b5:12:93:cb:53:8b:fb:87:ab:dc: 06:27:c5:38:99:fe:3c:5b:52:32:85:58:ff:52:d1: 9a:7a:29:a7:4f:eb:ee:b3:4d:e1:b6:6a:f2:2e:82: 01:b6:6d:bc:78:7a:d1:01:b7:44:30:ca:d7:d1:06: 50:9b:88:42:ec:81:f5:c8:37:a0:09:14:81:30:bb: 9b:42:40:15:ec:71:9a:47:e1:c4:50:e0:29:73:06: 78:b0:89:ce:b9:11:d2:51:71:f1:c7:92:db:78:6f: cb:8a:c8:23:8f:7b:11:79:50:02:95:2a:97:d2:96: 72:07:c8:45:fd:49:18:30:52:f6:f3:c4:ed:fc:ac: 9f:dc:c3:4b:5c:89:11:50:1d:2f:d6:dd:57:97:02: e4:73:27:0f:b1:ea:60:a1:e9:41:7f:78:da:02:95: e1:75:94:5f:03:c9:d0:42:01:2e:db:11:7b:44:02: 94:87:ee:ef:68:d2:c0:19:be:aa:95:dc:a7:7f:34: 49:ae:9d:2e:05:ac:2b:65:b3:2e:5c:fc:d5:07:98: 69:44:ff:0d:80:da:3a:24:36:07:57:5b:06:ef:59: 03:f5:53:83:db:6e:ef:6c:ee:7f:2e:36:6c:67:82: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:6F:38:DD:C6:4D:57:64:5D:C1:41:59:73:36:D4:EB:4A:FA:C6 X509v3 Authority Key Identifier: keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/zu9vON3GTVdkXcFBWXM21OtK-sY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.187.30.0/23 IPv6: 2001:678:b8c::/48 Signature Algorithm: sha256WithRSAEncryption aa:0d:a3:1b:27:db:04:55:4f:29:5d:95:fa:07:c2:db:12:97: a5:4d:d0:46:52:3a:17:76:5a:5e:3c:47:f7:80:6d:b4:57:8f: aa:72:40:a8:f7:b5:29:63:e9:60:f6:c3:e6:ee:da:51:7f:e0: a8:2c:ad:08:33:8c:5f:21:06:31:53:2d:6a:b8:a4:9b:60:7f: 02:6b:a0:21:b8:03:fd:fe:35:73:16:5b:98:91:46:36:c6:fb: 32:59:f2:df:5b:a3:1c:4f:9f:66:93:4f:1b:ef:c5:ab:cb:b8: 62:3a:b0:ca:1b:c1:8f:36:79:3b:37:11:4b:51:59:69:df:19: f8:e8:45:e4:c1:f5:b7:0f:18:62:f4:7d:da:51:04:fa:1f:a6: 06:a4:1f:f4:d1:9f:e6:55:28:03:6d:20:2e:4e:36:cb:76:da: 24:b5:bf:9f:a6:65:79:b9:db:76:58:39:82:ad:bf:b7:50:99: 96:70:cf:d5:24:df:fc:ea:0a:62:6f:05:8e:02:33:d5:da:91: f2:6c:b5:01:af:f1:4c:bb:54:15:59:63:7a:74:b2:cb:78:7f: 5c:a8:ba:4c:92:70:a8:d6:7c:b0:c2:53:cf:08:0e:3b:34:cc: 53:12:bb:65:8b:31:9c:61:71:1a:a2:76:55:8d:eb:6e:dd:d6: b7:7e:a8:1a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NLhstTrprdzGjW5w+LpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MjFjOGZmMDQzN2Y3ZWRkODI5MTY2ZmRlMDM0NDZmODYx MDlkODAwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWVmNmYzOGRkYzY0ZDU3NjQ1ZGMxNDE1OTczMzZkNGViNGFmYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprOuCX60n9SX1/tjo082n5cWYLUS k8tTi/uHq9wGJ8U4mf48W1IyhVj/UtGaeimnT+vus03htmryLoIBtm28eHrRAbdE MMrX0QZQm4hC7IH1yDegCRSBMLubQkAV7HGaR+HEUOApcwZ4sInOuRHSUXHxx5Lb eG/Lisgjj3sReVAClSqX0pZyB8hF/UkYMFL288Tt/Kyf3MNLXIkRUB0v1t1XlwLk cycPsepgoelBf3jaApXhdZRfA8nQQgEu2xF7RAKUh+7vaNLAGb6qldynfzRJrp0u BawrZbMuXPzVB5hpRP8NgNo6JDYHV1sG71kD9VOD227vbO5/LjZsZ4KZOwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFM7vbzjdxk1XZF3BQVlzNtTrSvrGMB8GA1UdIwQY MBaAFGghyP8EN/ft2CkWb94DRG+GEJ2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMt MjVhZTkyOTNmNmI0LzEvenU5dk9OM0dUVmRrWGNGQldYTTIxT3RLLXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xM2IxNDQtYmUxNi00OTIyLWE5ODMtMjVhZTkyOTNmNmI0 LzEvYUNISV93UTM5LTNZS1JadjNnTkViNFlRbllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwrseMA8E AgACMAkDBwAgAQZ4C4wwDQYJKoZIhvcNAQELBQADggEBAKoNoxsn2wRVTyldlfoH wtsSl6VN0EZSOhd2Wl48R/eAbbRXj6pyQKj3tSlj6WD2w+bu2lF/4KgsrQgzjF8h BjFTLWq4pJtgfwJroCG4A/3+NXMWW5iRRjbG+zJZ8t9boxxPn2aTTxvvxavLuGI6 sMobwY82eTs3EUtRWWnfGfjoReTB9bcPGGL0fdpRBPofpgakH/TRn+ZVKANtIC5O Nst22iS1v5+mZXm523ZYOYKtv7dQmZZwz9Uk3/zqCmJvBY4CM9XakfJstQGv8Uy7 VBVZY3p0sst4f1youkyScKjWfLDCU88IDjs0zFMSu2WLMZxhcRqidlWN627d1rd+ qBo= -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:16 2026 by rpki-client