This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TSIZIUrDa55PDkj9sCsWBSA4ZjY.roa File: TSIZIUrDa55PDkj9sCsWBSA4ZjY.roa (raw, json) Hash identifier: lsJZaPSyTPtKZ5cyN2ecZHdpVGu5lZSgKhHh9NN8HmA= Subject key identifier: 4D:22:19:21:4A:C3:6B:9E:4F:0E:48:FD:B0:2B:16:05:20:38:66:36 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B3591D02436070504FF5980C48C5BE1 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TSIZIUrDa55PDkj9sCsWBSA4ZjY.roa Signing time: Thu 01 Jan 2026 20:17:46 +0000 ROA not before: Thu 01 Jan 2026 20:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214534 IP address blocks: 2a14:67c1:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:91:d0:24:36:07:05:04:ff:59:80:c4:8c:5b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d2219214ac36b9e4f0e48fdb02b160520386636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:09:4d:a5:a5:e3:53:ec:01:7c:12:62:5a:2c: f4:ae:8d:f6:81:68:29:8c:62:c7:fd:c9:d4:68:84: a2:56:92:a5:6f:bf:b8:f2:44:55:f1:44:9d:7d:87: 09:65:c4:4b:03:d2:b7:e2:00:af:e1:fb:a2:99:ea: ed:4d:03:99:5c:9e:0e:10:08:9c:d2:3a:df:f3:78: 50:b2:e1:01:4c:b9:a5:b9:19:3c:a0:42:7d:e5:77: 59:75:a4:a8:06:df:7b:ce:40:26:94:1e:b8:31:5d: 01:e5:5e:7b:46:a1:64:cc:c4:3e:f5:09:e6:15:81: 83:ca:dd:4d:81:90:f8:1e:f4:15:84:63:77:30:62: e1:c5:76:08:15:1c:6a:4d:36:1d:f1:78:c5:37:e4: df:91:66:9d:99:58:15:0a:4d:cd:bf:1a:73:2c:85: b9:e7:8a:dd:ec:ee:ca:6e:0b:25:a9:87:80:4b:89: f5:f8:b8:d2:69:45:1a:99:41:59:29:10:50:03:5b: 10:30:9e:de:2b:39:06:2f:9d:38:27:8e:92:cb:16: 35:c6:a7:8f:f0:e1:8e:cc:1c:3d:ad:fd:12:48:6f: 12:77:c4:7a:cf:3b:c0:4d:33:0e:b5:41:c8:55:3b: f3:48:6e:6a:34:5b:b9:83:05:7c:54:e4:8a:0e:48: f7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:22:19:21:4A:C3:6B:9E:4F:0E:48:FD:B0:2B:16:05:20:38:66:36 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TSIZIUrDa55PDkj9sCsWBSA4ZjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:200::/40 Signature Algorithm: sha256WithRSAEncryption b7:87:d7:d1:f6:59:72:52:ac:33:d3:36:fb:46:6b:ac:6d:39: f5:eb:45:78:b6:35:d0:70:c5:5a:90:17:1f:86:0a:f6:2b:aa: 73:3f:5d:1f:2f:82:f5:ae:5c:df:37:0e:6a:93:34:12:b3:2b: ff:50:e3:23:4f:29:cc:22:c7:55:44:dc:4f:33:62:8e:49:da: 98:50:56:a9:bc:7c:64:6a:5f:3f:74:e5:06:9f:eb:bc:13:70: f0:ef:ef:a0:c1:d1:6e:f2:ed:69:d0:43:5b:fb:ba:fd:95:ab: 91:6b:d4:0c:e3:c7:27:ec:fd:97:4a:80:f7:ad:51:43:2f:41: 82:e3:74:ca:a9:75:f5:c4:f2:c3:04:34:c3:28:3f:71:e9:7b: 2e:ff:35:20:14:07:eb:8a:25:72:09:05:5f:d6:41:83:5c:a5: 35:de:da:2d:20:ef:6e:bf:4d:13:35:17:93:2b:66:b4:2b:0d: 72:e8:43:5e:93:8a:a1:9d:b0:88:d7:f2:46:9d:ce:7a:6c:ee: 03:a0:55:dc:e5:f5:f6:5b:81:f7:b4:b9:77:89:53:48:ab:bb: 97:e0:aa:b9:78:8c:d4:16:6a:20:30:76:23:c6:e1:41:e4:44: 3e:f6:fe:2a:14:86:fa:ee:01:81:d5:26:d8:b0:08:d8:9a:a8: b2:81:52:61 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NZHQJDYHBQT/WYDEjFvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDIyMTkyMTRhYzM2YjllNGYwZTQ4ZmRiMDJiMTYwNTIwMzg2NjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAlNpaXjU+wBfBJiWiz0ro32gWgp jGLH/cnUaISiVpKlb7+48kRV8USdfYcJZcRLA9K34gCv4fuimertTQOZXJ4OEAic 0jrf83hQsuEBTLmluRk8oEJ95XdZdaSoBt97zkAmlB64MV0B5V57RqFkzMQ+9Qnm FYGDyt1NgZD4HvQVhGN3MGLhxXYIFRxqTTYd8XjFN+TfkWadmVgVCk3NvxpzLIW5 54rd7O7KbgslqYeAS4n1+LjSaUUamUFZKRBQA1sQMJ7eKzkGL504J46SyxY1xqeP 8OGOzBw9rf0SSG8Sd8R6zzvATTMOtUHIVTvzSG5qNFu5gwV8VOSKDkj3UQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFE0iGSFKw2ueTw5I/bArFgUgOGY2MB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvVFNJWklVckRhNTVQRGtqOXNDc1dCU0E0WmpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwQIw DQYJKoZIhvcNAQELBQADggEBALeH19H2WXJSrDPTNvtGa6xtOfXrRXi2NdBwxVqQ Fx+GCvYrqnM/XR8vgvWuXN83DmqTNBKzK/9Q4yNPKcwix1VE3E8zYo5J2phQVqm8 fGRqXz905Qaf67wTcPDv76DB0W7y7WnQQ1v7uv2Vq5Fr1Azjxyfs/ZdKgPetUUMv QYLjdMqpdfXE8sMENMMoP3Hpey7/NSAUB+uKJXIJBV/WQYNcpTXe2i0g726/TRM1 F5MrZrQrDXLoQ16TiqGdsIjX8kadznps7gOgVdzl9fZbgfe0uXeJU0iru5fgqrl4 jNQWaiAwdiPG4UHkRD72/ioUhvruAYHVJtiwCNiaqLKBUmE= -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:08 2026 by rpki-client