This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/F95YXz2ennd4_yhzUSsLBWN39VQ.roa File: F95YXz2ennd4_yhzUSsLBWN39VQ.roa (raw, json) Hash identifier: QdC/VKmkBkjStmWJpt3d+I/Y6CKtBt1f0/OInoIqdWU= Subject key identifier: 17:DE:58:5F:3D:9E:9E:77:78:FF:28:73:51:2B:0B:05:63:77:F5:54 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B3589B3973DA66A2A572E2AA7F9FBCE Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/F95YXz2ennd4_yhzUSsLBWN39VQ.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212053 IP address blocks: 2a14:67c1:c500::/40 maxlen: 48 2a14:67c2:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:89:b3:97:3d:a6:6a:2a:57:2e:2a:a7:f9:fb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17de585f3d9e9e7778ff2873512b0b056377f554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:17:92:f1:d1:7d:79:3d:b8:38:a7:2b:31: af:84:1b:02:84:cb:1c:54:31:78:0c:53:0f:03:02: 37:a2:ba:fd:45:06:4d:31:1b:88:d0:ca:4c:d0:cd: 7d:cb:bd:df:7d:dd:a0:33:bd:a5:f8:a2:e9:38:49: 4f:dd:8a:36:5f:22:27:4a:e9:47:86:68:25:4a:20: 6c:da:18:4c:fb:d6:4b:d9:df:ab:f7:b4:41:d1:e9: 86:8f:c1:c1:60:a5:41:28:19:21:15:a1:2e:93:d1: cf:cf:25:03:6c:53:18:ff:90:82:30:0d:7a:b4:ae: 66:8d:64:22:33:95:71:61:7c:43:4f:43:b0:3f:8d: ec:2c:14:06:b7:9c:5a:80:ea:48:74:1b:cf:80:75: f4:2f:03:45:76:c7:9a:3d:f4:0d:4b:d7:b4:ae:ab: 37:44:9d:f7:bf:bb:3d:c2:18:6f:e2:ee:56:83:c1: 04:5d:5b:4e:86:18:f0:e9:1c:83:93:43:3c:06:8c: b4:72:df:70:c4:f8:ee:e9:41:38:20:a3:fe:89:dc: 88:20:45:46:c3:6c:24:62:18:67:51:ff:4b:ed:49: f7:b8:32:90:3a:fb:8b:be:dc:a5:2e:f7:24:99:ef: 95:0c:43:2e:93:86:1c:d8:ad:51:7b:10:b7:ad:a6: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DE:58:5F:3D:9E:9E:77:78:FF:28:73:51:2B:0B:05:63:77:F5:54 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/F95YXz2ennd4_yhzUSsLBWN39VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:c500::/40 2a14:67c2:c00::/40 Signature Algorithm: sha256WithRSAEncryption 21:96:b1:67:ee:f7:7e:17:99:6e:d7:3d:69:d4:d2:83:af:c9: 86:e7:43:b1:60:73:84:5b:92:c2:8a:8f:fa:a1:3d:80:e7:a2: dd:f1:9d:62:8a:04:d1:71:d2:90:21:49:92:df:de:c1:fe:cb: 38:68:2d:da:0c:3e:e5:33:08:74:6c:1c:86:50:71:99:52:4c: 8d:07:f6:46:69:ac:41:e2:f7:80:b1:c6:90:04:84:e8:85:8b: 13:1e:b2:39:89:ff:20:31:1f:28:3a:17:23:a5:95:fe:d3:61: 9a:98:51:12:1f:80:32:d3:f1:8d:e5:3b:46:45:92:71:25:3a: 54:d1:65:6f:27:d9:27:dd:49:71:2e:c4:b5:fc:70:59:7e:bb: 6a:09:1f:e3:1c:de:ba:4c:57:c8:a8:db:1a:0a:28:7f:7e:2a: ac:28:17:ed:cc:29:d9:dd:96:e4:3b:f2:17:9a:4a:e7:db:84: fe:eb:94:04:eb:08:34:58:76:7f:37:d4:41:2e:d7:c1:a0:17: ac:18:38:3b:e9:82:e3:a9:e6:17:04:23:69:6b:45:11:f4:a2: 60:e8:b7:85:9c:e8:99:e8:3a:23:11:35:84:ee:41:26:7f:e2: 1f:a5:77:45:8d:30:77:f4:ce:46:6d:1a:63:be:95:ff:3f:bc: 79:88:ae:52 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7NYmzlz2maipXLiqn+fvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2RlNTg1ZjNkOWU5ZTc3NzhmZjI4NzM1MTJiMGIwNTYzNzdmNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupAXkvHRfXk9uDinKzGvhBsChMsc VDF4DFMPAwI3orr9RQZNMRuI0MpM0M19y73ffd2gM72l+KLpOElP3Yo2XyInSulH hmglSiBs2hhM+9ZL2d+r97RB0emGj8HBYKVBKBkhFaEuk9HPzyUDbFMY/5CCMA16 tK5mjWQiM5VxYXxDT0OwP43sLBQGt5xagOpIdBvPgHX0LwNFdseaPfQNS9e0rqs3 RJ33v7s9whhv4u5Wg8EEXVtOhhjw6RyDk0M8Boy0ct9wxPju6UE4IKP+idyIIEVG w2wkYhhnUf9L7Un3uDKQOvuLvtylLvckme+VDEMuk4Yc2K1RexC3raZKyQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFBfeWF89np53eP8oc1ErCwVjd/VUMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvRjk1WVh6MmVubmQ0X3loelVTc0xCV04zOVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKhRnwcUD BgAqFGfCDDANBgkqhkiG9w0BAQsFAAOCAQEAIZaxZ+73fheZbtc9adTSg6/JhudD sWBzhFuSwoqP+qE9gOei3fGdYooE0XHSkCFJkt/ewf7LOGgt2gw+5TMIdGwchlBx mVJMjQf2RmmsQeL3gLHGkASE6IWLEx6yOYn/IDEfKDoXI6WV/tNhmphREh+AMtPx jeU7RkWScSU6VNFlbyfZJ91JcS7EtfxwWX67agkf4xzeukxXyKjbGgoof34qrCgX 7cwp2d2W5DvyF5pK59uE/uuUBOsINFh2fzfUQS7XwaAXrBg4O+mC46nmFwQjaWtF EfSiYOi3hZzomeg6IxE1hO5BJn/iH6V3RY0wd/TORm0aY76V/z+8eYiuUg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:19 2026 by rpki-client