This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/uhf7HYKesO6lbjDyEPaQsNYB340.roa File: uhf7HYKesO6lbjDyEPaQsNYB340.roa (raw, json) Hash identifier: QCxJm+geAq18KrBbdnZHqeAADVqx08pqxYWG3bdkt+E= Subject key identifier: BA:17:FB:1D:82:9E:B0:EE:A5:6E:30:F2:10:F6:90:B0:D6:01:DF:8D Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B99D1AF6E3D2A02854636C7DA7CC10284 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/uhf7HYKesO6lbjDyEPaQsNYB340.roa Signing time: Wed 07 Jan 2026 18:56:54 +0000 ROA not before: Wed 07 Jan 2026 18:56:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153376 IP address blocks: 2a14:67c3:6660::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:d1:af:6e:3d:2a:02:85:46:36:c7:da:7c:c1:02:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 7 18:56:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba17fb1d829eb0eea56e30f210f690b0d601df8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:76:9c:74:f2:65:74:d4:c9:1e:3a:13:26:38: 2d:a8:ff:76:f7:3e:a5:83:19:c3:e0:76:17:06:43: 07:31:b5:1f:a2:8a:14:3c:97:fd:9f:52:00:41:b3: 89:92:ba:e7:16:b5:d9:68:72:1b:39:ed:e9:0b:45: 35:13:65:91:96:47:c1:0f:9b:25:aa:a4:9b:62:86: a4:0a:e2:15:d8:6a:86:85:b9:39:30:d2:8f:22:0e: 23:d5:b9:f8:f7:23:18:45:3e:f4:ec:91:75:1b:59: 98:f6:07:09:50:f3:ac:3c:4f:14:f8:a6:8d:6f:88: ab:59:95:c3:8f:6e:c1:44:e9:41:d3:54:0d:e0:c6: 4f:cb:61:b7:40:ea:63:b8:bd:ab:7f:78:d7:e7:37: 78:57:cb:41:c7:a6:f7:1d:75:fc:17:8b:60:4e:17: c1:df:75:4b:a2:54:4c:67:a7:f7:76:5c:7e:f7:02: c5:75:75:fc:8a:5c:79:62:e7:2b:35:b1:24:66:79: 47:ee:8a:c0:23:b8:11:4f:13:b0:45:39:b2:2f:d5: 40:bc:0d:9f:b3:2f:4f:06:54:60:dd:c7:a9:37:b5: 50:8e:da:6f:f7:29:5c:cc:06:9b:aa:82:8c:a9:33: cf:7c:b7:99:ba:9c:2f:79:a7:a7:60:d2:8c:f6:2d: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:FB:1D:82:9E:B0:EE:A5:6E:30:F2:10:F6:90:B0:D6:01:DF:8D X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/uhf7HYKesO6lbjDyEPaQsNYB340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:6660::/44 Signature Algorithm: sha256WithRSAEncryption 6e:42:33:04:34:48:4a:ed:65:f4:b9:97:aa:99:68:df:cd:96: b3:3b:a1:86:8c:79:bd:27:14:38:e9:2c:3e:53:f5:8e:19:dc: 62:18:ed:45:ed:a3:0e:7d:7c:42:10:7a:04:03:29:29:0d:dd: 5e:bc:a0:ed:f9:10:41:20:6f:e7:02:47:22:11:d2:8e:5a:4e: 98:d9:28:f6:40:f9:47:27:db:94:c5:aa:9b:1e:a4:f8:0a:32: f5:f0:6b:c9:b0:69:b0:ff:9b:ed:a1:df:0d:87:97:e9:4e:7f: 1e:7b:27:e1:b0:d1:11:85:6b:f2:b7:49:c0:74:d2:4b:47:c3: 7e:40:1e:82:dd:58:18:08:3c:01:6d:7c:d8:f3:f8:6a:26:7f: ec:0e:0b:8b:54:54:03:fa:a3:14:8c:a3:92:c4:65:b9:97:1d: bf:7c:7b:ae:de:34:3b:d1:a7:5f:37:3d:39:44:b9:c3:75:70: 9e:f7:ae:34:8f:4b:5a:df:31:23:9d:81:e7:18:1d:f5:d8:09: ae:b8:33:cc:bb:d0:21:c8:88:0e:5d:3e:1b:75:95:57:ca:ff: cc:8c:10:8b:fa:79:a1:23:f8:9a:f6:0d:43:80:78:b6:50:95: b2:a6:4e:80:b3:9e:7c:17:f4:ba:e1:2b:0b:62:5a:f3:77:b1: 90:01:b8:a5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuZ0a9uPSoChUY2x9p8wQKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTA3MTg1NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTE3ZmIxZDgyOWViMGVlYTU2ZTMwZjIxMGY2OTBiMGQ2MDFkZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HacdPJldNTJHjoTJjgtqP929z6l gxnD4HYXBkMHMbUfoooUPJf9n1IAQbOJkrrnFrXZaHIbOe3pC0U1E2WRlkfBD5sl qqSbYoakCuIV2GqGhbk5MNKPIg4j1bn49yMYRT707JF1G1mY9gcJUPOsPE8U+KaN b4irWZXDj27BROlB01QN4MZPy2G3QOpjuL2rf3jX5zd4V8tBx6b3HXX8F4tgThfB 33VLolRMZ6f3dlx+9wLFdXX8ilx5YucrNbEkZnlH7orAI7gRTxOwRTmyL9VAvA2f sy9PBlRg3cepN7VQjtpv9ylczAabqoKMqTPPfLeZupwveaenYNKM9i0b9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLoX+x2CnrDupW4w8hD2kLDWAd+NMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvdWhmN0hZS2VzTzZsYmpEeUVQYVFzTllCMzQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnw2Zg MA0GCSqGSIb3DQEBCwUAA4IBAQBuQjMENEhK7WX0uZeqmWjfzZazO6GGjHm9JxQ4 6Sw+U/WOGdxiGO1F7aMOfXxCEHoEAykpDd1evKDt+RBBIG/nAkciEdKOWk6Y2Sj2 QPlHJ9uUxaqbHqT4CjL18GvJsGmw/5vtod8Nh5fpTn8eeyfhsNERhWvyt0nAdNJL R8N+QB6C3VgYCDwBbXzY8/hqJn/sDguLVFQD+qMUjKOSxGW5lx2/fHuu3jQ70adf Nz05RLnDdXCe9640j0ta3zEjnYHnGB312AmuuDPMu9AhyIgOXT4bdZVXyv/MjBCL +nmhI/ia9g1DgHi2UJWypk6As558F/S64SsLYlrzd7GQAbil -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:59 2026 by rpki-client