This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0vetEjyw1WQWmCXUTx8290wF-5A.roa File: 0vetEjyw1WQWmCXUTx8290wF-5A.roa (raw, json) Hash identifier: MRRpw2B7+36LyQgMqkGBs8Q1n0WozbWhLmzocDU6qn0= Subject key identifier: D2:F7:AD:12:3C:B0:D5:64:16:98:25:D4:4F:1F:36:F7:4C:05:FB:90 Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019B7A5B328F37B78C47AC1E3483C93222E4 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0vetEjyw1WQWmCXUTx8290wF-5A.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 263779 IP address blocks: 2a01:53c0:ff19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:32:8f:37:b7:8c:47:ac:1e:34:83:c9:32:22:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2f7ad123cb0d564169825d44f1f36f74c05fb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:5d:d4:32:29:38:76:e1:e6:40:e9:8d:d4: 71:25:de:54:fb:7f:f9:0d:a7:34:41:b2:6a:7e:8a: d3:8c:da:26:48:84:58:21:7c:f3:6b:db:c0:f8:5c: 0a:bd:1d:8f:bd:88:22:51:6b:e6:2e:43:d4:45:ba: 4e:42:a5:7f:3a:10:a5:e0:a5:7d:34:49:97:38:9f: ee:1c:68:ab:a4:a5:66:fb:b2:57:54:83:6f:9c:74: f2:ba:44:bf:7b:6b:4a:f1:4f:a0:1e:34:3f:ff:56: 0a:98:50:51:03:34:b3:63:b0:58:66:8d:60:e3:de: b1:fa:d6:33:a3:b9:b7:0d:32:0f:04:fe:98:c3:78: 16:7a:3c:07:58:31:e8:e2:62:9e:0d:3f:27:28:98: 70:b4:b4:e3:d0:46:9e:21:d1:8c:c2:58:b7:8e:9b: 57:9c:b1:fd:fa:41:e2:59:97:f8:99:e4:72:78:b1: 74:42:bf:77:38:c7:0b:6f:4d:04:99:1e:b8:2d:16: 8b:c8:e9:33:98:2c:a9:d0:42:7c:f8:7c:9c:2f:30: 61:d2:77:44:d1:4f:48:2f:9f:62:1e:47:7b:c7:ce: ec:aa:28:43:80:55:a3:dc:d2:e4:3a:56:ec:29:1c: 36:8d:d5:01:33:a8:ef:e9:96:99:33:ab:da:8b:d3: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F7:AD:12:3C:B0:D5:64:16:98:25:D4:4F:1F:36:F7:4C:05:FB:90 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/0vetEjyw1WQWmCXUTx8290wF-5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:53c0:ff19::/48 Signature Algorithm: sha256WithRSAEncryption ab:7f:10:06:d4:11:a6:10:a0:94:7b:e2:6f:6e:53:7a:c0:e9: 6a:59:b8:26:d3:c5:cb:02:68:2b:cc:0b:73:b0:c3:74:9a:48: b0:80:5b:8d:d9:34:be:dc:be:ae:1b:5a:76:30:7f:fe:1f:43: f4:ba:33:40:dc:e5:5f:17:3f:c0:7e:cc:2c:d9:8e:2a:45:c0: 62:e9:42:6e:85:28:25:bf:e5:76:69:98:98:4c:ea:47:dc:41: 36:75:b1:d8:6f:a8:c2:7a:8b:77:83:fb:ef:25:1f:50:9d:06: 01:82:80:a3:72:56:bc:e9:29:26:65:eb:1c:ec:14:4f:9c:9e: 95:bc:b7:db:e8:9c:2f:7b:50:6b:22:4c:dd:fa:9d:02:09:ea: 98:4c:25:97:e6:41:c3:02:6c:63:74:db:e1:44:bf:ea:61:73: ea:19:ba:6d:aa:08:33:ec:00:97:0f:f2:42:4a:44:d8:80:79: b7:1c:e9:82:0a:c8:c2:b2:3c:78:94:01:47:46:48:a6:25:b2: 09:c1:a5:d5:f0:30:78:a4:7f:9d:a4:0c:38:7a:d9:2e:35:17: d4:eb:71:1a:4e:93:33:11:2d:f8:a9:84:c7:07:df:e4:e2:14: 96:c4:29:8f:2b:50:b3:16:67:82:5c:a3:21:ef:58:67:35:ed: 28:3a:1f:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WzKPN7eMR6weNIPJMiLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY3YWQxMjNjYjBkNTY0MTY5ODI1ZDQ0ZjFmMzZmNzRjMDVmYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24xd1DIpOHbh5kDpjdRxJd5U+3/5 Dac0QbJqforTjNomSIRYIXzza9vA+FwKvR2PvYgiUWvmLkPURbpOQqV/OhCl4KV9 NEmXOJ/uHGirpKVm+7JXVINvnHTyukS/e2tK8U+gHjQ//1YKmFBRAzSzY7BYZo1g 496x+tYzo7m3DTIPBP6Yw3gWejwHWDHo4mKeDT8nKJhwtLTj0EaeIdGMwli3jptX nLH9+kHiWZf4meRyeLF0Qr93OMcLb00EmR64LRaLyOkzmCyp0EJ8+HycLzBh0ndE 0U9IL59iHkd7x87sqihDgFWj3NLkOlbsKRw2jdUBM6jv6ZaZM6vai9MqVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNL3rRI8sNVkFpgl1E8fNvdMBfuQMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvMHZldEVqeXcxV1FXbUNYVVR4ODI5MHdGLTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFTwP8Z MA0GCSqGSIb3DQEBCwUAA4IBAQCrfxAG1BGmEKCUe+JvblN6wOlqWbgm08XLAmgr zAtzsMN0mkiwgFuN2TS+3L6uG1p2MH/+H0P0ujNA3OVfFz/Afsws2Y4qRcBi6UJu hSglv+V2aZiYTOpH3EE2dbHYb6jCeot3g/vvJR9QnQYBgoCjcla86SkmZesc7BRP nJ6VvLfb6Jwve1BrIkzd+p0CCeqYTCWX5kHDAmxjdNvhRL/qYXPqGbptqggz7ACX D/JCSkTYgHm3HOmCCsjCsjx4lAFHRkimJbIJwaXV8DB4pH+dpAw4etkuNRfU63Ea TpMzES34qYTHB9/k4hSWxCmPK1CzFmeCXKMh71hnNe0oOh8P -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:40 2026 by rpki-client