This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8s839wAslV9YURFUE4zhqkN4lvA.roa File: 8s839wAslV9YURFUE4zhqkN4lvA.roa (raw, json) Hash identifier: WhLU7Jw1XqnvZOuTNaBhGAxD+6iBgYBYcbRVSaAZddI= Subject key identifier: F2:CF:37:F7:00:2C:95:5F:58:51:11:54:13:8C:E1:AA:43:78:96:F0 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B357D04D3DB2DC7DC712C9ED47FF40B Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8s839wAslV9YURFUE4zhqkN4lvA.roa Signing time: Thu 01 Jan 2026 20:17:41 +0000 ROA not before: Thu 01 Jan 2026 20:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151194 IP address blocks: 2a14:67c1:b000::/48 maxlen: 48 2a14:67c1:b100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7d:04:d3:db:2d:c7:dc:71:2c:9e:d4:7f:f4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2cf37f7002c955f58511154138ce1aa437896f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:6a:94:e2:ab:aa:32:44:7e:b8:d7:a9:ca: be:a1:51:8d:be:2c:78:6f:7a:9e:c9:ab:31:40:be: c1:b6:af:08:30:66:ca:27:a4:19:48:00:11:b1:ba: 32:fc:d3:32:85:30:41:9d:61:95:9a:38:ef:1a:bf: b0:0e:df:49:61:52:36:d1:2a:26:5c:a3:a0:6a:24: 73:7c:cc:2c:2e:b8:53:55:a2:70:b9:27:83:6c:e1: 8e:be:f2:a5:78:3c:b5:7b:79:9f:b1:37:0b:fd:37: b9:d5:b9:5d:22:47:58:e2:02:eb:2a:6a:68:06:da: dd:b7:2e:2c:53:1a:16:1e:b5:41:7a:3a:f9:53:19: cc:c3:85:fc:90:a8:07:1f:d2:e2:44:67:c5:81:ef: 0c:fc:65:88:ce:aa:d4:e1:4f:3c:d7:89:00:9a:26: 7a:99:22:cb:f5:56:13:cf:68:1a:19:ed:b6:a0:bb: 67:ed:9b:ae:99:e8:9b:40:25:7d:fa:ae:23:55:cf: f2:9c:ba:1d:75:13:9c:08:ba:8c:1c:21:1c:05:a6: 8d:98:bb:7a:85:01:92:72:cc:cc:d0:4f:b5:cc:58: 81:15:cf:62:a9:8f:37:40:d7:80:fe:8f:bd:35:7c: 43:3a:20:c6:79:e2:03:ae:70:02:0e:5c:18:88:10: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CF:37:F7:00:2C:95:5F:58:51:11:54:13:8C:E1:AA:43:78:96:F0 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8s839wAslV9YURFUE4zhqkN4lvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:b000::/48 2a14:67c1:b100::/48 Signature Algorithm: sha256WithRSAEncryption 91:93:be:e4:97:c6:9c:c4:58:69:ef:2e:d0:fd:e9:a6:c9:da: 7b:87:03:0c:2a:60:23:80:25:fa:6a:1b:fc:cd:ac:17:8b:39: 2f:22:0d:10:f2:0c:90:94:76:d2:75:2a:11:f3:c2:64:5a:30: 00:37:bc:50:aa:b6:43:0f:7e:25:1b:5f:40:6d:20:d2:ec:e2: 20:eb:51:71:df:19:92:99:c7:82:79:91:c2:32:41:0e:69:1e: 9c:ab:18:88:93:20:f6:38:66:5d:ae:69:6a:09:28:b4:27:d0: b7:e7:34:e8:c7:28:f2:93:d5:db:8b:5b:77:98:12:8f:43:f0: 19:74:11:1a:7b:64:c7:91:6b:b0:1d:b1:0b:7b:e5:f4:e2:53: 7e:bf:2d:7b:20:49:75:fe:67:c0:06:d9:1b:ae:b9:f3:b1:40: b2:1e:ff:44:57:20:f5:9a:b7:d3:80:7f:c3:e5:4e:ae:e6:4a: 8f:7f:37:cd:06:00:d8:3e:fd:4b:83:9b:ee:56:c8:e2:8c:5c: 9c:27:1d:41:a1:e8:05:fc:50:5b:44:0b:43:c7:0f:14:e2:37: 36:2e:41:96:51:4b:d2:c5:4e:de:90:20:80:f9:bb:e2:c5:c0: a1:64:f6:5f:c5:b1:be:2a:7b:28:d4:43:1d:cb:c1:de:0b:54: 5a:6b:16:4b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NX0E09stx9xxLJ7Uf/QLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmNmMzdmNzAwMmM5NTVmNTg1MTExNTQxMzhjZTFhYTQzNzg5NmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdRqlOKrqjJEfrjXqcq+oVGNvix4 b3qeyasxQL7Btq8IMGbKJ6QZSAARsboy/NMyhTBBnWGVmjjvGr+wDt9JYVI20Som XKOgaiRzfMwsLrhTVaJwuSeDbOGOvvKleDy1e3mfsTcL/Te51bldIkdY4gLrKmpo Btrdty4sUxoWHrVBejr5UxnMw4X8kKgHH9LiRGfFge8M/GWIzqrU4U8814kAmiZ6 mSLL9VYTz2gaGe22oLtn7ZuumeibQCV9+q4jVc/ynLoddROcCLqMHCEcBaaNmLt6 hQGScszM0E+1zFiBFc9iqY83QNeA/o+9NXxDOiDGeeIDrnACDlwYiBDYTwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPLPN/cALJVfWFERVBOM4apDeJbwMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvOHM4Mzl3QXNsVjlZVVJGVUU0emhxa040bHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhRnwbAA AwcAKhRnwbEAMA0GCSqGSIb3DQEBCwUAA4IBAQCRk77kl8acxFhp7y7Q/emmydp7 hwMMKmAjgCX6ahv8zawXizkvIg0Q8gyQlHbSdSoR88JkWjAAN7xQqrZDD34lG19A bSDS7OIg61Fx3xmSmceCeZHCMkEOaR6cqxiIkyD2OGZdrmlqCSi0J9C35zToxyjy k9Xbi1t3mBKPQ/AZdBEae2THkWuwHbELe+X04lN+vy17IEl1/mfABtkbrrnzsUCy Hv9EVyD1mrfTgH/D5U6u5kqPfzfNBgDYPv1Lg5vuVsjijFycJx1BoegF/FBbRAtD xw8U4jc2LkGWUUvSxU7ekCCA+bvixcChZPZfxbG+Knso1EMdy8HeC1RaaxZL -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:36 2026 by rpki-client