This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VHz09o_AI7nhfdiChEC6t48Ga9w.roa File: VHz09o_AI7nhfdiChEC6t48Ga9w.roa (raw, json) Hash identifier: 1qCKOJ1+sCE4die4E+2elFtG72voMj6+CEdQ/IjvUfg= Subject key identifier: 54:7C:F4:F6:8F:C0:23:B9:E1:7D:D8:82:84:40:BA:B7:8F:06:6B:DC Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BA7766C3823CFF5E0C9A633B3537D84A4 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VHz09o_AI7nhfdiChEC6t48Ga9w.roa Signing time: Sat 10 Jan 2026 10:31:54 +0000 ROA not before: Sat 10 Jan 2026 10:31:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212895 IP address blocks: 2a14:67c3:850::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:76:6c:38:23:cf:f5:e0:c9:a6:33:b3:53:7d:84:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 10 10:31:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=547cf4f68fc023b9e17dd8828440bab78f066bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:ce:ae:c5:c9:d9:fc:b2:d9:f2:c6:3b:f6: 1e:18:2e:6b:18:18:e5:28:76:9c:58:ec:12:80:e3: 1f:14:8f:94:50:e6:38:3e:55:3b:28:96:f8:98:57: 9e:3d:bb:9d:ea:5f:9b:80:ed:a3:db:4a:b6:93:20: fa:02:18:76:12:ce:55:15:5e:3f:98:b4:98:42:04: d3:27:1e:6e:9c:1b:f3:4d:75:c7:49:cf:e9:8d:5e: a5:11:46:2a:d0:57:a3:d4:3d:95:97:02:3e:85:24: 12:9c:b9:17:b9:72:eb:ca:62:63:e8:c9:97:f1:98: 20:5e:c1:cf:f6:a1:e7:7d:9d:8b:3e:16:8e:5b:a4: 12:24:97:9f:d3:8c:e9:b6:a4:20:75:9d:06:cc:d4: 39:62:5a:b3:1e:c3:41:58:77:86:16:6c:26:fb:0b: 11:1a:99:7d:55:a7:af:c9:a0:ab:01:d2:31:1d:08: d4:9d:9e:43:5e:89:78:d8:71:9f:62:19:d3:5f:b4: 15:93:0d:e4:4d:f8:86:2e:7c:99:64:ec:0c:a0:0b: b1:8c:42:42:2b:0c:e6:73:65:1d:67:fc:58:11:91: 37:08:3b:77:59:27:99:fd:2a:a2:6b:54:0b:3f:05: 80:10:f7:62:09:48:eb:38:7f:58:9a:b3:48:4a:21: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7C:F4:F6:8F:C0:23:B9:E1:7D:D8:82:84:40:BA:B7:8F:06:6B:DC X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VHz09o_AI7nhfdiChEC6t48Ga9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:850::/44 Signature Algorithm: sha256WithRSAEncryption 71:58:7e:4c:37:2a:92:6d:49:e4:e0:86:ed:b4:8c:db:2c:99: 75:89:cc:18:ed:39:7c:2e:de:f7:b5:79:9a:47:76:b3:58:c3: d0:8a:b1:7e:85:6e:6a:f2:3f:2a:ae:89:6d:c7:95:9a:ff:1a: 90:da:eb:85:43:0c:46:bc:99:04:9c:2c:7f:5e:f6:24:94:20: c1:d6:f8:b1:92:c2:68:59:8a:aa:ae:cd:c3:77:d8:28:a6:4b: 9b:ef:40:19:13:ee:ae:46:94:bc:c2:97:f1:3f:e7:32:0b:54: e8:de:8b:f9:f9:8e:9c:d1:36:ca:f0:3d:39:15:e1:97:79:fd: 84:68:f5:fc:dc:3e:12:8a:28:c0:86:f8:6d:6a:96:4d:16:8a: c1:76:af:83:da:43:f8:f1:fc:c1:4a:6c:6d:97:62:fd:4f:0e: af:f2:ee:84:19:4b:ae:8f:b3:97:58:2f:b9:08:52:4b:c8:e3: 30:14:71:1b:43:cc:0f:92:9b:51:5f:59:e7:ec:a6:f6:9e:8a: b5:5e:fb:a8:ed:7d:26:89:aa:aa:2a:bb:ad:e3:2e:0c:e4:e6: c0:f6:4d:1d:8d:9b:9a:fb:1d:70:97:e4:01:0b:c7:b0:a6:cc: b9:dd:d7:09:18:bc:37:44:0e:9b:fd:e2:99:47:14:89:25:99: c5:7e:cd:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZundmw4I8/14MmmM7NTfYSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTEwMTAzMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDdjZjRmNjhmYzAyM2I5ZTE3ZGQ4ODI4NDQwYmFiNzhmMDY2YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4bOrsXJ2fyy2fLGO/YeGC5rGBjl KHacWOwSgOMfFI+UUOY4PlU7KJb4mFeePbud6l+bgO2j20q2kyD6Ahh2Es5VFV4/ mLSYQgTTJx5unBvzTXXHSc/pjV6lEUYq0Fej1D2VlwI+hSQSnLkXuXLrymJj6MmX 8ZggXsHP9qHnfZ2LPhaOW6QSJJef04zptqQgdZ0GzNQ5YlqzHsNBWHeGFmwm+wsR Gpl9VaevyaCrAdIxHQjUnZ5DXol42HGfYhnTX7QVkw3kTfiGLnyZZOwMoAuxjEJC Kwzmc2UdZ/xYEZE3CDt3WSeZ/Sqia1QLPwWAEPdiCUjrOH9YmrNISiHZ/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFR89PaPwCO54X3YgoRAurePBmvcMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvVkh6MDlvX0FJN25oZmRpQ2hFQzZ0NDhHYTl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwwhQ MA0GCSqGSIb3DQEBCwUAA4IBAQBxWH5MNyqSbUnk4IbttIzbLJl1icwY7Tl8Lt73 tXmaR3azWMPQirF+hW5q8j8qroltx5Wa/xqQ2uuFQwxGvJkEnCx/XvYklCDB1vix ksJoWYqqrs3Dd9gopkub70AZE+6uRpS8wpfxP+cyC1To3ov5+Y6c0TbK8D05FeGX ef2EaPX83D4SiijAhvhtapZNForBdq+D2kP48fzBSmxtl2L9Tw6v8u6EGUuuj7OX WC+5CFJLyOMwFHEbQ8wPkptRX1nn7Kb2noq1Xvuo7X0miaqqKrut4y4M5ObA9k0d jZua+x1wl+QBC8ewpsy53dcJGLw3RA6b/eKZRxSJJZnFfs2u -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:36 2026 by rpki-client