This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gmLT7ZKleu-FyLZ8vI2WN_6dNoI.roa File: gmLT7ZKleu-FyLZ8vI2WN_6dNoI.roa (raw, json) Hash identifier: 4MugFHnt3Qd9REueYg4reYoc1R0XKTjZ/mH9JrS+KVQ= Subject key identifier: 82:62:D3:ED:92:A5:7A:EF:85:C8:B6:7C:BC:8D:96:37:FE:9D:36:82 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B3583939C695537EFF60A89CEDDDAF1 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gmLT7ZKleu-FyLZ8vI2WN_6dNoI.roa Signing time: Thu 01 Jan 2026 20:17:43 +0000 ROA not before: Thu 01 Jan 2026 20:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206540 IP address blocks: 2a14:67c2:900::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:83:93:9c:69:55:37:ef:f6:0a:89:ce:dd:da:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8262d3ed92a57aef85c8b67cbc8d9637fe9d3682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:22:89:7a:b0:67:ae:ba:31:8b:36:6b:01: e6:89:9c:fe:c6:c8:df:08:e8:31:b4:9f:2c:c3:38: 6d:c8:44:57:0c:a8:77:46:1f:d1:d8:fd:bb:3f:da: 21:cd:20:52:11:b9:5d:b1:36:cf:f9:e7:6d:b0:fc: a3:ae:32:f2:7f:1e:80:79:4d:d0:66:07:2d:27:2e: fd:6b:1d:01:75:0b:d4:f9:80:fb:60:0c:da:8c:b7: 97:fb:27:1c:b1:2d:44:37:50:f4:19:c8:69:d4:33: 60:3c:79:ee:c7:9f:78:cf:af:a8:18:23:7b:3c:75: d5:03:16:05:c6:fe:6f:b4:aa:67:c1:b5:a1:bb:84: 56:4f:b2:da:31:91:c4:eb:b2:23:88:f8:db:69:c5: 74:ca:53:55:0f:ee:82:82:b4:80:99:6b:86:5a:c2: 7d:ad:7f:a8:21:39:b7:52:19:d5:31:0b:0f:38:3e: 06:d8:f2:8d:20:44:63:bb:34:f6:46:70:94:40:2e: 46:c5:8c:8f:20:63:ae:8e:a7:36:52:60:b1:09:9e: 2a:0b:9d:7e:c2:d7:8d:65:0c:40:d8:ae:79:e1:4a: a4:02:cd:9c:f4:cb:8b:aa:f3:3f:05:c4:f7:d6:6a: 2f:6f:96:f0:dd:9f:dd:1c:78:3c:a1:90:a3:cf:66: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:62:D3:ED:92:A5:7A:EF:85:C8:B6:7C:BC:8D:96:37:FE:9D:36:82 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gmLT7ZKleu-FyLZ8vI2WN_6dNoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:900::/44 Signature Algorithm: sha256WithRSAEncryption 63:b3:c6:cc:e6:79:c9:58:7a:1a:d7:be:62:8b:2d:2b:4e:d3: d4:d3:e5:5e:0b:e2:9a:2b:1e:06:87:fa:56:06:cc:51:d0:ed: d9:15:d5:cb:77:ed:e0:b0:57:5a:c4:4d:c3:13:4a:0f:f2:48: 15:8b:96:f4:c0:f7:b5:cd:dd:0a:3d:b9:a3:d8:f9:b7:0b:eb: ca:dd:18:93:a6:43:c7:68:20:e6:c9:1e:fa:9b:fc:cb:bf:51: fc:7e:4f:d2:ca:b4:8c:4f:0e:2e:41:0f:0a:12:9a:29:ce:a0: 1b:95:19:74:95:65:26:d7:c5:4d:ee:c7:61:9e:9e:74:82:f8: 12:66:12:a1:8f:22:de:80:d2:43:a5:0b:ad:56:3d:23:63:82: cf:ae:16:48:eb:c3:33:5a:7e:8a:29:53:52:5d:85:e6:76:c6: 4e:12:5e:97:ea:8c:c7:01:25:9f:72:40:ea:4f:c4:a9:6f:07: d0:11:9a:9d:e0:b4:87:8d:6c:8c:3d:44:c5:a7:3e:c4:ef:14: 11:36:ee:fb:29:f4:9d:b2:1d:fa:0b:fe:3d:b6:2f:5b:c1:32: aa:3e:38:33:55:8e:5d:2d:3f:a4:22:99:3a:77:e5:ee:6c:b6: ed:e5:46:f0:10:53:9a:2c:41:e2:64:dc:0c:40:f1:b2:db:9d: 56:62:78:36 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NYOTnGlVN+/2ConO3drxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjYyZDNlZDkyYTU3YWVmODVjOGI2N2NiYzhkOTYzN2ZlOWQzNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKEiiXqwZ666MYs2awHmiZz+xsjf COgxtJ8swzhtyERXDKh3Rh/R2P27P9ohzSBSEbldsTbP+edtsPyjrjLyfx6AeU3Q ZgctJy79ax0BdQvU+YD7YAzajLeX+yccsS1EN1D0Gchp1DNgPHnux594z6+oGCN7 PHXVAxYFxv5vtKpnwbWhu4RWT7LaMZHE67IjiPjbacV0ylNVD+6CgrSAmWuGWsJ9 rX+oITm3UhnVMQsPOD4G2PKNIERjuzT2RnCUQC5GxYyPIGOujqc2UmCxCZ4qC51+ wteNZQxA2K554UqkAs2c9MuLqvM/BcT31movb5bw3Z/dHHg8oZCjz2ZqmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIJi0+2SpXrvhci2fLyNljf+nTaCMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvZ21MVDdaS2xldS1GeUxaOHZJMldOXzZkTm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwgkA MA0GCSqGSIb3DQEBCwUAA4IBAQBjs8bM5nnJWHoa175iiy0rTtPU0+VeC+KaKx4G h/pWBsxR0O3ZFdXLd+3gsFdaxE3DE0oP8kgVi5b0wPe1zd0KPbmj2Pm3C+vK3RiT pkPHaCDmyR76m/zLv1H8fk/SyrSMTw4uQQ8KEpopzqAblRl0lWUm18VN7sdhnp50 gvgSZhKhjyLegNJDpQutVj0jY4LPrhZI68MzWn6KKVNSXYXmdsZOEl6X6ozHASWf ckDqT8SpbwfQEZqd4LSHjWyMPUTFpz7E7xQRNu77KfSdsh36C/49ti9bwTKqPjgz VY5dLT+kIpk6d+XubLbt5UbwEFOaLEHiZNwMQPGy251WYng2 -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:31 2026 by rpki-client