This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/_i1cVrKcHQ4jEemdjbIKttGBKPE.roa File: _i1cVrKcHQ4jEemdjbIKttGBKPE.roa (raw, json) Hash identifier: lswR3CDQsmTUKdLyCNLu4ez/axvCOsMKRQSzGjfWvTE= Subject key identifier: FE:2D:5C:56:B2:9C:1D:0E:23:11:E9:9D:8D:B2:0A:B6:D1:81:28:F1 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7F6E5EABCEA1D4461A482CDBD5EE8BEC Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/_i1cVrKcHQ4jEemdjbIKttGBKPE.roa Signing time: Fri 02 Jan 2026 15:58:17 +0000 ROA not before: Fri 02 Jan 2026 15:58:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214955 IP address blocks: 2a14:67c3:a270::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:6e:5e:ab:ce:a1:d4:46:1a:48:2c:db:d5:ee:8b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 2 15:58:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe2d5c56b29c1d0e2311e99d8db20ab6d18128f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:f4:c1:78:de:fe:e7:6d:a6:6b:34:f5:e2: 8a:3e:fe:1d:41:29:24:f8:ad:d7:20:77:f3:72:91: 5a:4b:23:33:3f:99:b0:7c:85:a7:17:57:1f:53:b5: ba:d7:ff:05:ce:7d:76:55:a2:08:2d:15:3a:bc:65: aa:29:fc:a7:03:31:f0:51:5b:b6:ce:ed:1e:29:3d: fa:00:05:a1:17:03:64:ce:95:fb:b1:f6:e1:4e:47: d6:17:61:7f:7c:33:0f:b1:11:0d:60:36:c4:ec:a8: fb:5d:75:0f:84:7a:68:17:86:84:8f:84:b2:15:01: e6:35:01:80:9c:bd:a1:1b:ca:ed:9c:e6:7f:cf:98: e9:06:b6:ac:2f:65:44:23:51:83:dd:40:d4:3e:90: b5:ec:2b:5b:54:d2:e5:c4:8e:1e:1e:7d:9e:d3:47: 44:88:4c:9e:88:e4:3f:f6:d9:72:08:ee:a4:56:75: 00:b7:b9:12:d3:d8:48:be:e8:53:8f:a6:0a:06:b0: 8d:4e:4c:c4:7a:2f:58:ba:e8:43:af:e6:f7:e2:70: df:7b:49:bf:d6:42:a8:80:17:9c:85:0f:4c:4e:16: 5e:96:2a:d3:88:95:7b:f4:64:cf:0e:9d:1a:da:01: b7:6a:31:09:68:84:1a:95:40:21:31:c8:88:48:ea: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2D:5C:56:B2:9C:1D:0E:23:11:E9:9D:8D:B2:0A:B6:D1:81:28:F1 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/_i1cVrKcHQ4jEemdjbIKttGBKPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:a270::/44 Signature Algorithm: sha256WithRSAEncryption 68:ee:e6:54:e5:b1:10:ba:64:16:9f:5a:f8:64:30:17:1e:6c: d3:0d:9f:3c:cf:f0:e5:3b:7d:0d:ed:9f:99:ec:6c:a0:4c:d3: 07:cc:c5:a0:f4:cc:2b:1d:7c:22:c1:3b:04:87:89:4d:5c:4b: 9d:4d:1f:db:65:b3:f9:db:9b:71:81:f2:91:b0:f6:de:a6:09: cb:a9:20:49:be:ad:42:86:83:56:e0:54:0c:41:4c:0e:29:b6: bf:43:d4:94:dd:9e:cd:ee:4b:f0:eb:c4:0d:39:f6:2a:ca:22: af:cd:f7:d8:16:92:46:7e:0e:32:6c:9f:11:dd:a0:97:07:ea: f1:ec:e3:3a:6e:04:a9:68:4b:9c:c9:7d:fc:fc:a1:f7:dc:39: ed:ef:e3:e7:15:cc:65:80:2f:ad:02:dd:6e:00:90:7a:fc:12: 53:89:5c:01:bf:06:c7:4a:a4:ef:33:01:a8:f0:64:2d:ab:17: de:1b:35:ac:e9:8b:83:7a:72:89:13:f1:40:94:65:5f:0b:41: e1:0e:54:a2:a4:9b:6a:eb:2b:3f:c6:14:71:a8:d6:6e:b4:42: 30:d5:24:73:b0:53:1a:b3:60:ea:6d:de:4f:50:c2:b8:0b:d0: ad:ca:37:2c:5b:79:8b:2f:60:c3:b7:a5:d8:a3:e9:8c:f7:c9: 60:20:fa:95 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/bl6rzqHURhpILNvV7ovsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAyMTU1ODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTJkNWM1NmIyOWMxZDBlMjMxMWU5OWQ4ZGIyMGFiNmQxODEyOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI/0wXje/udtpms09eKKPv4dQSkk +K3XIHfzcpFaSyMzP5mwfIWnF1cfU7W61/8Fzn12VaIILRU6vGWqKfynAzHwUVu2 zu0eKT36AAWhFwNkzpX7sfbhTkfWF2F/fDMPsRENYDbE7Kj7XXUPhHpoF4aEj4Sy FQHmNQGAnL2hG8rtnOZ/z5jpBrasL2VEI1GD3UDUPpC17CtbVNLlxI4eHn2e00dE iEyeiOQ/9tlyCO6kVnUAt7kS09hIvuhTj6YKBrCNTkzEei9YuuhDr+b34nDfe0m/ 1kKogBechQ9MThZelirTiJV79GTPDp0a2gG3ajEJaIQalUAhMciISOp3CQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP4tXFaynB0OIxHpnY2yCrbRgSjxMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvX2kxY1ZyS2NIUTRqRWVtZGpiSUt0dEdCS1BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnw6Jw MA0GCSqGSIb3DQEBCwUAA4IBAQBo7uZU5bEQumQWn1r4ZDAXHmzTDZ88z/DlO30N 7Z+Z7GygTNMHzMWg9MwrHXwiwTsEh4lNXEudTR/bZbP525txgfKRsPbepgnLqSBJ vq1ChoNW4FQMQUwOKba/Q9SU3Z7N7kvw68QNOfYqyiKvzffYFpJGfg4ybJ8R3aCX B+rx7OM6bgSpaEucyX38/KH33Dnt7+PnFcxlgC+tAt1uAJB6/BJTiVwBvwbHSqTv MwGo8GQtqxfeGzWs6YuDenKJE/FAlGVfC0HhDlSipJtq6ys/xhRxqNZutEIw1SRz sFMas2Dqbd5PUMK4C9CtyjcsW3mLL2DDt6XYo+mM98lgIPqV -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:16 2026 by rpki-client