This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/7Hqx9Db-TBq5prQMs-bcKJFnQK4.roa File: 7Hqx9Db-TBq5prQMs-bcKJFnQK4.roa (raw, json) Hash identifier: PSXhcWyYcyyqwWsbRgabgNFmYBL3t1pxMms7T9wYVAk= Subject key identifier: EC:7A:B1:F4:36:FE:4C:1A:B9:A6:B4:0C:B3:E6:DC:28:91:67:40:AE Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B8A45541FA382A1F99D77B831CDE796E6 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/7Hqx9Db-TBq5prQMs-bcKJFnQK4.roa Signing time: Sun 04 Jan 2026 18:29:17 +0000 ROA not before: Sun 04 Jan 2026 18:29:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14447 IP address blocks: 2a14:67c3:e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:45:54:1f:a3:82:a1:f9:9d:77:b8:31:cd:e7:96:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 4 18:29:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec7ab1f436fe4c1ab9a6b40cb3e6dc28916740ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:c1:7c:cd:03:37:6a:60:9e:7e:3e:7f:7c: b3:f6:15:6f:af:7e:ab:a8:cf:00:d0:7c:43:f5:25: 0d:91:ac:ab:74:b8:6f:04:12:b1:a7:02:ff:99:24: f3:11:5d:d7:cd:cd:fe:8a:9e:39:7b:61:94:85:ab: c9:fa:a3:4a:22:98:b3:7d:37:93:f7:0f:84:0b:0c: c0:84:ab:73:10:e7:b5:ab:89:76:83:23:95:e4:35: db:73:28:b8:3b:cd:fd:9b:d2:c2:34:ec:4f:0a:bd: d3:a8:c0:d1:0f:1a:fa:57:19:47:94:d3:27:3a:0a: e0:40:1e:23:0e:c2:d8:c5:26:ed:10:3b:2c:53:ad: 9e:12:a5:c2:54:74:ab:38:88:b6:5c:64:71:1d:f6: cf:d5:87:88:eb:67:7b:7b:b3:eb:ef:dd:49:16:f7: 31:38:3d:c7:67:e9:80:92:5b:75:d0:bb:97:32:21: 74:35:44:c0:9b:3f:30:62:20:c4:e1:53:b4:32:6a: 37:85:55:d3:48:6d:d9:05:47:b9:cf:f2:ea:c9:7d: 8f:fd:77:46:37:46:86:ec:37:ee:95:95:68:b7:44: 0e:ce:a1:53:dc:67:90:65:0b:de:eb:f5:42:ef:80: 17:a6:96:2f:2b:47:b6:78:d4:bc:bf:39:d7:1e:7b: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7A:B1:F4:36:FE:4C:1A:B9:A6:B4:0C:B3:E6:DC:28:91:67:40:AE X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/7Hqx9Db-TBq5prQMs-bcKJFnQK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:e0::/44 Signature Algorithm: sha256WithRSAEncryption 8b:a0:55:87:9a:ca:ab:98:b2:b9:16:be:79:db:a9:eb:38:3e: 7c:ca:a8:c5:7f:3c:e0:64:ef:d9:12:20:98:0e:e6:d0:5d:23: 86:11:1a:42:39:1e:af:61:10:66:fa:e1:e4:1e:f8:e8:86:ab: c4:e2:94:07:7e:85:37:5c:61:a3:5e:3a:f2:6b:dc:6e:f8:31: 46:42:9f:f4:fa:6d:8f:b5:ba:21:22:2c:fb:bc:b8:13:a3:e8: 5e:9c:98:d4:ec:e4:dc:0a:e0:82:fd:9f:25:13:eb:ee:2f:ac: 6a:e0:e6:56:91:af:e2:bc:de:ee:52:be:ca:c2:24:b0:4f:35: c5:20:7f:be:00:90:12:eb:f5:8f:b9:8c:e0:10:9e:b6:48:60: 34:93:8d:09:a7:19:24:fe:df:b0:a5:78:ad:88:0a:41:a8:37: 34:19:a0:98:d3:dc:1d:9e:a4:f9:1d:83:f7:8c:0b:26:8e:75: 07:fe:09:f3:30:ae:09:02:dc:0b:c1:c9:c5:03:52:44:fb:f9: 72:ca:99:dd:bd:c1:f0:c6:df:bb:92:23:8b:24:ec:fb:52:37: 92:b3:88:5c:5c:7a:97:35:70:f9:fb:02:64:eb:08:a4:c1:15: 25:6e:28:f9:36:2a:8a:24:3f:c6:42:c4:4b:db:01:0f:92:9d: 21:16:6b:b5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuKRVQfo4Kh+Z13uDHN55bmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTA0MTgyOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzdhYjFmNDM2ZmU0YzFhYjlhNmI0MGNiM2U2ZGMyODkxNjc0MGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXvBfM0DN2pgnn4+f3yz9hVvr36r qM8A0HxD9SUNkayrdLhvBBKxpwL/mSTzEV3Xzc3+ip45e2GUhavJ+qNKIpizfTeT 9w+ECwzAhKtzEOe1q4l2gyOV5DXbcyi4O839m9LCNOxPCr3TqMDRDxr6VxlHlNMn OgrgQB4jDsLYxSbtEDssU62eEqXCVHSrOIi2XGRxHfbP1YeI62d7e7Pr791JFvcx OD3HZ+mAklt10LuXMiF0NUTAmz8wYiDE4VO0Mmo3hVXTSG3ZBUe5z/LqyX2P/XdG N0aG7DfulZVot0QOzqFT3GeQZQve6/VC74AXppYvK0e2eNS8vznXHnsJQQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOx6sfQ2/kwauaa0DLPm3CiRZ0CuMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvN0hxeDlEYi1UQnE1cHJRTXMtYmNLSkZuUUs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwwDg MA0GCSqGSIb3DQEBCwUAA4IBAQCLoFWHmsqrmLK5Fr5526nrOD58yqjFfzzgZO/Z EiCYDubQXSOGERpCOR6vYRBm+uHkHvjohqvE4pQHfoU3XGGjXjrya9xu+DFGQp/0 +m2PtbohIiz7vLgTo+henJjU7OTcCuCC/Z8lE+vuL6xq4OZWka/ivN7uUr7KwiSw TzXFIH++AJAS6/WPuYzgEJ62SGA0k40Jpxkk/t+wpXitiApBqDc0GaCY09wdnqT5 HYP3jAsmjnUH/gnzMK4JAtwLwcnFA1JE+/lyypndvcHwxt+7kiOLJOz7UjeSs4hc XHqXNXD5+wJk6wikwRUlbij5NiqKJD/GQsRL2wEPkp0hFmu1 -----END CERTIFICATE-----Generated at Sun Jan 25 13:42:50 2026 by rpki-client