This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ccKttS7X_Y8n67cc9KdBFgQ1MBY.roa File: ccKttS7X_Y8n67cc9KdBFgQ1MBY.roa (raw, json) Hash identifier: EL6jmx6zj4w/2geQNrlct8+Jt2W99liKJJKesAiY/hQ= Subject key identifier: 71:C2:AD:B5:2E:D7:FD:8F:27:EB:B7:1C:F4:A7:41:16:04:35:30:16 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BD22772994CAE67C80A75BDAC9D793B69 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ccKttS7X_Y8n67cc9KdBFgQ1MBY.roa Signing time: Sun 18 Jan 2026 17:29:19 +0000 ROA not before: Sun 18 Jan 2026 17:29:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207299 IP address blocks: 2a14:67c1:a120::/44 maxlen: 48 2a14:67c1:a123::/48 maxlen: 48 2a14:67c1:a125::/48 maxlen: 48 2a14:67c1:a128::/48 maxlen: 48 2a14:67c1:a129::/48 maxlen: 48 2a14:67c1:c300::/40 maxlen: 48 2a14:67c3:130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:27:72:99:4c:ae:67:c8:0a:75:bd:ac:9d:79:3b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 18 17:29:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71c2adb52ed7fd8f27ebb71cf4a7411604353016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:03:85:4c:f5:f7:a9:4a:cc:d6:35:f1:6f: bc:2d:43:95:ba:da:c6:6f:96:1e:a6:8a:69:97:e3: 45:71:70:ef:a1:d0:fd:f4:28:35:a9:53:fc:dc:d9: 19:a5:62:8b:f2:d9:65:53:4a:26:7d:cd:b0:48:10: 51:03:38:12:14:a7:37:03:fe:72:4b:d6:f4:09:91: d8:55:99:8e:ba:59:0b:45:8c:1d:75:e3:ad:7a:14: 4e:81:86:ce:fe:b0:c5:4b:06:6c:a3:c7:88:95:ef: 66:99:b5:8e:d7:62:37:aa:f1:15:bc:17:16:da:9f: 1d:5e:a8:51:38:cd:1e:3e:02:25:cb:33:db:5b:80: a2:0f:e5:6d:13:31:df:2f:f4:c8:b9:fe:fd:1b:ad: 4b:e6:35:1d:70:67:a3:57:8e:91:51:53:23:02:b4: 44:70:13:cd:0f:3e:51:d5:d9:68:e3:3d:16:88:80: b9:be:e7:f7:88:03:e5:a8:b5:97:c3:c0:a6:2e:53: 83:18:f4:fa:c3:ff:b6:e5:41:a0:48:f0:99:4e:07: 28:1d:6b:a7:84:a5:fa:f6:b8:01:3c:a3:02:88:da: 40:80:dc:af:29:c4:e7:82:38:39:eb:05:91:a8:ef: f1:43:91:91:b1:de:08:dd:93:bd:cf:e0:66:28:be: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C2:AD:B5:2E:D7:FD:8F:27:EB:B7:1C:F4:A7:41:16:04:35:30:16 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ccKttS7X_Y8n67cc9KdBFgQ1MBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a120::/44 2a14:67c1:c300::/40 2a14:67c3:130::/44 Signature Algorithm: sha256WithRSAEncryption a6:b9:a7:1e:3d:cb:19:8f:25:65:f1:32:af:83:7d:46:6a:a4: 4f:fc:5b:ea:fb:00:0f:3b:9e:25:5c:ba:bb:db:ba:05:37:8a: 65:c8:e3:0c:f1:38:0c:3d:4c:87:0d:5e:f8:e4:49:9e:3f:42: cb:e1:26:ab:08:1f:7c:0a:95:f6:98:ac:83:63:52:96:7b:7a: 3b:94:33:fc:45:19:2e:6f:c9:9f:cd:47:86:02:22:08:f8:27: ae:1c:ae:cb:85:55:de:71:42:eb:ed:ff:a4:ed:aa:09:23:08: 6c:fc:f1:37:b0:01:d1:8e:56:db:ee:33:df:32:46:55:a7:51: 9d:4e:3d:14:8b:70:81:6a:08:5c:6f:02:b1:11:a6:7e:fa:5e: 31:ce:14:61:5c:2b:bc:d8:34:47:f7:84:7c:74:3e:06:ec:05: 31:93:66:ac:ff:1a:bc:6b:db:e6:26:fb:e5:45:7c:1e:85:1e: bd:02:0b:6f:ea:b3:30:15:04:64:53:b4:2f:93:eb:c4:7a:41: 96:8e:04:8b:f9:ad:0d:11:ad:c6:b5:9f:49:a9:b9:dc:bf:2e: ea:2e:b7:eb:6c:ad:89:d4:f3:a2:be:6d:e5:a4:19:4a:21:89: e5:98:0f:95:a6:75:75:d9:9b:43:57:f0:0e:48:44:97:58:c6: 87:b4:c1:0b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZvSJ3KZTK5nyAp1vaydeTtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTE4MTcyOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWMyYWRiNTJlZDdmZDhmMjdlYmI3MWNmNGE3NDExNjA0MzUzMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nwDhUz196lKzNY18W+8LUOVutrG b5Yepoppl+NFcXDvodD99Cg1qVP83NkZpWKL8tllU0omfc2wSBBRAzgSFKc3A/5y S9b0CZHYVZmOulkLRYwddeOtehROgYbO/rDFSwZso8eIle9mmbWO12I3qvEVvBcW 2p8dXqhROM0ePgIlyzPbW4CiD+VtEzHfL/TIuf79G61L5jUdcGejV46RUVMjArRE cBPNDz5R1dlo4z0WiIC5vuf3iAPlqLWXw8CmLlODGPT6w/+25UGgSPCZTgcoHWun hKX69rgBPKMCiNpAgNyvKcTngjg56wWRqO/xQ5GRsd4I3ZO9z+BmKL6WrQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHHCrbUu1/2PJ+u3HPSnQRYENTAWMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvY2NLdHRTN1hfWThuNjdjYzlLZEJGZ1ExTUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcEKhRnwaEg AwYAKhRnwcMDBwQqFGfDATAwDQYJKoZIhvcNAQELBQADggEBAKa5px49yxmPJWXx Mq+DfUZqpE/8W+r7AA87niVcurvbugU3imXI4wzxOAw9TIcNXvjkSZ4/QsvhJqsI H3wKlfaYrINjUpZ7ejuUM/xFGS5vyZ/NR4YCIgj4J64crsuFVd5xQuvt/6Ttqgkj CGz88TewAdGOVtvuM98yRlWnUZ1OPRSLcIFqCFxvArERpn76XjHOFGFcK7zYNEf3 hHx0PgbsBTGTZqz/Grxr2+Ym++VFfB6FHr0CC2/qszAVBGRTtC+T68R6QZaOBIv5 rQ0Rrca1n0mpudy/Luout+tsrYnU86K+beWkGUohieWYD5WmdXXZm0NX8A5IRJdY xoe0wQs= -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:32 2026 by rpki-client