This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1v5ydFmDmYBsKbsAdsH0osjsLBo.roa
File: 1v5ydFmDmYBsKbsAdsH0osjsLBo.roa (raw, json)
Hash identifier: elqB/+TJ1v7xaZRDbvp2l+YG4tjYUEhStFrNgp8O+xU=
Subject key identifier: D6:FE:72:74:59:83:99:80:6C:29:BB:00:76:C1:F4:A2:C8:EC:2C:1A
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019B7B35964D21C8B9D01D1411993B018600
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1v5ydFmDmYBsKbsAdsH0osjsLBo.roa
Signing time: Thu 01 Jan 2026 20:17:48 +0000
ROA not before: Thu 01 Jan 2026 20:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216299
IP address blocks: 2a14:67c2:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:96:4d:21:c8:b9:d0:1d:14:11:99:3b:01:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 20:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6fe7274598399806c29bb0076c1f4a2c8ec2c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:69:13:7e:d5:48:a5:ba:75:90:da:08:c7:
c4:4c:32:6f:e1:29:18:fd:d9:d8:6b:14:2c:ce:97:
3f:fe:cd:4b:eb:19:48:16:ad:75:72:5c:c4:6e:0a:
56:90:31:b5:15:27:69:ab:c3:54:3f:5a:e2:dd:5b:
25:6c:09:45:ce:54:3e:8c:f6:99:58:05:3c:6d:c2:
01:0e:14:92:05:67:c2:06:35:5c:5e:84:3b:db:80:
23:d7:82:a3:bc:1d:cd:b8:44:07:3f:f3:ca:ae:74:
7c:30:4c:b0:dc:a8:2c:76:a4:0c:29:54:53:5a:9b:
29:a9:32:99:73:15:9f:13:6a:7e:a2:aa:2a:ef:b0:
a8:8e:ef:ec:74:3d:e2:05:07:31:e8:dd:e1:41:e8:
37:00:b1:99:1a:a2:2f:81:35:12:39:4d:66:3c:0c:
1f:01:3d:5e:f3:c9:05:b6:1e:c6:81:e6:cf:c6:7d:
9e:25:b0:d9:a3:ae:9b:00:36:ce:b0:13:96:76:3a:
bb:c6:b4:e4:1d:2e:3b:8c:bb:fe:76:4d:35:3c:88:
f3:c6:3d:38:e8:a4:31:ad:a8:b2:7f:e4:aa:d0:e3:
8a:86:fe:4e:2b:3f:f2:20:20:4d:4d:ff:07:14:f4:
1c:2a:a8:5c:44:1a:9e:7d:03:6a:c1:c7:0c:ee:dc:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FE:72:74:59:83:99:80:6C:29:BB:00:76:C1:F4:A2:C8:EC:2C:1A
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1v5ydFmDmYBsKbsAdsH0osjsLBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c2:a00::/40
Signature Algorithm: sha256WithRSAEncryption
5a:3b:51:b5:b3:31:b9:38:38:35:8e:6d:1b:57:c1:26:90:9d:
95:2d:a7:35:ca:2e:79:7a:90:01:9b:43:4f:e0:2e:af:f4:b4:
1a:f2:aa:93:f2:e7:79:7d:e9:a7:f0:43:5e:36:a5:30:a7:65:
8d:60:d5:63:f1:9c:6b:e6:cf:28:2c:34:6b:7c:da:8d:20:cf:
98:5a:8e:cc:21:a9:90:4a:eb:61:1c:93:bf:89:74:0c:5f:ff:
b2:4f:1d:94:0c:b2:12:cf:47:8a:6d:58:3b:9a:da:6a:6b:79:
9c:17:37:e2:ac:2f:78:bc:24:9d:7c:dc:e6:c0:4c:ab:b4:8b:
75:5a:be:78:59:a7:d6:ed:71:b6:ef:75:33:fc:1a:8a:e1:96:
b0:54:80:6f:1a:82:dc:b1:4a:0c:16:c1:c9:19:3f:3c:f2:15:
c7:b8:8e:59:ee:2f:0a:ed:e8:6e:ca:47:eb:42:1a:cf:bf:90:
4b:76:87:e3:d9:42:12:6a:a8:6f:fd:f5:32:52:60:a3:60:77:
32:8c:31:59:8b:b9:2c:ae:48:03:65:4e:d7:db:c6:07:3e:f8:
c4:38:bd:6c:d7:09:63:ea:8b:0a:c8:38:0b:c6:0c:a6:b9:7b:
4f:2a:9a:1b:ad:7c:ed:27:87:21:5e:57:c6:06:3b:a0:fa:28:
06:31:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:48 2026 by rpki-client