This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hfBnvaFCtr3S1V9v2hng6_yvY-U.roa File: hfBnvaFCtr3S1V9v2hng6_yvY-U.roa (raw, json) Hash identifier: BY59VcsjDVNmuYC1OOo5OOaFDbZWhJK47aNK5uo1rW0= Subject key identifier: 85:F0:67:BD:A1:42:B6:BD:D2:D5:5F:6F:DA:19:E0:EB:FC:AF:63:E5 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BEE5A8DEF09E2E98A3595724FAC341482 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hfBnvaFCtr3S1V9v2hng6_yvY-U.roa Signing time: Sat 24 Jan 2026 04:54:30 +0000 ROA not before: Sat 24 Jan 2026 04:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212890 IP address blocks: 2a14:67c3:11::/48 maxlen: 48 2a14:67c3:12::/48 maxlen: 48 2a14:67c3:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ee:5a:8d:ef:09:e2:e9:8a:35:95:72:4f:ac:34:14:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 24 04:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85f067bda142b6bdd2d55f6fda19e0ebfcaf63e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:d9:a7:2a:ce:52:2d:40:ba:22:fd:dc:d3: 8c:54:4d:2d:2d:72:85:c2:74:1f:b5:33:3f:aa:d6: 10:b6:d8:ac:c9:dd:4f:c8:cd:26:02:82:be:34:65: b0:c0:6c:11:81:fe:26:42:65:63:2a:b5:df:c2:8e: 33:c8:f7:38:78:6d:c1:ec:cd:a2:db:30:41:f4:08: 51:5d:b6:6b:f1:86:7f:94:d5:97:ed:50:a9:3d:41: 16:29:fa:bc:2f:c7:0e:f0:82:6d:6a:0b:0a:1a:32: 01:11:33:48:0f:07:7c:29:3c:d4:e4:34:6d:73:18: 0b:93:16:ed:f3:4b:08:11:6d:bf:52:be:0f:8e:83: 7f:1c:a9:45:76:da:a6:9d:2f:97:f6:2e:62:6b:ef: 3d:2c:bf:73:2f:59:b3:88:1b:e1:1c:ea:ad:df:13: e0:57:57:8b:ff:96:88:56:42:f0:b3:03:8c:a7:3e: 36:05:b7:bc:d0:09:97:09:7e:4b:85:b3:4b:49:89: a3:ad:eb:f8:84:b0:63:f3:02:f4:ff:63:f7:ee:26: d1:0b:8d:5c:20:a0:31:da:d9:4d:53:12:49:e2:70: 08:3a:3d:b9:7c:0f:bf:34:53:df:31:2b:67:83:3f: db:06:5a:74:5f:0e:be:00:1e:3d:f7:c2:3a:20:3b: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F0:67:BD:A1:42:B6:BD:D2:D5:5F:6F:DA:19:E0:EB:FC:AF:63:E5 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hfBnvaFCtr3S1V9v2hng6_yvY-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:11::-2a14:67c3:13:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 97:22:1c:bd:36:c9:33:2d:00:76:45:33:02:ec:45:b5:1e:24: be:29:f3:ca:09:56:80:fc:73:f4:aa:a6:3e:50:89:09:13:db: 8b:71:b7:66:22:b1:58:5b:f9:78:d5:65:1f:e8:62:ac:c8:d0: d8:4a:c8:ff:20:63:a9:6c:14:03:05:09:cc:7e:e2:c9:f3:97: 41:bf:a1:91:85:ad:40:27:0a:49:b7:f4:c8:d3:7e:6c:93:59: 8a:ac:9c:5a:d3:f0:14:db:df:e2:58:c9:0f:4a:4b:93:8b:c7: 39:a4:58:76:27:23:f1:72:4d:b3:97:8d:d3:a9:50:f5:54:5a: 71:f1:5a:b0:76:45:d3:0e:92:bd:b8:5a:6e:a2:43:92:f9:e9: 5e:85:6b:8b:43:31:53:0b:5c:4a:47:28:86:a8:2e:2a:f6:09: 84:68:f4:5a:78:99:18:9b:27:b0:a3:22:4d:0a:df:72:9c:e9: cc:26:86:6c:c8:5a:d1:4d:1e:c0:0b:7c:2d:00:95:f6:72:00: aa:e7:b0:fa:24:88:0f:9c:e5:19:45:0b:d9:3e:cb:ec:c2:12: da:69:12:27:ee:06:34:69:64:8d:84:01:f1:b9:bc:79:d9:36: be:13:4c:1a:55:26:f7:2e:04:f2:4d:89:2e:45:e0:3d:26:1e: 5d:83:8d:b9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZvuWo3vCeLpijWVck+sNBSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTI0MDQ1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWYwNjdiZGExNDJiNmJkZDJkNTVmNmZkYTE5ZTBlYmZjYWY2M2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqILZpyrOUi1AuiL93NOMVE0tLXKF wnQftTM/qtYQttisyd1PyM0mAoK+NGWwwGwRgf4mQmVjKrXfwo4zyPc4eG3B7M2i 2zBB9AhRXbZr8YZ/lNWX7VCpPUEWKfq8L8cO8IJtagsKGjIBETNIDwd8KTzU5DRt cxgLkxbt80sIEW2/Ur4PjoN/HKlFdtqmnS+X9i5ia+89LL9zL1mziBvhHOqt3xPg V1eL/5aIVkLwswOMpz42Bbe80AmXCX5LhbNLSYmjrev4hLBj8wL0/2P37ibRC41c IKAx2tlNUxJJ4nAIOj25fA+/NFPfMStngz/bBlp0Xw6+AB4998I6IDv+twIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIXwZ72hQra90tVfb9oZ4Ov8r2PlMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvaGZCbnZhRkN0cjNTMVY5djJobmc2X3l2WS1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqFGfD ABEDBwIqFGfDABAwDQYJKoZIhvcNAQELBQADggEBAJciHL02yTMtAHZFMwLsRbUe JL4p88oJVoD8c/Sqpj5QiQkT24txt2YisVhb+XjVZR/oYqzI0NhKyP8gY6lsFAMF Ccx+4snzl0G/oZGFrUAnCkm39MjTfmyTWYqsnFrT8BTb3+JYyQ9KS5OLxzmkWHYn I/FyTbOXjdOpUPVUWnHxWrB2RdMOkr24Wm6iQ5L56V6Fa4tDMVMLXEpHKIaoLir2 CYRo9Fp4mRibJ7CjIk0K33Kc6cwmhmzIWtFNHsALfC0AlfZyAKrnsPokiA+c5RlF C9k+y+zCEtppEifuBjRpZI2EAfG5vHnZNr4TTBpVJvcuBPJNiS5F4D0mHl2Djbk= -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:09 2026 by rpki-client