This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/e0qxVyJa7D0IEnQTc97eZLC1S8U.roa File: e0qxVyJa7D0IEnQTc97eZLC1S8U.roa (raw, json) Hash identifier: c6BB3LPwB822OKaad0iP6uddFkvdgKDjd0oyWOhKWPA= Subject key identifier: 7B:4A:B1:57:22:5A:EC:3D:08:12:74:13:73:DE:DE:64:B0:B5:4B:C5 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B358874F178478D086D0F9E10BB01C7 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/e0qxVyJa7D0IEnQTc97eZLC1S8U.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211038 IP address blocks: 2a14:67c1:b300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:88:74:f1:78:47:8d:08:6d:0f:9e:10:bb:01:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b4ab157225aec3d0812741373dede64b0b54bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:6d:70:67:2a:60:f9:ae:8e:52:7d:8d:6f: 3b:a4:e3:a6:e6:94:82:15:dc:33:fd:bb:4d:22:ee: fe:a0:89:ff:63:ec:3b:18:4b:ce:8a:85:e7:e9:3e: 55:1a:b2:55:cf:e5:89:d9:62:7a:41:f4:62:64:70: 77:d5:d5:4b:25:e6:f1:9d:01:1e:53:a7:fe:d6:f8: f1:9b:d3:be:dc:7c:0e:64:41:6d:cb:b9:4e:81:33: 26:51:00:5d:46:d6:ae:67:d4:1f:19:5d:b0:51:f2: db:91:21:e2:de:53:14:09:14:52:61:20:34:d5:18: 0a:df:e1:d2:31:5c:27:b9:b9:dc:3f:ec:a9:47:9f: 69:32:0f:48:17:e1:8e:af:2e:3e:29:d0:e0:1c:c6: 1d:df:16:b5:82:81:c7:28:91:7d:cd:41:f8:00:48: 2c:ae:77:8a:5d:37:77:36:7a:3d:02:c9:dd:f7:16: 1b:59:e3:ea:02:03:ce:89:54:fc:2e:7e:2e:92:54: d9:a5:f7:84:0e:c9:db:c8:b3:45:71:1e:c3:19:cc: cc:e1:95:a5:0b:f6:4c:33:c7:12:6b:d1:f9:1e:fe: c7:3c:83:8b:2c:97:d9:0d:89:80:db:0d:7a:6e:a3: d9:63:14:c4:74:12:fd:42:7e:90:c2:75:b6:79:2d: a3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4A:B1:57:22:5A:EC:3D:08:12:74:13:73:DE:DE:64:B0:B5:4B:C5 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/e0qxVyJa7D0IEnQTc97eZLC1S8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:b300::/40 Signature Algorithm: sha256WithRSAEncryption c5:53:c4:93:92:5b:cb:ce:b3:0e:3c:28:5d:95:3f:51:a6:e2: 90:fb:f3:d9:19:52:4e:cf:d3:0c:6d:9b:5c:35:c6:e5:bf:35: 78:15:13:f0:db:fd:25:d2:2f:57:6f:63:ad:70:6d:fd:95:1e: 23:18:80:6e:e6:26:c4:17:30:43:9a:c9:b5:a9:7e:e1:4b:47: 9e:52:ba:d8:7e:6c:60:9b:21:14:f7:44:62:ab:94:5b:f2:fc: 01:52:77:23:1d:8a:3d:78:dc:8d:eb:c5:6c:a2:34:58:6f:54: a5:23:83:34:fb:10:94:eb:8e:b1:61:1d:cc:7e:17:0e:0c:83: 3c:7a:40:be:9e:b5:61:40:60:7f:2b:80:d3:29:0b:ef:3e:6d: a1:91:ed:d3:54:08:65:84:c3:9b:fb:ca:0b:c0:0a:fb:a9:65: 97:d0:b0:9b:31:9a:af:b7:3f:fe:39:3b:1a:9b:57:7d:c2:df: 04:b0:22:52:0f:a2:8c:bf:18:d9:b0:5b:71:7d:31:bd:f7:56: 1e:22:86:19:7c:c6:5e:fd:71:ca:8e:d3:a4:87:dd:39:ca:3d: 0a:79:db:10:2d:e3:c1:03:2f:87:63:e1:c2:dc:a0:4f:7b:ad: 05:0b:f0:99:8d:e1:b7:a1:cf:55:48:71:70:16:bd:e5:89:37: bb:5e:24:f9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NYh08XhHjQhtD54QuwHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjRhYjE1NzIyNWFlYzNkMDgxMjc0MTM3M2RlZGU2NGIwYjU0YmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXZtcGcqYPmujlJ9jW87pOOm5pSC Fdwz/btNIu7+oIn/Y+w7GEvOioXn6T5VGrJVz+WJ2WJ6QfRiZHB31dVLJebxnQEe U6f+1vjxm9O+3HwOZEFty7lOgTMmUQBdRtauZ9QfGV2wUfLbkSHi3lMUCRRSYSA0 1RgK3+HSMVwnubncP+ypR59pMg9IF+GOry4+KdDgHMYd3xa1goHHKJF9zUH4AEgs rneKXTd3Nno9Asnd9xYbWePqAgPOiVT8Ln4uklTZpfeEDsnbyLNFcR7DGczM4ZWl C/ZMM8cSa9H5Hv7HPIOLLJfZDYmA2w16bqPZYxTEdBL9Qn6QwnW2eS2joQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHtKsVciWuw9CBJ0E3Pe3mSwtUvFMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvZTBxeFZ5SmE3RDBJRW5RVGM5N2VaTEMxUzhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwbMw DQYJKoZIhvcNAQELBQADggEBAMVTxJOSW8vOsw48KF2VP1Gm4pD789kZUk7P0wxt m1w1xuW/NXgVE/Db/SXSL1dvY61wbf2VHiMYgG7mJsQXMEOaybWpfuFLR55Suth+ bGCbIRT3RGKrlFvy/AFSdyMdij143I3rxWyiNFhvVKUjgzT7EJTrjrFhHcx+Fw4M gzx6QL6etWFAYH8rgNMpC+8+baGR7dNUCGWEw5v7ygvACvupZZfQsJsxmq+3P/45 OxqbV33C3wSwIlIPooy/GNmwW3F9Mb33Vh4ihhl8xl79ccqO06SH3TnKPQp52xAt 48EDL4dj4cLcoE97rQUL8JmN4behz1VIcXAWveWJN7teJPk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:35 2026 by rpki-client