This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/yX1y_OYOT3bA4HrRjzmR6ZqTCA8.roa File: yX1y_OYOT3bA4HrRjzmR6ZqTCA8.roa (raw, json) Hash identifier: bkvRPm+Y3n94Z5hSdmxTxYvaYheSfXujiGhiXw/mNZY= Subject key identifier: C9:7D:72:FC:E6:0E:4F:76:C0:E0:7A:D1:8F:39:91:E9:9A:93:08:0F Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B35880C60FDBE0285B2780836D6227C Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/yX1y_OYOT3bA4HrRjzmR6ZqTCA8.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210634 IP address blocks: 2a14:67c1:a040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:88:0c:60:fd:be:02:85:b2:78:08:36:d6:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97d72fce60e4f76c0e07ad18f3991e99a93080f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:45:d6:7a:33:7d:5d:4f:9f:41:a0:23:08: 79:07:a6:08:24:e4:a7:a0:2a:f8:5b:18:2e:11:57: a0:dc:9e:1f:3f:07:2f:97:6a:e6:33:58:ee:a4:5d: 56:dd:a8:91:3a:33:cf:a2:59:81:26:44:69:21:09: 72:90:e6:b0:85:be:61:5c:02:f3:11:01:28:2e:de: 33:6b:a9:4f:46:82:9c:fe:91:34:4a:f8:2a:65:c0: a6:ad:b3:50:ff:e2:86:22:c1:42:4f:39:e9:a3:d0: 4e:61:71:67:48:54:4f:bc:d5:c5:06:17:6e:1a:74: 76:77:48:85:5c:d9:b7:97:bc:a7:a7:ae:07:32:6c: 7e:0a:c6:7e:44:d8:5a:fd:2a:a8:fe:ff:d5:f2:bf: b7:df:85:b4:78:2d:73:a9:e0:06:2c:be:34:96:c3: ab:ea:be:2a:70:d1:fb:d4:dc:89:41:14:1b:63:30: 1e:c9:61:67:4f:a4:18:7c:5f:c5:39:a9:bb:7d:4a: 6c:d6:43:9f:9a:94:ad:d5:3e:bc:bf:40:06:9b:91: 77:e1:bd:58:24:df:fe:ea:25:fa:7c:fe:ca:71:e4: e5:4d:00:73:0f:18:0a:e5:13:95:68:f6:82:1f:cb: 31:60:a2:36:53:d8:56:31:8e:c5:f8:b9:3e:c9:68: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7D:72:FC:E6:0E:4F:76:C0:E0:7A:D1:8F:39:91:E9:9A:93:08:0F X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/yX1y_OYOT3bA4HrRjzmR6ZqTCA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a040::/44 Signature Algorithm: sha256WithRSAEncryption 87:c8:1d:fc:36:80:ea:0b:f9:a1:37:4e:f9:34:14:ee:df:bd: bb:01:c0:94:1a:12:72:1b:a7:67:fe:4c:01:33:06:80:80:65: f4:b7:16:37:8f:a1:d0:4d:ae:93:3b:bc:c8:74:4e:6f:44:a9: 47:14:9b:8c:d2:da:c4:de:90:fc:c2:bd:a8:93:06:d0:40:bf: 38:39:15:e1:80:60:52:21:6c:0f:63:0c:0c:89:af:2b:f0:79: 91:25:4e:24:95:c6:fb:f7:f8:af:9e:af:72:96:10:fb:ac:6c: cb:b4:6a:34:4f:4d:1c:f2:2e:7c:58:ff:35:76:8d:23:bf:6e: c7:7a:d7:46:c0:57:72:e9:bd:28:cf:30:19:3e:7a:07:38:50: 53:47:6e:73:2e:71:96:94:c9:44:df:b3:41:ca:4a:5c:a6:5f: eb:9a:e6:d2:8c:44:ed:18:29:0c:3c:4d:b6:6f:b2:7c:97:e9: 64:68:c9:f5:01:24:4e:db:6d:40:21:7c:da:33:2e:d5:e0:aa: 3e:83:55:a5:70:79:82:63:04:f0:71:35:8d:82:c4:d2:e2:b1: 34:e2:a6:34:f6:7e:e7:24:3c:ad:25:b1:bd:85:4a:71:8f:fe: 18:81:b2:bd:52:b6:f4:00:1a:12:42:ef:fd:dd:00:23:da:ba: a4:af:0e:b3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NYgMYP2+AoWyeAg21iJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdkNzJmY2U2MGU0Zjc2YzBlMDdhZDE4ZjM5OTFlOTlhOTMwODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYVF1nozfV1Pn0GgIwh5B6YIJOSn oCr4WxguEVeg3J4fPwcvl2rmM1jupF1W3aiROjPPolmBJkRpIQlykOawhb5hXALz EQEoLt4za6lPRoKc/pE0SvgqZcCmrbNQ/+KGIsFCTznpo9BOYXFnSFRPvNXFBhdu GnR2d0iFXNm3l7ynp64HMmx+CsZ+RNha/Sqo/v/V8r+334W0eC1zqeAGLL40lsOr 6r4qcNH71NyJQRQbYzAeyWFnT6QYfF/FOam7fUps1kOfmpSt1T68v0AGm5F34b1Y JN/+6iX6fP7KceTlTQBzDxgK5ROVaPaCH8sxYKI2U9hWMY7F+Lk+yWhMEwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMl9cvzmDk92wOB60Y85kemakwgPMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEveVgxeV9PWU9UM2JBNEhyUmp6bVI2WnFUQ0E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaBA MA0GCSqGSIb3DQEBCwUAA4IBAQCHyB38NoDqC/mhN075NBTu3727AcCUGhJyG6dn /kwBMwaAgGX0txY3j6HQTa6TO7zIdE5vRKlHFJuM0trE3pD8wr2okwbQQL84ORXh gGBSIWwPYwwMia8r8HmRJU4klcb79/ivnq9ylhD7rGzLtGo0T00c8i58WP81do0j v27HetdGwFdy6b0ozzAZPnoHOFBTR25zLnGWlMlE37NBykpcpl/rmubSjETtGCkM PE22b7J8l+lkaMn1ASRO221AIXzaMy7V4Ko+g1WlcHmCYwTwcTWNgsTS4rE04qY0 9n7nJDytJbG9hUpxj/4YgbK9Urb0ABoSQu/93QAj2rqkrw6z -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:01 2026 by rpki-client