This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/0DVRldlYCuoAM7AXhF3_Tlg8gPw.roa File: 0DVRldlYCuoAM7AXhF3_Tlg8gPw.roa (raw, json) Hash identifier: nudWNg0wZZarUrdcgtXquChozYvRnzA7vgAliy/RJXs= Subject key identifier: D0:35:51:95:D9:58:0A:EA:00:33:B0:17:84:5D:FF:4E:58:3C:80:FC Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B3593A2BDDF0B2CB8EB8B6B39BDAE51 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/0DVRldlYCuoAM7AXhF3_Tlg8gPw.roa Signing time: Thu 01 Jan 2026 20:17:47 +0000 ROA not before: Thu 01 Jan 2026 20:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214880 IP address blocks: 2a14:67c1:30::/44 maxlen: 48 2a14:67c1:d300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:93:a2:bd:df:0b:2c:b8:eb:8b:6b:39:bd:ae:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0355195d9580aea0033b017845dff4e583c80fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:4c:f7:00:a6:c2:a1:74:32:a9:ea:68:dc: 12:35:c8:db:11:bc:58:c2:9c:2e:16:7a:7a:7e:5b: cb:41:94:26:d3:02:96:65:e1:d4:fa:d5:6e:8d:2f: 35:52:c6:9a:0d:3a:85:44:da:8d:c2:bb:1d:a8:e8: a8:16:6f:c3:64:0c:58:1d:1f:ad:d7:40:15:93:94: 80:bd:cd:29:21:6b:0e:f6:62:3d:f5:a9:d9:83:d8: 7f:fb:84:ed:21:2d:a1:81:a4:00:3c:bd:c0:dc:30: e2:36:9c:17:7e:8a:73:ed:37:10:37:7d:2a:ba:a1: 67:e1:ca:fc:12:f3:9a:04:f9:20:ad:24:b4:59:13: 74:e0:4f:b4:1d:5b:ba:41:b3:9f:70:b8:ee:35:2f: 9b:00:1d:95:29:4c:72:63:4d:a9:5f:6c:42:ca:1b: ea:cf:6d:8a:99:62:fa:e4:1f:d4:32:ff:cf:5b:8a: 5a:ad:a9:16:ab:71:8b:65:de:2c:17:1e:d6:cd:5f: 90:d8:f2:e2:0d:98:9c:72:b0:0f:bd:2d:20:95:13: 3c:3a:fa:4c:a0:05:ff:94:22:7a:6a:9d:26:b9:ae: a5:89:f3:b3:b1:5d:10:f1:a5:24:91:0c:af:b1:71: bf:1a:29:3b:24:87:bc:4b:70:35:73:76:7a:35:b6: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:51:95:D9:58:0A:EA:00:33:B0:17:84:5D:FF:4E:58:3C:80:FC X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/0DVRldlYCuoAM7AXhF3_Tlg8gPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:30::/44 2a14:67c1:d300::/40 Signature Algorithm: sha256WithRSAEncryption 07:99:f5:2b:3f:94:e6:e5:93:ca:c9:d8:c4:23:4d:89:5e:f3: 10:13:9e:9a:6d:cb:6f:b7:6b:cb:2a:8a:de:16:18:99:46:b7: a1:e7:ad:c8:64:2a:1a:e1:d1:bb:bb:1c:1b:b8:07:24:88:24: 84:95:c3:85:36:44:3c:3b:49:87:c3:fb:89:81:05:6b:ef:7d: d8:51:31:34:6b:a6:38:0c:8e:bc:42:52:ee:5c:e1:07:e2:54: 37:b5:d3:db:22:f9:45:77:f0:58:79:e2:3d:8b:ed:ad:c8:e4: 6a:0b:2c:e1:7f:ab:c0:d1:b1:4a:58:50:4b:fb:1b:40:28:52: 8c:87:ec:f7:84:9a:55:f8:33:c1:d3:6a:22:2f:3c:5a:63:42: 66:bd:b1:42:1a:12:56:e3:4a:26:16:a6:52:e5:38:2e:f3:9a: e5:69:49:b0:28:7c:49:70:fd:fe:5a:50:a8:8c:ca:c9:04:8b: 7e:e9:75:e3:7a:19:fe:57:ad:84:5c:b4:8b:0f:f3:1e:c3:8c: df:0a:29:9e:ab:2c:79:8b:f6:27:a6:a2:1e:52:69:8d:2e:fe: 16:36:29:b9:12:c5:f8:49:fa:35:f0:8d:b6:35:1a:65:55:c5: 70:90:c3:81:37:48:59:a0:92:d6:29:7f:d3:59:1b:3b:e9:7d: e8:2b:8a:db -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt7NZOivd8LLLjri2s5va5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDM1NTE5NWQ5NTgwYWVhMDAzM2IwMTc4NDVkZmY0ZTU4M2M4MGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsttM9wCmwqF0MqnqaNwSNcjbEbxY wpwuFnp6flvLQZQm0wKWZeHU+tVujS81UsaaDTqFRNqNwrsdqOioFm/DZAxYHR+t 10AVk5SAvc0pIWsO9mI99anZg9h/+4TtIS2hgaQAPL3A3DDiNpwXfopz7TcQN30q uqFn4cr8EvOaBPkgrSS0WRN04E+0HVu6QbOfcLjuNS+bAB2VKUxyY02pX2xCyhvq z22KmWL65B/UMv/PW4parakWq3GLZd4sFx7WzV+Q2PLiDZiccrAPvS0glRM8OvpM oAX/lCJ6ap0mua6lifOzsV0Q8aUkkQyvsXG/Gik7JIe8S3A1c3Z6NbaQlQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFNA1UZXZWArqADOwF4Rd/05YPID8MB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvMERWUmxkbFlDdW9BTTdBWGhGM19UbGc4Z1B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhRnwQAw AwYAKhRnwdMwDQYJKoZIhvcNAQELBQADggEBAAeZ9Ss/lOblk8rJ2MQjTYle8xAT nppty2+3a8sqit4WGJlGt6HnrchkKhrh0bu7HBu4BySIJISVw4U2RDw7SYfD+4mB BWvvfdhRMTRrpjgMjrxCUu5c4QfiVDe109si+UV38Fh54j2L7a3I5GoLLOF/q8DR sUpYUEv7G0AoUoyH7PeEmlX4M8HTaiIvPFpjQma9sUIaElbjSiYWplLlOC7zmuVp SbAofElw/f5aUKiMyskEi37pdeN6Gf5XrYRctIsP8x7DjN8KKZ6rLHmL9iemoh5S aY0u/hY2KbkSxfhJ+jXwjbY1GmVVxXCQw4E3SFmgktYpf9NZGzvpfegrits= -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:43 2026 by rpki-client