This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9qt4Tn5DrojTXvsLTliJ-T1iRR8.roa File: 9qt4Tn5DrojTXvsLTliJ-T1iRR8.roa (raw, json) Hash identifier: G9bYe2sLjwsomCAEzPO7/UGZxBqGkjtfXb2Q2JkyMoI= Subject key identifier: F6:AB:78:4E:7E:43:AE:88:D3:5E:FB:0B:4E:58:89:F9:3D:62:45:1F Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B35841EB3192D4C5E90962F30752CED Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9qt4Tn5DrojTXvsLTliJ-T1iRR8.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207091 IP address blocks: 2a14:67c1:a140::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:84:1e:b3:19:2d:4c:5e:90:96:2f:30:75:2c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6ab784e7e43ae88d35efb0b4e5889f93d62451f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:50:91:12:49:46:1f:3b:75:94:ed:56:a1: c8:67:82:b6:97:f0:96:d0:58:72:cf:65:69:8f:b3: ec:ba:d3:ba:6b:8a:65:11:03:87:cd:a4:dc:63:f6: 26:ee:b8:bb:7a:e5:a6:99:f1:f5:fa:2b:d4:99:f7: 7c:91:bc:c4:d1:5b:90:e6:aa:6c:83:19:ce:4a:c3: 2e:59:cd:dd:95:d3:5f:f5:ec:d7:0b:e5:b2:ba:92: ba:30:40:ad:9c:93:9c:d0:4b:74:de:e4:3b:25:97: 26:cd:d5:95:da:f7:23:c7:4f:d8:3a:3a:03:e8:a2: 8b:33:b0:1c:8f:f4:da:d6:f2:ea:19:07:ea:bf:49: 9c:7f:a8:fa:52:c5:e7:97:6c:da:3f:e3:1b:be:e3: 1f:32:7c:14:e0:95:cb:69:8e:0d:c5:00:e4:fe:11: 51:dc:2e:f8:1a:f1:df:2e:9e:47:01:1c:0d:22:3a: 90:ff:f3:21:18:ee:65:04:07:ab:5b:27:f9:48:be: 3c:b0:bc:d1:6f:87:b2:52:36:38:19:ee:86:a0:08: 7b:c3:e1:56:d0:85:ea:c7:a2:de:7d:f8:b0:54:6f: a4:b5:2d:1d:b2:da:e5:0b:41:e8:e6:19:ff:bd:65: b0:49:59:e0:66:c5:b8:d0:f1:38:57:06:5b:7b:d1: e0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AB:78:4E:7E:43:AE:88:D3:5E:FB:0B:4E:58:89:F9:3D:62:45:1F X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9qt4Tn5DrojTXvsLTliJ-T1iRR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a140::/44 Signature Algorithm: sha256WithRSAEncryption ba:aa:21:38:01:06:b6:67:e4:9f:d6:c6:6d:9f:01:cf:06:9c: 92:92:33:57:22:2f:bb:f0:b2:28:67:76:66:94:87:12:0d:07: 27:20:92:a1:f7:10:b6:3f:79:94:9a:5a:4e:50:f7:13:40:80: 17:7c:1d:c4:9d:93:de:4e:c4:85:0a:2d:8f:98:16:50:b2:b9: ef:83:ab:88:51:43:2b:62:3d:18:62:3f:3f:d8:7d:c5:23:0c: 93:28:c1:02:aa:e1:c5:ee:ba:17:d8:ea:bf:90:8b:93:dc:25: 81:d0:72:98:cb:aa:75:9b:0c:e6:7d:91:4e:58:05:a3:12:82: 82:78:e2:d0:a6:0b:bf:96:7a:5f:27:6d:bc:80:13:fa:15:17: d7:53:f7:42:1e:f7:bf:e2:6c:58:c6:dc:e0:8a:8b:47:f4:b6: 39:56:18:1f:ce:26:d1:26:7c:86:be:fb:1d:24:82:bc:a7:19: e4:c4:16:95:17:82:5b:b7:47:1f:54:0a:4b:10:07:c5:c4:9c: 5d:a9:1e:14:71:14:f2:b1:d1:95:5f:55:c3:2d:06:c8:06:9a: b0:dc:22:0f:d8:d4:2b:d0:3f:2d:1d:94:73:b1:c9:e3:62:5c: f8:7b:cf:b2:cf:db:f3:ba:2c:60:82:f5:d8:21:44:4c:f6:ee: 14:43:c2:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NYQesxktTF6Qli8wdSztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmFiNzg0ZTdlNDNhZTg4ZDM1ZWZiMGI0ZTU4ODlmOTNkNjI0NTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NQkRJJRh87dZTtVqHIZ4K2l/CW 0Fhyz2Vpj7PsutO6a4plEQOHzaTcY/Ym7ri7euWmmfH1+ivUmfd8kbzE0VuQ5qps gxnOSsMuWc3dldNf9ezXC+WyupK6MECtnJOc0Et03uQ7JZcmzdWV2vcjx0/YOjoD 6KKLM7Acj/Ta1vLqGQfqv0mcf6j6UsXnl2zaP+MbvuMfMnwU4JXLaY4NxQDk/hFR 3C74GvHfLp5HARwNIjqQ//MhGO5lBAerWyf5SL48sLzRb4eyUjY4Ge6GoAh7w+FW 0IXqx6LeffiwVG+ktS0dstrlC0Ho5hn/vWWwSVngZsW40PE4VwZbe9HghQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPareE5+Q66I0177C05Yifk9YkUfMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvOXF0NFRuNURyb2pUWHZzTFRsaUotVDFpUlI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaFA MA0GCSqGSIb3DQEBCwUAA4IBAQC6qiE4AQa2Z+Sf1sZtnwHPBpySkjNXIi+78LIo Z3ZmlIcSDQcnIJKh9xC2P3mUmlpOUPcTQIAXfB3EnZPeTsSFCi2PmBZQsrnvg6uI UUMrYj0YYj8/2H3FIwyTKMECquHF7roX2Oq/kIuT3CWB0HKYy6p1mwzmfZFOWAWj EoKCeOLQpgu/lnpfJ228gBP6FRfXU/dCHve/4mxYxtzgiotH9LY5VhgfzibRJnyG vvsdJIK8pxnkxBaVF4Jbt0cfVApLEAfFxJxdqR4UcRTysdGVX1XDLQbIBpqw3CIP 2NQr0D8tHZRzscnjYlz4e8+yz9vzuixggvXYIURM9u4UQ8LG -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:21 2026 by rpki-client