This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/GWVHUFx44e6qMs_DwNGP4dqa_k4.roa File: GWVHUFx44e6qMs_DwNGP4dqa_k4.roa (raw, json) Hash identifier: rGgmdydF4W3gAqWIradaYI4D91CzHPijCdMV2KuWy2A= Subject key identifier: 19:65:47:50:5C:78:E1:EE:AA:32:CF:C3:C0:D1:8F:E1:DA:9A:FE:4E Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B358F82DE57EA46E019294CB71E24BF Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/GWVHUFx44e6qMs_DwNGP4dqa_k4.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213891 IP address blocks: 2a14:67c1:a060::/44 maxlen: 48 2a14:67c1:b000::/40 maxlen: 48 2a14:67c1:b000::/48 maxlen: 48 2a14:67c1:b100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:8f:82:de:57:ea:46:e0:19:29:4c:b7:1e:24:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=196547505c78e1eeaa32cfc3c0d18fe1da9afe4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:61:d8:27:db:e9:cd:b7:7d:e4:16:1e:4f: 69:5e:70:22:56:25:8a:48:94:5e:24:2e:3e:32:d3: 5c:bc:7a:b5:f8:7e:f4:04:8d:92:b3:86:57:77:b3: 71:99:ed:4b:6f:84:d1:52:f0:16:41:c6:f6:0e:da: 15:5c:fd:5e:c5:8a:1d:36:f6:26:d0:65:8e:17:05: 4a:e2:8b:40:31:90:b8:b2:52:40:06:0e:eb:3b:47: 5c:23:c3:05:d5:93:a5:7d:75:31:5d:18:58:eb:8b: 35:39:ae:6e:e6:c7:c0:77:94:ea:0d:f8:9f:18:19: b4:77:c9:3c:a1:be:e7:d9:ad:9f:82:86:6a:8c:f0: 46:f0:a9:86:b4:0b:25:33:33:99:01:34:46:1a:6c: 1b:8b:57:71:8c:6e:a8:e1:99:64:01:c7:df:b1:f9: 0c:04:b0:88:a9:83:5b:ce:e5:8e:8a:1a:ec:3f:39: 2c:72:88:f4:1d:86:86:c9:65:f5:1e:85:ea:c0:eb: 9d:10:4d:87:1e:14:f5:e1:76:e8:9b:ba:1f:48:55: 11:bb:ac:dc:8e:ad:dc:0f:7c:d0:e4:af:11:14:41: 0a:96:a7:d5:04:a3:16:d2:fb:cb:02:14:cb:c4:1c: 9b:b5:ab:63:d2:11:0e:b1:a9:b4:e7:32:e4:ed:b2: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:65:47:50:5C:78:E1:EE:AA:32:CF:C3:C0:D1:8F:E1:DA:9A:FE:4E X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/GWVHUFx44e6qMs_DwNGP4dqa_k4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a060::/44 2a14:67c1:b000::-2a14:67c1:b100:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 58:1a:ef:d8:1f:4e:5c:a0:82:b4:bf:93:73:b2:a7:43:7f:b8: 25:29:f4:ec:e6:27:e1:de:11:72:9f:94:65:20:ef:82:7a:84: 89:87:00:9f:5e:95:d3:78:09:fd:b5:a0:96:66:9e:b8:68:23: 63:58:17:f2:d3:65:44:11:20:36:57:13:99:f9:14:1d:fe:a8: 90:2c:50:2e:08:9e:c0:8c:c7:b3:56:d1:5e:61:12:a9:ec:3e: 25:e7:e8:72:37:69:bc:c5:ec:5c:a2:1b:12:c2:21:88:fc:c5: e8:cf:3e:07:76:5c:4a:90:ee:47:ac:bb:90:1c:26:bf:ec:bd: 49:90:85:5e:c5:b4:e0:ee:36:55:ed:1a:70:a7:a3:a3:13:64: d5:73:b5:9a:9b:72:87:20:cf:c9:6c:42:7f:81:a6:90:b3:13: f9:b7:59:d0:52:e9:4d:c4:11:8e:75:69:5c:95:8f:39:ce:7a: 6d:e3:1a:93:d1:b1:a6:66:9c:ee:b0:19:06:1e:21:5e:cd:3e: 2f:c4:e4:30:4b:0d:30:eb:3d:be:2f:c9:25:08:cd:ca:d7:12: 6c:63:32:de:1f:5c:9f:7c:ac:f0:fd:23:cf:a2:73:5b:cb:95: 02:2b:71:bb:84:88:3c:77:a1:a9:25:b1:21:a5:17:46:76:4c: df:26:98:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt7NY+C3lfqRuAZKUy3HiS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTY1NDc1MDVjNzhlMWVlYWEzMmNmYzNjMGQxOGZlMWRhOWFmZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlNh2Cfb6c23feQWHk9pXnAiViWK SJReJC4+MtNcvHq1+H70BI2Ss4ZXd7Nxme1Lb4TRUvAWQcb2DtoVXP1exYodNvYm 0GWOFwVK4otAMZC4slJABg7rO0dcI8MF1ZOlfXUxXRhY64s1Oa5u5sfAd5TqDfif GBm0d8k8ob7n2a2fgoZqjPBG8KmGtAslMzOZATRGGmwbi1dxjG6o4ZlkAcffsfkM BLCIqYNbzuWOihrsPzkscoj0HYaGyWX1HoXqwOudEE2HHhT14Xbom7ofSFURu6zc jq3cD3zQ5K8RFEEKlqfVBKMW0vvLAhTLxBybtatj0hEOsam05zLk7bJALwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFBllR1BceOHuqjLPw8DRj+Hamv5OMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvR1dWSFVGeDQ0ZTZxTXNfRHdOR1A0ZHFhX2s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwcEKhRnwaBg MBEDBgQqFGfBsAMHACoUZ8GxADANBgkqhkiG9w0BAQsFAAOCAQEAWBrv2B9OXKCC tL+Tc7KnQ3+4JSn07OYn4d4Rcp+UZSDvgnqEiYcAn16V03gJ/bWglmaeuGgjY1gX 8tNlRBEgNlcTmfkUHf6okCxQLgiewIzHs1bRXmESqew+JefocjdpvMXsXKIbEsIh iPzF6M8+B3ZcSpDuR6y7kBwmv+y9SZCFXsW04O42Ve0acKejoxNk1XO1mptyhyDP yWxCf4GmkLMT+bdZ0FLpTcQRjnVpXJWPOc56beMak9Gxpmac7rAZBh4hXs0+L8Tk MEsNMOs9vi/JJQjNytcSbGMy3h9cn3ys8P0jz6JzW8uVAitxu4SIPHehqSWxIaUX RnZM3yaY1A== -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:20 2026 by rpki-client