This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aHZ7AY6ZRCcw-Pz3JF-vxZhZ4qU.roa File: aHZ7AY6ZRCcw-Pz3JF-vxZhZ4qU.roa (raw, json) Hash identifier: vQTIiXhvVU2qbUZm5+SzMbEItnkzk1aEecGIkhzkxDM= Subject key identifier: 68:76:7B:01:8E:99:44:27:30:F8:FC:F7:24:5F:AF:C5:98:59:E2:A5 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B358645789A7243BEC422E28B28D821 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aHZ7AY6ZRCcw-Pz3JF-vxZhZ4qU.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210176 IP address blocks: 2a14:67c1:a062::/48 maxlen: 48 2a14:67c1:a100::/44 maxlen: 48 2a14:67c1:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:86:45:78:9a:72:43:be:c4:22:e2:8b:28:d8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68767b018e99442730f8fcf7245fafc59859e2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:47:de:97:e1:8a:24:9a:2c:f6:dd:77:c5:97: 7e:1a:96:f0:db:6e:8a:6c:a7:60:25:c8:31:0e:c4: f0:31:e3:2e:ce:64:b2:b8:8a:3f:77:33:48:a3:43: 51:f9:a0:f7:27:5e:83:51:7e:fd:1c:68:42:bb:de: 10:c6:fe:5f:b9:f6:91:a3:95:95:00:25:1d:f9:15: 99:f0:03:d7:b4:40:c8:ba:a9:4c:0b:17:b9:2b:86: a4:51:9b:b7:e9:ac:1e:7d:a1:da:3b:fa:e6:b0:ad: 60:98:27:5f:0b:32:32:0b:42:2f:7a:43:30:2f:f4: 9c:6a:4e:38:9a:69:c0:09:03:3d:c6:5c:27:fd:30: e8:79:4b:31:71:f5:84:6c:67:fc:c9:43:85:09:1a: 70:77:73:c4:4d:8b:05:6c:eb:c6:0e:58:dc:8e:1b: b6:64:dd:7f:ee:9b:56:05:36:36:4a:ac:d2:e4:98: 7c:3a:d7:73:fe:b3:04:52:1f:72:8e:ca:75:c0:f9: 70:d5:a9:d8:d1:a7:a7:89:f6:b1:b1:65:d7:8e:b4: f9:00:38:88:df:da:8d:5f:66:15:d1:b7:ef:04:7b: e7:22:5f:d4:97:6f:25:59:ac:7d:53:58:6f:51:a2: e7:df:7a:29:16:5c:ed:57:f2:ac:a7:91:09:08:72: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:76:7B:01:8E:99:44:27:30:F8:FC:F7:24:5F:AF:C5:98:59:E2:A5 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aHZ7AY6ZRCcw-Pz3JF-vxZhZ4qU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a062::/48 2a14:67c1:a100::/44 2a14:67c1:b000::/48 Signature Algorithm: sha256WithRSAEncryption 6c:0a:19:29:10:8f:43:09:52:b0:71:d8:39:da:94:99:03:01: 9f:37:02:0a:ba:c9:fc:8c:c3:87:b1:3b:8a:23:e4:b3:5a:b8: fd:64:10:60:75:0f:0d:5c:c3:49:b6:d2:1b:1e:a2:54:b1:77: 10:73:5c:a0:02:3c:25:83:5e:03:b2:75:f4:22:06:ae:35:3c: c0:4d:9d:ba:f8:d2:e4:66:28:0f:ba:a5:5e:42:d3:c6:a2:3b: 18:17:c7:16:10:12:e7:63:9c:65:f1:5d:66:e7:ff:56:e5:f8: bc:38:60:c7:b9:b8:71:f4:7b:08:9f:4e:93:c7:0b:36:93:11: f9:4e:2d:19:3e:af:46:25:3c:44:ac:75:24:93:a7:09:d0:05: 71:01:1f:27:95:0a:2f:66:26:be:bf:e9:95:3b:e5:ca:83:7f: e8:2b:2a:27:75:42:34:27:12:bf:df:db:86:0f:7a:e8:f8:d7: a0:ec:b9:a3:4b:5c:27:f7:a1:69:7c:d0:40:94:c2:c9:9a:18: c6:98:ba:e8:30:50:58:7c:b1:5b:c2:df:2e:78:79:6b:dd:29: 19:f2:03:38:62:a3:8f:2e:86:3e:1a:dd:64:de:2c:7b:48:9e: 5c:47:87:9e:78:c8:e5:fe:b4:16:35:4a:eb:9a:66:f8:7c:53: 95:54:b9:9b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NYZFeJpyQ77EIuKLKNghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODc2N2IwMThlOTk0NDI3MzBmOGZjZjcyNDVmYWZjNTk4NTllMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ufel+GKJJos9t13xZd+Gpbw226K bKdgJcgxDsTwMeMuzmSyuIo/dzNIo0NR+aD3J16DUX79HGhCu94Qxv5fufaRo5WV ACUd+RWZ8APXtEDIuqlMCxe5K4akUZu36awefaHaO/rmsK1gmCdfCzIyC0IvekMw L/Scak44mmnACQM9xlwn/TDoeUsxcfWEbGf8yUOFCRpwd3PETYsFbOvGDljcjhu2 ZN1/7ptWBTY2SqzS5Jh8Otdz/rMEUh9yjsp1wPlw1anY0aenifaxsWXXjrT5ADiI 39qNX2YV0bfvBHvnIl/Ul28lWax9U1hvUaLn33opFlztV/Ksp5EJCHKcrQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGh2ewGOmUQnMPj89yRfr8WYWeKlMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvYUhaN0FZNlpSQ2N3LVB6M0pGLXZ4WmhaNHFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKhRnwaBi AwcEKhRnwaEAAwcAKhRnwbAAMA0GCSqGSIb3DQEBCwUAA4IBAQBsChkpEI9DCVKw cdg52pSZAwGfNwIKusn8jMOHsTuKI+SzWrj9ZBBgdQ8NXMNJttIbHqJUsXcQc1yg Ajwlg14DsnX0IgauNTzATZ26+NLkZigPuqVeQtPGojsYF8cWEBLnY5xl8V1m5/9W 5fi8OGDHubhx9HsIn06Txws2kxH5Ti0ZPq9GJTxErHUkk6cJ0AVxAR8nlQovZia+ v+mVO+XKg3/oKyondUI0JxK/39uGD3ro+Neg7LmjS1wn96FpfNBAlMLJmhjGmLro MFBYfLFbwt8ueHlr3SkZ8gM4YqOPLoY+Gt1k3ix7SJ5cR4eeeMjl/rQWNUrrmmb4 fFOVVLmb -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:37 2026 by rpki-client