This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/bxNNf7zVVw2m9Zqxh7gb8MDwLYA.roa File: bxNNf7zVVw2m9Zqxh7gb8MDwLYA.roa (raw, json) Hash identifier: AS9nKUVYoOJik8khWU2XvPVfrBdHviAMDZEZlKXEo1k= Subject key identifier: 6F:13:4D:7F:BC:D5:57:0D:A6:F5:9A:B1:87:B8:1B:F0:C0:F0:2D:80 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BF41E624D141F850573B34069AFDBD647 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/bxNNf7zVVw2m9Zqxh7gb8MDwLYA.roa Signing time: Sun 25 Jan 2026 07:46:30 +0000 ROA not before: Sun 25 Jan 2026 07:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202464 IP address blocks: 2a14:67c3:6880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:1e:62:4d:14:1f:85:05:73:b3:40:69:af:db:d6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 25 07:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f134d7fbcd5570da6f59ab187b81bf0c0f02d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:51:ac:a2:d1:48:ad:b7:cc:f6:b6:d6:f7: 9b:cb:8c:5e:25:0f:0b:91:62:95:11:05:5b:00:d2: 45:98:0d:f1:80:ba:e0:f8:a5:69:6c:2f:ac:b2:af: 4d:a3:fc:a7:1b:15:c5:99:d7:c5:00:0a:dc:7b:6a: d3:82:26:c0:2f:20:ea:fa:6e:a7:37:fa:0c:97:25: 4d:ba:81:6c:fa:8c:c1:91:c8:77:79:f9:cf:02:43: 35:21:ac:2b:ef:d2:9b:dd:d6:80:a3:46:8c:38:77: 34:b6:50:a3:03:4c:77:94:a1:42:2a:9b:6c:b5:10: 0f:d4:f9:a3:8c:67:d9:23:76:04:3d:75:2d:4b:92: 12:a0:6a:fc:76:5f:a7:02:97:84:29:03:76:30:5a: 9f:4b:ec:fd:73:e8:04:3e:b1:27:5c:d5:5b:fc:c1: 67:dd:a0:c9:3b:2b:03:a0:9f:99:8f:27:ae:a3:59: bb:0f:5e:7d:d8:38:60:e3:d5:3e:bb:43:90:ac:8f: 4b:1f:32:b1:0b:0f:e8:1f:ba:b8:65:04:36:dc:13: 27:8e:e4:e4:11:56:23:30:d8:94:ac:b5:c1:b8:fc: 2c:5b:70:d9:d3:59:c3:61:9e:e0:34:aa:b3:c4:b1: 8a:b6:ca:2e:b2:bf:55:e6:6a:a8:a9:17:61:0d:e3: 5c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:13:4D:7F:BC:D5:57:0D:A6:F5:9A:B1:87:B8:1B:F0:C0:F0:2D:80 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/bxNNf7zVVw2m9Zqxh7gb8MDwLYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:6880::/48 Signature Algorithm: sha256WithRSAEncryption 3a:53:7d:8b:57:b8:7b:82:21:8b:2d:a8:47:53:ab:d4:db:fb: 38:b9:b9:27:22:2d:2b:49:6c:99:92:ae:5e:0c:78:a7:66:24: f5:ea:44:98:cc:34:7a:ee:75:55:b0:79:89:8f:af:24:2c:1a: ed:f3:0b:45:1e:e6:c0:2a:f5:d7:1d:16:33:e9:00:ac:da:47: cd:03:5c:b4:29:ca:c6:76:1f:a9:51:20:2b:9f:30:d1:01:0c: 7e:dd:ea:d3:29:a8:f0:0f:8e:be:06:ee:0c:14:d0:ae:95:b3: ea:f3:bc:8b:d3:35:a1:dd:90:41:c4:6e:2e:fb:6b:74:c2:3c: cd:f5:71:f1:fc:69:35:69:7d:b9:fb:75:1d:be:42:d8:7f:52: d5:5f:92:20:6b:22:73:e4:bc:83:c5:2b:20:3a:e5:51:af:1c: 26:f8:18:c8:32:70:95:f6:50:30:5e:ad:86:5a:a2:dc:42:bb: 86:5b:ff:1f:b5:e6:e8:a2:73:e9:c4:fe:e9:5a:a3:39:2d:26: d2:87:51:8b:b4:39:d1:dc:f8:5d:f0:6d:b2:85:4a:cb:a9:6d: 4a:ff:91:18:31:b0:28:93:34:ee:93:6b:b7:db:cc:8b:d7:2c: c3:c6:a0:87:d2:35:18:da:b5:8d:5c:4a:7c:cb:49:30:a9:04: 21:0b:7b:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZv0HmJNFB+FBXOzQGmv29ZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTI1MDc0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjEzNGQ3ZmJjZDU1NzBkYTZmNTlhYjE4N2I4MWJmMGMwZjAyZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/JRrKLRSK23zPa21veby4xeJQ8L kWKVEQVbANJFmA3xgLrg+KVpbC+ssq9No/ynGxXFmdfFAArce2rTgibALyDq+m6n N/oMlyVNuoFs+ozBkch3efnPAkM1Iawr79Kb3daAo0aMOHc0tlCjA0x3lKFCKpts tRAP1PmjjGfZI3YEPXUtS5ISoGr8dl+nApeEKQN2MFqfS+z9c+gEPrEnXNVb/MFn 3aDJOysDoJ+Zjyeuo1m7D1592Dhg49U+u0OQrI9LHzKxCw/oH7q4ZQQ23BMnjuTk EVYjMNiUrLXBuPwsW3DZ01nDYZ7gNKqzxLGKtsousr9V5mqoqRdhDeNcoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG8TTX+81VcNpvWasYe4G/DA8C2AMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvYnhOTmY3elZWdzJtOVpxeGg3Z2I4TUR3TFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRnw2iA MA0GCSqGSIb3DQEBCwUAA4IBAQA6U32LV7h7giGLLahHU6vU2/s4ubknIi0rSWyZ kq5eDHinZiT16kSYzDR67nVVsHmJj68kLBrt8wtFHubAKvXXHRYz6QCs2kfNA1y0 KcrGdh+pUSArnzDRAQx+3erTKajwD46+Bu4MFNCulbPq87yL0zWh3ZBBxG4u+2t0 wjzN9XHx/Gk1aX25+3UdvkLYf1LVX5IgayJz5LyDxSsgOuVRrxwm+BjIMnCV9lAw Xq2GWqLcQruGW/8fteboonPpxP7pWqM5LSbSh1GLtDnR3Phd8G2yhUrLqW1K/5EY MbAokzTuk2u328yL1yzDxqCH0jUY2rWNXEp8y0kwqQQhC3vT -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:01 2026 by rpki-client