This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/bjHbL1m_UctitEY7Gl3gsWnKXIY.roa File: bjHbL1m_UctitEY7Gl3gsWnKXIY.roa (raw, json) Hash identifier: 8T42oZevP8roGuvuOxbed+eh/pipM8zFghw4af4Vmqw= Subject key identifier: 6E:31:DB:2F:59:BF:51:CB:62:B4:46:3B:1A:5D:E0:B1:69:CA:5C:86 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B358068790091E76FD18A6E8CDF307E Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/bjHbL1m_UctitEY7Gl3gsWnKXIY.roa Signing time: Thu 01 Jan 2026 20:17:42 +0000 ROA not before: Thu 01 Jan 2026 20:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204535 IP address blocks: 2a14:67c2:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:80:68:79:00:91:e7:6f:d1:8a:6e:8c:df:30:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e31db2f59bf51cb62b4463b1a5de0b169ca5c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:81:4a:72:48:50:98:e3:9b:6e:35:73:30: 3a:0a:94:3a:6d:a9:ca:4a:c8:02:43:89:f2:bc:f9: 84:08:f7:f2:e3:d3:be:15:9d:f9:63:b2:66:09:63: 48:68:7f:ae:db:ed:27:9d:36:8f:bc:f1:ab:f2:af: df:e4:dd:19:46:64:14:03:19:4d:05:04:11:c8:2b: ab:ed:7c:2e:ce:ce:b2:dd:a2:8b:62:06:0b:f1:1a: 0d:6a:91:cc:5b:11:78:35:b0:3f:4e:ba:66:e2:06: 10:00:ed:fb:5e:6f:ec:49:26:88:f4:c9:06:31:f8: 01:9f:0e:db:fd:36:35:6f:a5:14:53:69:f7:29:14: 75:76:5c:5f:d5:a4:dc:4d:df:a3:5a:e0:e5:27:bf: 5e:54:0e:84:8c:fa:64:87:3a:df:ce:0a:49:41:2e: 5f:bd:55:f1:1b:4f:10:03:e5:f8:14:0e:77:d1:15: 9f:c4:01:ea:9d:80:f1:f9:a8:ba:e9:10:bf:21:b9: f4:f0:2f:03:76:3f:99:6e:ab:0b:55:43:c1:a3:8f: 28:84:99:9f:d7:1c:03:3f:3c:ed:cc:c0:8c:a5:b4: d6:d4:35:2f:a5:5b:91:db:7f:52:4f:87:75:f2:55: 72:bd:82:12:b0:79:76:02:ff:2d:b7:5a:6a:17:e1: d4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:DB:2F:59:BF:51:CB:62:B4:46:3B:1A:5D:E0:B1:69:CA:5C:86 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/bjHbL1m_UctitEY7Gl3gsWnKXIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:200::/40 Signature Algorithm: sha256WithRSAEncryption a3:46:83:2c:8d:f8:57:6e:5f:b9:25:0d:5d:04:0a:45:d5:33: 22:93:9b:52:27:8e:58:70:9e:01:e3:74:a3:6d:a8:09:b6:ac: e7:d0:5d:a5:c0:95:c1:d3:7c:63:e9:42:a3:08:a1:65:38:7d: fa:64:ed:c0:ec:63:c6:91:31:11:bd:2f:6a:b5:af:c7:64:94: 7d:57:2d:3e:33:d6:d4:80:80:b2:de:56:01:6c:d4:80:06:ff: f7:85:41:9c:f8:e4:ca:a4:9f:19:0d:10:fa:e8:9d:ff:68:9d: 87:6c:06:d0:f8:9a:d9:b3:e8:9e:5f:c3:fb:cf:22:a1:21:6c: 68:fc:f1:19:86:8b:7e:3e:d3:f8:dd:e9:a3:80:e9:54:ab:42: 85:0e:0e:56:c1:98:67:09:8a:ac:d9:85:8e:f3:14:ce:49:3e: 6d:e0:c1:6e:20:85:d9:d5:f8:6a:0e:d8:59:7f:86:16:93:29: 5d:2c:ad:3e:51:80:4d:59:e5:a6:f8:f0:7a:d2:ed:28:e2:8b: a4:e0:a6:95:9b:7d:37:fa:3a:04:7b:19:8e:e3:db:c9:e6:84: 84:04:8b:a2:41:36:04:0f:da:9b:d0:0b:8f:98:82:e8:fd:cf: 69:1e:75:bb:6e:07:59:e4:bd:f3:f4:a0:19:d8:4f:92:8c:a9: 2a:62:62:1d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NYBoeQCR52/Rim6M3zB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTMxZGIyZjU5YmY1MWNiNjJiNDQ2M2IxYTVkZTBiMTY5Y2E1Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KmBSnJIUJjjm241czA6CpQ6banK SsgCQ4nyvPmECPfy49O+FZ35Y7JmCWNIaH+u2+0nnTaPvPGr8q/f5N0ZRmQUAxlN BQQRyCur7Xwuzs6y3aKLYgYL8RoNapHMWxF4NbA/Trpm4gYQAO37Xm/sSSaI9MkG MfgBnw7b/TY1b6UUU2n3KRR1dlxf1aTcTd+jWuDlJ79eVA6EjPpkhzrfzgpJQS5f vVXxG08QA+X4FA530RWfxAHqnYDx+ai66RC/Ibn08C8Ddj+ZbqsLVUPBo48ohJmf 1xwDPzztzMCMpbTW1DUvpVuR239ST4d18lVyvYISsHl2Av8tt1pqF+HU8QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFG4x2y9Zv1HLYrRGOxpd4LFpylyGMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvYmpIYkwxbV9VY3RpdEVZN0dsM2dzV25LWElZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwgIw DQYJKoZIhvcNAQELBQADggEBAKNGgyyN+FduX7klDV0ECkXVMyKTm1InjlhwngHj dKNtqAm2rOfQXaXAlcHTfGPpQqMIoWU4ffpk7cDsY8aRMRG9L2q1r8dklH1XLT4z 1tSAgLLeVgFs1IAG//eFQZz45MqknxkNEPronf9onYdsBtD4mtmz6J5fw/vPIqEh bGj88RmGi34+0/jd6aOA6VSrQoUODlbBmGcJiqzZhY7zFM5JPm3gwW4ghdnV+GoO 2Fl/hhaTKV0srT5RgE1Z5ab48HrS7Sjii6TgppWbfTf6OgR7GY7j28nmhIQEi6JB NgQP2pvQC4+Yguj9z2kedbtuB1nkvfP0oBnYT5KMqSpiYh0= -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:21 2026 by rpki-client