This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/G0wokQyHTROnul6DEi_JRkakp8g.roa File: G0wokQyHTROnul6DEi_JRkakp8g.roa (raw, json) Hash identifier: 0vUsSLd8Vqudf8+9qalg9gbc76USSaDHtFomV8pPhU8= Subject key identifier: 1B:4C:28:91:0C:87:4D:13:A7:BA:5E:83:12:2F:C9:46:46:A4:A7:C8 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B358BC6009B21EE1205179AC7BB30A3 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/G0wokQyHTROnul6DEi_JRkakp8g.roa Signing time: Thu 01 Jan 2026 20:17:45 +0000 ROA not before: Thu 01 Jan 2026 20:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213519 IP address blocks: 2a14:67c1:a030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:8b:c6:00:9b:21:ee:12:05:17:9a:c7:bb:30:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b4c28910c874d13a7ba5e83122fc94646a4a7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:d4:a3:0a:01:d3:b9:fe:c9:9b:9e:46:ea: cf:ad:a9:d5:1a:d4:50:eb:44:d0:04:89:c1:20:d1: 86:d9:db:a7:2e:db:f3:e3:c1:46:cd:52:be:0d:b7: be:ff:fb:8f:68:43:5a:02:c7:ac:ea:b2:75:34:06: 4b:93:79:58:d1:0a:00:73:a9:b6:91:9e:a4:cf:f7: 9c:16:7c:0d:ca:b5:6e:19:d7:7d:8e:ba:e1:99:ec: e4:5e:3f:af:33:3b:b3:b1:e0:d9:f5:fe:e1:cc:9f: e2:e9:57:6f:d6:17:54:ad:7f:fb:d1:9b:72:3f:41: f9:eb:98:d0:cd:fa:a1:58:0e:04:a6:cb:1d:f1:1b: 69:40:65:e3:af:f4:f0:84:f1:c7:e3:b2:03:88:c0: 47:65:19:7c:28:ac:48:03:52:be:5d:76:e7:34:bf: 04:65:ec:d5:d3:9f:22:aa:c0:d8:a8:a6:43:cc:e3: a8:39:70:6d:5e:2d:ee:3c:cc:bd:65:63:0e:a3:c0: 65:1d:35:ca:eb:fd:ee:4d:60:62:10:a9:95:e7:5c: 96:8e:6e:5a:3e:b0:38:93:73:60:97:ed:b5:c3:cb: cd:a0:e3:08:14:77:d1:65:3b:05:2a:0d:b5:32:c8: d6:c5:0e:49:82:cf:52:74:84:eb:53:2b:aa:33:c7: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4C:28:91:0C:87:4D:13:A7:BA:5E:83:12:2F:C9:46:46:A4:A7:C8 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/G0wokQyHTROnul6DEi_JRkakp8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a030::/44 Signature Algorithm: sha256WithRSAEncryption c3:a6:3b:56:92:6c:72:a0:ef:6e:2d:a2:a9:43:45:65:c6:42: bf:bd:74:2d:48:b8:56:8e:63:3e:8b:47:c6:2c:fa:0c:c0:ad: f6:3f:a9:83:1f:de:a3:79:77:e3:46:5a:71:4c:94:21:a0:8f: f6:c8:db:f8:24:a2:8e:e4:a0:9f:5c:1a:01:09:4a:8a:f3:0d: 2f:70:94:1c:e1:91:af:8a:ff:02:5c:54:7e:13:df:d4:b5:57: da:49:f7:ee:64:ff:1d:b5:60:19:90:18:e3:d2:ee:a5:bf:8f: 9f:ba:e0:46:86:a3:ef:05:62:16:14:e0:f2:b9:4f:1d:07:b7: 3d:32:3a:b3:88:f5:45:76:3c:29:a8:47:6b:9e:b6:b1:ba:d9: 91:e7:4c:4e:cd:4e:27:79:ef:b5:f0:99:e0:81:6f:01:57:d6: 73:e8:df:62:76:d2:e9:95:5f:1e:bc:fc:54:30:62:17:81:fb: 2a:69:8d:b1:71:34:d7:20:47:77:15:9b:11:27:aa:1c:34:d0: 64:14:f5:68:31:07:9c:82:ea:4e:f0:b8:23:80:4d:72:eb:8f: 44:e4:08:8b:1c:46:1e:6f:3b:7a:45:b9:4d:46:bb:fd:ea:00: 29:c5:0a:bb:dd:8e:22:49:fd:46:4e:91:7c:c2:6f:28:7a:c8: c2:03:09:7c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NYvGAJsh7hIFF5rHuzCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjRjMjg5MTBjODc0ZDEzYTdiYTVlODMxMjJmYzk0NjQ2YTRhN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9nUowoB07n+yZueRurPranVGtRQ 60TQBInBINGG2dunLtvz48FGzVK+Dbe+//uPaENaAses6rJ1NAZLk3lY0QoAc6m2 kZ6kz/ecFnwNyrVuGdd9jrrhmezkXj+vMzuzseDZ9f7hzJ/i6Vdv1hdUrX/70Zty P0H565jQzfqhWA4Epssd8RtpQGXjr/TwhPHH47IDiMBHZRl8KKxIA1K+XXbnNL8E ZezV058iqsDYqKZDzOOoOXBtXi3uPMy9ZWMOo8BlHTXK6/3uTWBiEKmV51yWjm5a PrA4k3Ngl+21w8vNoOMIFHfRZTsFKg21MsjWxQ5Jgs9SdITrUyuqM8dMJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBtMKJEMh00Tp7pegxIvyUZGpKfIMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvRzB3b2tReUhUUk9udWw2REVpX0pSa2FrcDhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaAw MA0GCSqGSIb3DQEBCwUAA4IBAQDDpjtWkmxyoO9uLaKpQ0VlxkK/vXQtSLhWjmM+ i0fGLPoMwK32P6mDH96jeXfjRlpxTJQhoI/2yNv4JKKO5KCfXBoBCUqK8w0vcJQc 4ZGviv8CXFR+E9/UtVfaSffuZP8dtWAZkBjj0u6lv4+fuuBGhqPvBWIWFODyuU8d B7c9MjqziPVFdjwpqEdrnraxutmR50xOzU4nee+18JnggW8BV9Zz6N9idtLplV8e vPxUMGIXgfsqaY2xcTTXIEd3FZsRJ6ocNNBkFPVoMQecgupO8LgjgE1y649E5AiL HEYebzt6RblNRrv96gApxQq73Y4iSf1GTpF8wm8oesjCAwl8 -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:59 2026 by rpki-client