This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VYJQfahd4zlZvJRXCRZv_pMeM2g.roa File: VYJQfahd4zlZvJRXCRZv_pMeM2g.roa (raw, json) Hash identifier: DzolVRnMtbEq9QZJxqbYUwx5w7/jzrTkNe10t6YRtv4= Subject key identifier: 55:82:50:7D:A8:5D:E3:39:59:BC:94:57:09:16:6F:FE:93:1E:33:68 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B35822C003185A0707AB9C69BF0EAA2 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VYJQfahd4zlZvJRXCRZv_pMeM2g.roa Signing time: Thu 01 Jan 2026 20:17:42 +0000 ROA not before: Thu 01 Jan 2026 20:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205548 IP address blocks: 2a14:67c1:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:82:2c:00:31:85:a0:70:7a:b9:c6:9b:f0:ea:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5582507da85de33959bc945709166ffe931e3368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:08:9f:69:e9:58:fb:c6:29:04:11:a6:9c: 8c:ef:33:9f:0f:5c:6e:c7:94:11:eb:5b:8a:2c:31: c8:87:7f:c5:0d:f3:1e:57:a6:4c:fa:d9:80:06:d6: 83:35:0e:11:80:ed:18:8b:91:cb:05:08:dd:4f:9f: 72:8f:e6:4e:11:b7:ce:7a:b3:db:ca:0b:db:60:53: 27:9a:32:bf:50:d3:ff:08:7d:ab:0a:7f:ba:fe:9b: 2c:57:22:a9:0c:23:38:1e:70:31:c4:89:f5:3d:76: 2f:7e:6a:39:c6:86:0e:13:a4:35:3a:7c:d5:4d:95: 66:8e:30:29:b7:d0:8d:1f:47:8e:91:fb:6d:ea:1c: 69:9c:74:af:36:b0:1c:bb:27:90:52:d1:ab:e5:12: b7:f6:60:ae:4b:e1:96:54:56:fe:7c:4c:ae:67:69: 67:14:14:de:7c:f6:12:e0:57:f1:1f:49:0e:d6:d7: df:65:d4:b1:8c:a4:8c:27:cb:f3:76:52:c5:ab:fa: 42:55:a5:46:ee:0b:56:5c:e1:94:00:19:3e:8b:40: 80:7e:e6:a7:99:cf:df:43:45:13:22:73:7c:27:86: e9:85:f3:ab:e6:50:15:0c:bc:02:72:82:90:24:f6: 3f:10:76:66:65:d6:0b:7c:39:60:70:e6:d0:b3:60: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:82:50:7D:A8:5D:E3:39:59:BC:94:57:09:16:6F:FE:93:1E:33:68 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VYJQfahd4zlZvJRXCRZv_pMeM2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:c800::/40 Signature Algorithm: sha256WithRSAEncryption 6f:96:3a:09:cc:5f:4d:02:7c:9d:dc:86:14:c6:9a:0e:95:df: 1e:6b:a1:0b:a0:38:00:61:a2:8b:b3:52:54:2d:11:e3:9b:8c: 3c:cf:69:af:8c:60:42:d5:5b:48:14:06:32:75:33:05:4c:66: ba:36:6d:83:ad:27:b0:c2:57:9d:b3:88:89:1c:d7:30:33:eb: de:43:e2:fe:7a:88:8f:38:52:0f:c3:6b:51:4b:0d:3f:60:58: 66:7c:6a:1a:77:84:bb:1e:ef:13:65:f8:e3:5d:39:ca:21:59: 82:fd:58:a9:8e:bd:fb:c2:3b:9d:ba:42:53:f3:dd:e7:33:14: a0:70:6a:51:47:7d:80:83:c5:f0:1d:70:6f:52:2c:20:be:13: 0c:e8:e7:2e:9f:b8:47:a5:ee:73:f9:4d:d2:44:a3:3c:9b:64: 62:d4:32:fe:fd:d9:62:cf:15:cf:96:7a:e2:c2:69:d2:01:d0: 81:14:9b:fe:a0:a7:8a:01:96:2e:63:bc:1c:21:82:3c:bb:ad: 5d:dd:68:e7:e7:78:d2:08:15:31:ef:e0:65:0c:eb:ca:78:a4: 55:4b:de:c2:44:34:e1:55:5f:25:40:5e:d2:48:b2:e0:25:94: f6:5d:3d:f0:56:e6:c2:5b:c6:43:2d:a6:fb:9f:2d:a3:8d:65: 6a:26:2a:41 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NYIsADGFoHB6ucab8OqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTgyNTA3ZGE4NWRlMzM5NTliYzk0NTcwOTE2NmZmZTkzMWUzMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBIIn2npWPvGKQQRppyM7zOfD1xu x5QR61uKLDHIh3/FDfMeV6ZM+tmABtaDNQ4RgO0Yi5HLBQjdT59yj+ZOEbfOerPb ygvbYFMnmjK/UNP/CH2rCn+6/pssVyKpDCM4HnAxxIn1PXYvfmo5xoYOE6Q1OnzV TZVmjjApt9CNH0eOkftt6hxpnHSvNrAcuyeQUtGr5RK39mCuS+GWVFb+fEyuZ2ln FBTefPYS4FfxH0kO1tffZdSxjKSMJ8vzdlLFq/pCVaVG7gtWXOGUABk+i0CAfuan mc/fQ0UTInN8J4bphfOr5lAVDLwCcoKQJPY/EHZmZdYLfDlgcObQs2A3WQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFWCUH2oXeM5WbyUVwkWb/6THjNoMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvVllKUWZhaGQ0emxadkpSWENSWnZfcE1lTTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwcgw DQYJKoZIhvcNAQELBQADggEBAG+WOgnMX00CfJ3chhTGmg6V3x5roQugOABhoouz UlQtEeObjDzPaa+MYELVW0gUBjJ1MwVMZro2bYOtJ7DCV52ziIkc1zAz695D4v56 iI84Ug/Da1FLDT9gWGZ8ahp3hLse7xNl+ONdOcohWYL9WKmOvfvCO526QlPz3ecz FKBwalFHfYCDxfAdcG9SLCC+Ewzo5y6fuEel7nP5TdJEozybZGLUMv792WLPFc+W euLCadIB0IEUm/6gp4oBli5jvBwhgjy7rV3daOfneNIIFTHv4GUM68p4pFVL3sJE NOFVXyVAXtJIsuAllPZdPfBW5sJbxkMtpvufLaONZWomKkE= -----END CERTIFICATE-----Generated at Sun Jan 25 19:19:10 2026 by rpki-client