This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FqN_HyBeqH4PfjZmYjJ0wzkBSq0.roa File: FqN_HyBeqH4PfjZmYjJ0wzkBSq0.roa (raw, json) Hash identifier: Q6AvDMmrsoxbTsrXpUoyGtfrz2hEG6zzJ2bCkAZkm9A= Subject key identifier: 16:A3:7F:1F:20:5E:A8:7E:0F:7E:36:66:62:32:74:C3:39:01:4A:AD Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BBD2A38D78DBCA22ADF7279F2C4A2025F Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FqN_HyBeqH4PfjZmYjJ0wzkBSq0.roa Signing time: Wed 14 Jan 2026 15:40:19 +0000 ROA not before: Wed 14 Jan 2026 15:40:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151673 IP address blocks: 2a14:67c1:b000::/48 maxlen: 48 2a14:67c3:880::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:2a:38:d7:8d:bc:a2:2a:df:72:79:f2:c4:a2:02:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 14 15:40:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16a37f1f205ea87e0f7e3666623274c339014aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:b9:a1:67:07:02:93:97:82:66:90:d9:7d: d5:4a:93:03:24:de:5f:5a:6a:38:8b:db:ec:b3:6b: c3:34:5c:3c:77:d1:f8:c2:3c:5e:4a:21:34:87:ee: 00:cc:6d:bb:ef:77:22:f3:03:51:91:38:3e:1b:59: 82:86:4a:a5:64:4f:19:22:a3:e1:6e:ed:d1:ac:bc: c4:7f:5f:6b:3c:7b:fe:14:d2:ea:50:1b:38:91:98: 4b:b7:f3:cf:d3:16:8b:ac:1b:65:61:78:5f:5d:f6: 69:1b:00:3e:fa:92:4f:c6:93:1d:f3:3b:46:6f:55: b6:03:6f:ac:02:a9:44:56:ec:82:69:61:0f:be:41: cc:2e:1c:dc:ab:28:ad:47:ef:23:47:ed:da:54:a1: 0e:63:0c:72:0a:8a:06:a2:7f:a3:e9:90:48:20:05: 2f:2f:69:89:95:e6:d4:24:44:1e:f5:a0:75:a8:c8: 86:b8:e5:7e:55:7b:0c:ce:d9:bf:bd:51:fe:6c:52: c5:21:4d:a1:fe:2c:d1:38:d6:10:1f:91:bf:e8:b2: 50:5b:92:de:47:65:9f:24:97:38:02:23:8a:99:46: 2f:9a:57:00:20:3b:81:c6:12:49:5f:c8:65:45:94: a5:09:1e:7b:0c:f2:0b:76:3c:de:11:e1:d0:50:3e: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A3:7F:1F:20:5E:A8:7E:0F:7E:36:66:62:32:74:C3:39:01:4A:AD X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FqN_HyBeqH4PfjZmYjJ0wzkBSq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:b000::/48 2a14:67c3:880::/44 Signature Algorithm: sha256WithRSAEncryption 7b:fc:ff:8e:a5:53:b9:5e:90:cb:ab:a2:97:e2:b5:0c:4f:8d: b2:d4:f1:44:c6:08:d3:d7:aa:5c:38:0c:88:01:de:d4:9b:52: a0:5a:6d:f4:eb:2b:28:a6:64:8c:9b:04:6c:b2:a5:c6:91:e0: d0:8a:cd:4c:04:d8:c5:ec:4d:b5:a5:de:af:60:60:0b:aa:69: 5c:e6:41:91:75:b2:8b:86:a7:4a:68:2c:bb:93:91:a1:8f:78: 5c:de:82:5b:9e:1f:f4:bf:86:73:33:59:2b:62:12:51:bf:80: ec:60:f7:e1:54:8e:9d:38:df:53:fb:dd:dd:b7:a3:9c:b9:fa: 40:29:0d:8b:14:1a:2b:e9:b2:d6:ab:45:0e:8c:f0:df:de:26: ed:b7:c9:1b:47:28:aa:0e:e5:e2:71:6e:b2:c9:99:01:a9:99: 8e:ea:3a:5d:0b:a9:f4:c5:c7:2e:d7:d1:14:8d:21:cc:b9:e6: 9f:c9:d4:e4:79:7a:1f:18:25:e6:5d:5d:a1:66:c8:90:eb:9f: b5:a8:da:fd:50:f0:3f:78:ea:48:6f:38:d0:5b:c4:bb:bb:73: 02:f4:4d:d8:fc:db:04:02:aa:5f:08:68:af:72:93:67:56:03: 8e:bb:67:6b:38:72:f8:17:5f:f5:af:f5:16:4b:ea:dc:57:9e: f6:a9:03:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu9KjjXjbyiKt9yefLEogJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTE0MTU0MDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmEzN2YxZjIwNWVhODdlMGY3ZTM2NjY2MjMyNzRjMzM5MDE0YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIq5oWcHApOXgmaQ2X3VSpMDJN5f Wmo4i9vss2vDNFw8d9H4wjxeSiE0h+4AzG2773ci8wNRkTg+G1mChkqlZE8ZIqPh bu3RrLzEf19rPHv+FNLqUBs4kZhLt/PP0xaLrBtlYXhfXfZpGwA++pJPxpMd8ztG b1W2A2+sAqlEVuyCaWEPvkHMLhzcqyitR+8jR+3aVKEOYwxyCooGon+j6ZBIIAUv L2mJlebUJEQe9aB1qMiGuOV+VXsMztm/vVH+bFLFIU2h/izRONYQH5G/6LJQW5Le R2WfJJc4AiOKmUYvmlcAIDuBxhJJX8hlRZSlCR57DPILdjzeEeHQUD5gwQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBajfx8gXqh+D342ZmIydMM5AUqtMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvRnFOX0h5QmVxSDRQZmpabVlqSjB3emtCU3EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhRnwbAA AwcEKhRnwwiAMA0GCSqGSIb3DQEBCwUAA4IBAQB7/P+OpVO5XpDLq6KX4rUMT42y 1PFExgjT16pcOAyIAd7Um1KgWm306ysopmSMmwRssqXGkeDQis1MBNjF7E21pd6v YGALqmlc5kGRdbKLhqdKaCy7k5Ghj3hc3oJbnh/0v4ZzM1krYhJRv4DsYPfhVI6d ON9T+93dt6OcufpAKQ2LFBor6bLWq0UOjPDf3ibtt8kbRyiqDuXicW6yyZkBqZmO 6jpdC6n0xccu19EUjSHMueafydTkeXofGCXmXV2hZsiQ65+1qNr9UPA/eOpIbzjQ W8S7u3MC9E3Y/NsEAqpfCGivcpNnVgOOu2drOHL4F1/1r/UWS+rcV572qQPd -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:00 2026 by rpki-client