This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/K2vAMEgiHVfMGzlFakB1-d2F4Ig.roa File: K2vAMEgiHVfMGzlFakB1-d2F4Ig.roa (raw, json) Hash identifier: m37+ACXxEfe9eIqS3od55iuJ+LU7k0JPhbP9/uovG6w= Subject key identifier: 2B:6B:C0:30:48:22:1D:57:CC:1B:39:45:6A:40:75:F9:DD:85:E0:88 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7FB3F14F3E36FF4F075E099FBC8C5F14 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/K2vAMEgiHVfMGzlFakB1-d2F4Ig.roa Signing time: Fri 02 Jan 2026 17:14:17 +0000 ROA not before: Fri 02 Jan 2026 17:14:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401835 IP address blocks: 2a14:67c3:7c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:b3:f1:4f:3e:36:ff:4f:07:5e:09:9f:bc:8c:5f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 2 17:14:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b6bc03048221d57cc1b39456a4075f9dd85e088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:76:ec:aa:ca:b3:de:ff:bb:93:f7:ba:16: 22:af:14:ac:1c:d5:84:f1:bb:53:d1:75:74:c6:ff: b9:d8:77:fc:f6:33:6b:63:3d:4e:a1:34:48:69:8b: 4c:90:b7:d4:b6:b6:dc:a9:ad:d7:e5:99:ef:21:03: 9e:07:f8:34:ec:07:f4:ba:d0:ef:86:45:7f:84:c2: f5:9b:01:a0:17:51:80:3e:ca:9f:43:3f:ce:38:6b: b3:a1:30:5e:4e:31:2b:ce:68:19:4a:53:e2:e8:5d: 79:95:0c:b5:f9:6e:4f:95:39:c7:25:90:0a:f5:f7: 99:02:d3:7d:7d:46:46:44:28:58:f3:c4:94:5b:94: e4:f9:4e:47:ae:75:43:01:cd:b4:46:21:a5:2c:6d: eb:15:cd:4f:ff:88:47:41:4d:45:6c:91:f2:9f:eb: bd:85:b2:3e:48:8d:6f:ee:c8:e9:19:04:1d:19:8a: c6:06:7e:af:7a:d0:ca:82:43:94:4c:52:17:47:83: 07:ce:d3:92:7b:11:eb:f9:5d:8f:ae:5d:d4:71:fc: 7e:86:a3:01:b7:76:c6:d6:82:9c:26:53:ca:77:fc: ce:ba:3f:b5:9b:e7:7f:c3:2a:2b:28:73:3e:36:a0: 4e:73:06:02:21:7f:f6:0a:04:8b:b5:ae:0a:11:84: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6B:C0:30:48:22:1D:57:CC:1B:39:45:6A:40:75:F9:DD:85:E0:88 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/K2vAMEgiHVfMGzlFakB1-d2F4Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:7c0::/44 Signature Algorithm: sha256WithRSAEncryption b9:ca:12:f2:1f:d4:0d:aa:5f:bf:73:5b:b1:70:d1:45:bb:01: f5:57:e3:35:48:60:8f:22:38:d8:f1:84:32:fd:e3:c1:6f:fa: 78:84:4b:23:6a:90:f6:8e:54:b3:77:94:e0:82:0c:a6:c0:a5: ee:11:b2:b2:c1:46:dd:f8:7a:1f:03:28:0d:08:1a:71:40:cb: 25:0c:97:88:87:55:5a:45:37:25:b8:e3:21:4c:85:b8:06:0b: e9:0c:c3:a3:35:80:e8:69:c5:23:96:19:95:97:fe:21:bf:16: 95:dd:21:66:77:97:cd:e6:78:f6:2e:f3:a1:96:ef:93:45:48: 56:b2:c5:05:a0:75:93:d4:80:57:98:94:9b:0b:0f:4c:2c:c1: d0:a5:53:80:a2:0b:41:4c:7b:11:e7:84:9e:82:ee:26:42:cf: f2:77:a0:3c:84:34:de:94:b0:80:ae:c9:ae:9e:d7:38:01:79: 53:85:6b:90:9e:66:b7:41:68:57:39:76:5b:97:a8:e2:d9:d7: eb:66:22:0e:ea:f4:a6:dc:5c:c7:4f:5e:bf:73:5a:50:b6:01: 9b:4d:c0:3b:88:79:73:ae:b9:7d:3d:e1:5e:f3:ac:44:51:c1: 9e:ea:28:d9:80:3d:84:da:ea:10:89:73:8b:f3:cd:2c:11:b3: 5a:ee:6f:91 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/s/FPPjb/TwdeCZ+8jF8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAyMTcxNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjZiYzAzMDQ4MjIxZDU3Y2MxYjM5NDU2YTQwNzVmOWRkODVlMDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEd27KrKs97/u5P3uhYirxSsHNWE 8btT0XV0xv+52Hf89jNrYz1OoTRIaYtMkLfUtrbcqa3X5ZnvIQOeB/g07Af0utDv hkV/hML1mwGgF1GAPsqfQz/OOGuzoTBeTjErzmgZSlPi6F15lQy1+W5PlTnHJZAK 9feZAtN9fUZGRChY88SUW5Tk+U5HrnVDAc20RiGlLG3rFc1P/4hHQU1FbJHyn+u9 hbI+SI1v7sjpGQQdGYrGBn6vetDKgkOUTFIXR4MHztOSexHr+V2Prl3Ucfx+hqMB t3bG1oKcJlPKd/zOuj+1m+d/wyorKHM+NqBOcwYCIX/2CgSLta4KEYReFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCtrwDBIIh1XzBs5RWpAdfndheCIMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvSzJ2QU1FZ2lIVmZNR3psRmFrQjEtZDJGNElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwwfA MA0GCSqGSIb3DQEBCwUAA4IBAQC5yhLyH9QNql+/c1uxcNFFuwH1V+M1SGCPIjjY 8YQy/ePBb/p4hEsjapD2jlSzd5TgggymwKXuEbKywUbd+HofAygNCBpxQMslDJeI h1VaRTcluOMhTIW4BgvpDMOjNYDoacUjlhmVl/4hvxaV3SFmd5fN5nj2LvOhlu+T RUhWssUFoHWT1IBXmJSbCw9MLMHQpVOAogtBTHsR54Segu4mQs/yd6A8hDTelLCA rsmuntc4AXlThWuQnma3QWhXOXZbl6ji2dfrZiIO6vSm3FzHT16/c1pQtgGbTcA7 iHlzrrl9PeFe86xEUcGe6ijZgD2E2uoQiXOL880sEbNa7m+R -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:37 2026 by rpki-client