This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/CD5pGvXC57ZlZP5mhoOR-q51Py4.roa File: CD5pGvXC57ZlZP5mhoOR-q51Py4.roa (raw, json) Hash identifier: UOey9ebrWh1XQ5UV0LtfQHlbpiBmic56BMC+2Icfb5M= Subject key identifier: 08:3E:69:1A:F5:C2:E7:B6:65:64:FE:66:86:83:91:FA:AE:75:3F:2E Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B3586CA07B2D7D0F9961F20DBB22D87 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/CD5pGvXC57ZlZP5mhoOR-q51Py4.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210352 IP address blocks: 2a14:67c1:a068::/48 maxlen: 48 2a14:67c1:a090::/44 maxlen: 48 2a14:67c1:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:86:ca:07:b2:d7:d0:f9:96:1f:20:db:b2:2d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=083e691af5c2e7b66564fe66868391faae753f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d9:75:44:3e:b9:24:1f:47:32:0f:a1:db:d2: 61:df:ad:d8:d6:f3:ee:89:98:d6:34:20:8f:bf:bd: 8b:f3:36:67:63:1c:10:69:79:08:37:e8:68:cd:63: 69:5f:bf:25:c5:66:7b:55:cc:82:a6:a1:12:da:47: 92:e2:d6:d9:a1:81:24:35:c8:65:40:a9:0c:dd:5e: e3:24:c4:b1:77:50:3b:0b:59:ac:ed:67:f4:e3:ce: 78:82:3e:a4:31:f9:99:aa:99:cf:e9:d2:11:77:a0: 42:ee:7d:b0:df:88:d1:77:51:1b:a7:d8:a8:22:04: 20:bc:0c:58:66:1d:7e:49:f3:04:7e:5d:d0:f7:d9: 41:0b:c1:12:32:9e:33:e9:ae:6d:63:dd:81:2b:bc: ff:7c:d6:10:0a:b5:ac:34:e6:72:e0:b6:19:d8:4c: 32:e1:07:94:5c:5e:9b:a9:2a:18:83:91:32:49:d6: 8e:9d:f6:ae:bc:08:73:68:02:af:41:aa:7a:f5:1f: a8:45:08:27:f9:8c:4f:5d:6f:db:e5:84:06:47:32: 46:4c:56:b6:57:bf:30:5a:31:1e:8b:06:b7:bd:52: 7b:7a:c5:e5:41:17:79:ee:ff:30:7f:6b:7d:f1:da: 4c:e0:e0:f7:df:af:74:0b:1b:0f:37:a5:d2:4d:5a: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3E:69:1A:F5:C2:E7:B6:65:64:FE:66:86:83:91:FA:AE:75:3F:2E X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/CD5pGvXC57ZlZP5mhoOR-q51Py4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a068::/48 2a14:67c1:a090::/44 2a14:67c1:b000::/48 Signature Algorithm: sha256WithRSAEncryption b2:47:78:22:5e:90:a2:9a:d6:ed:38:42:30:02:44:56:5e:86: 9a:73:42:c3:24:8f:18:0d:60:3b:3f:f7:c4:e3:ed:ee:5f:5f: b0:0a:d7:9a:c6:bb:77:e0:9d:b0:b6:82:2e:fd:59:3a:96:1f: cd:0f:6f:6f:15:ac:67:20:0f:74:71:90:5c:0e:1f:52:cd:33: 2b:04:8d:cd:5e:5b:72:db:cc:ef:48:3d:44:4a:2a:da:8c:b3: d5:dd:54:22:f4:ba:99:06:cc:39:7b:fd:d9:a6:88:25:6e:3b: 87:78:37:67:a3:76:69:e1:2c:a1:96:57:9e:04:31:e7:cd:14: 76:e9:7b:a3:ed:b8:c6:2f:6d:87:d9:f6:7f:a9:17:02:1c:64: 8a:78:3a:fa:df:07:7b:92:e9:b1:be:ce:1e:84:4b:0b:90:c1: 3c:e4:e2:bc:f2:5b:a6:66:67:fd:67:cb:bb:cf:be:e3:aa:4b: 7a:de:73:5b:22:b4:e1:03:f1:6b:86:43:d2:8c:e3:5e:87:44: 22:e4:f7:09:07:90:47:c5:e7:58:e0:22:df:f1:75:26:a8:b6: 2b:6d:af:57:40:25:24:73:1d:5c:ee:04:59:bd:07:aa:aa:96: 3e:87:e7:56:56:a1:3c:3f:d2:27:ad:23:31:5b:04:a2:b5:89: b6:91:a1:10 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NYbKB7LX0PmWHyDbsi2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNlNjkxYWY1YzJlN2I2NjU2NGZlNjY4NjgzOTFmYWFlNzUzZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nl1RD65JB9HMg+h29Jh363Y1vPu iZjWNCCPv72L8zZnYxwQaXkIN+hozWNpX78lxWZ7VcyCpqES2keS4tbZoYEkNchl QKkM3V7jJMSxd1A7C1ms7Wf04854gj6kMfmZqpnP6dIRd6BC7n2w34jRd1Ebp9io IgQgvAxYZh1+SfMEfl3Q99lBC8ESMp4z6a5tY92BK7z/fNYQCrWsNOZy4LYZ2Ewy 4QeUXF6bqSoYg5EySdaOnfauvAhzaAKvQap69R+oRQgn+YxPXW/b5YQGRzJGTFa2 V78wWjEeiwa3vVJ7esXlQRd57v8wf2t98dpM4OD33690CxsPN6XSTVo/1QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAg+aRr1wue2ZWT+ZoaDkfqudT8uMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvQ0Q1cEd2WEM1N1psWlA1bWhvT1ItcTUxUHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKhRnwaBo AwcEKhRnwaCQAwcAKhRnwbAAMA0GCSqGSIb3DQEBCwUAA4IBAQCyR3giXpCimtbt OEIwAkRWXoaac0LDJI8YDWA7P/fE4+3uX1+wCteaxrt34J2wtoIu/Vk6lh/ND29v FaxnIA90cZBcDh9SzTMrBI3NXlty28zvSD1ESirajLPV3VQi9LqZBsw5e/3Zpogl bjuHeDdno3Zp4SyhlleeBDHnzRR26Xuj7bjGL22H2fZ/qRcCHGSKeDr63wd7kumx vs4ehEsLkME85OK88lumZmf9Z8u7z77jqkt63nNbIrThA/FrhkPSjONeh0Qi5PcJ B5BHxedY4CLf8XUmqLYrba9XQCUkcx1c7gRZvQeqqpY+h+dWVqE8P9InrSMxWwSi tYm2kaEQ -----END CERTIFICATE-----Generated at Sun Jan 25 13:31:36 2026 by rpki-client