This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qKHB2faCa2v5RbtthwfjoJLHISE.roa File: qKHB2faCa2v5RbtthwfjoJLHISE.roa (raw, json) Hash identifier: 118RY9y8rAhJhy0pxTdM+PayQTMl7jL6W5Kkm1snonY= Subject key identifier: A8:A1:C1:D9:F6:82:6B:6B:F9:45:BB:6D:87:07:E3:A0:92:C7:21:21 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B8827561FB6BB4DCC287ED39E22E0D45C Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qKHB2faCa2v5RbtthwfjoJLHISE.roa Signing time: Sun 04 Jan 2026 08:37:17 +0000 ROA not before: Sun 04 Jan 2026 08:37:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a14:67c1:a128::/48 maxlen: 48 2a14:67c1:a129::/48 maxlen: 48 2a14:67c2:510::/48 maxlen: 48 2a14:67c2:576::/48 maxlen: 48 2a14:67c3:30::/44 maxlen: 44 2a14:67c3:cafe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:88:27:56:1f:b6:bb:4d:cc:28:7e:d3:9e:22:e0:d4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 4 08:37:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8a1c1d9f6826b6bf945bb6d8707e3a092c72121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:2f:2b:44:f5:72:b1:fe:01:8d:d1:5f:c5: 7a:a9:bb:cc:02:fb:1d:ef:6c:a9:a1:b8:3c:78:7a: 3b:d3:4b:5b:65:2e:23:e9:c0:9b:0c:2e:be:8b:06: fe:ee:8d:23:ac:c0:c6:54:f8:9f:87:f2:08:7e:6a: eb:05:48:de:c8:8f:5d:53:17:3d:84:68:6a:78:53: 6c:43:58:2b:7b:f1:5d:c2:25:97:ed:08:2f:9d:87: f3:22:48:a5:55:1f:68:a1:43:9d:ee:d8:3e:d9:06: 1e:42:d4:65:20:4c:9c:70:d9:4e:db:c6:3e:b0:ad: 9e:61:31:37:a8:0c:43:ee:4f:e5:8a:a9:55:a0:c5: 3b:5e:f8:37:12:53:da:e8:aa:bd:6c:db:34:b7:57: 52:5c:2d:0d:0c:6e:41:96:fe:c0:67:80:a6:bb:bf: 28:5f:05:bb:cc:ae:33:92:57:b4:8d:4e:4b:36:b0: 5a:31:7b:86:a7:e4:aa:ab:7c:11:44:30:49:2d:ec: 13:cb:f2:e3:12:6d:fc:e9:7b:09:1c:e4:fb:06:9a: e4:9d:8a:4d:7e:cc:cc:c5:ba:83:51:26:e1:cf:2b: 8c:cd:5a:f1:a5:81:02:7a:80:c8:7f:32:d6:17:74: af:a7:82:b5:85:a1:08:67:c2:52:a4:c5:96:72:26: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A1:C1:D9:F6:82:6B:6B:F9:45:BB:6D:87:07:E3:A0:92:C7:21:21 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qKHB2faCa2v5RbtthwfjoJLHISE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a128::/47 2a14:67c2:510::/48 2a14:67c2:576::/48 2a14:67c3:30::/44 2a14:67c3:cafe::/48 Signature Algorithm: sha256WithRSAEncryption a2:36:fa:a4:90:69:e9:f6:de:5a:c6:30:50:d0:fc:4e:00:49: 6d:f8:65:e3:5d:4d:1e:dd:ce:a9:98:e3:ac:58:ce:ea:cb:7b: e4:d1:60:1a:b2:27:aa:e8:5b:6f:c5:2b:fc:39:43:1c:07:0e: 94:07:9f:f3:d0:e7:ff:cd:a6:59:89:24:3e:c8:a8:b7:2f:dd: dd:12:38:d1:57:1c:92:2d:61:45:90:55:67:7e:37:4b:b1:5a: c8:7d:4c:c7:e9:27:f4:ba:ea:6b:c5:64:f2:76:de:b6:67:cf: 5f:d5:96:c4:5c:e4:89:7a:c3:77:b8:da:6e:ff:f3:78:51:1b: 93:2e:a6:2a:eb:07:34:a2:71:b9:e7:b3:c9:56:61:1a:0f:af: 41:dd:77:84:9d:02:15:f9:d0:66:cd:f3:74:aa:80:66:d2:31: d4:9c:20:34:0e:f7:26:0f:dc:e0:72:e3:da:4b:5f:42:f9:7c: d4:04:33:1a:e3:57:3b:53:8c:bd:b4:8d:c1:16:f6:cd:35:8d: e9:3a:95:5f:b6:db:40:60:ac:2f:98:22:e2:fb:be:e3:8b:64: 51:2b:fb:62:ae:26:d5:68:58:d9:42:48:92:54:c3:18:b1:51: 44:f4:c7:88:e5:c4:7f:2d:6a:aa:94:ad:67:60:42:c3:99:33: 9a:d8:bd:77 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZuIJ1YftrtNzCh+054i4NRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTA0MDgzNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGExYzFkOWY2ODI2YjZiZjk0NWJiNmQ4NzA3ZTNhMDkyYzcyMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI8vK0T1crH+AY3RX8V6qbvMAvsd 72ypobg8eHo700tbZS4j6cCbDC6+iwb+7o0jrMDGVPifh/IIfmrrBUjeyI9dUxc9 hGhqeFNsQ1gre/FdwiWX7QgvnYfzIkilVR9ooUOd7tg+2QYeQtRlIEyccNlO28Y+ sK2eYTE3qAxD7k/liqlVoMU7Xvg3ElPa6Kq9bNs0t1dSXC0NDG5Blv7AZ4Cmu78o XwW7zK4zkle0jU5LNrBaMXuGp+Sqq3wRRDBJLewTy/LjEm386XsJHOT7BprknYpN fszMxbqDUSbhzyuMzVrxpYECeoDIfzLWF3Svp4K1haEIZ8JSpMWWcib+GQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFKihwdn2gmtr+UW7bYcH46CSxyEhMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvcUtIQjJmYUNhMnY1UmJ0dGh3ZmpvSkxISVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcBKhRnwaEo AwcAKhRnwgUQAwcAKhRnwgV2AwcEKhRnwwAwAwcAKhRnw8r+MA0GCSqGSIb3DQEB CwUAA4IBAQCiNvqkkGnp9t5axjBQ0PxOAElt+GXjXU0e3c6pmOOsWM7qy3vk0WAa sieq6FtvxSv8OUMcBw6UB5/z0Of/zaZZiSQ+yKi3L93dEjjRVxySLWFFkFVnfjdL sVrIfUzH6Sf0uuprxWTydt62Z89f1ZbEXOSJesN3uNpu//N4URuTLqYq6wc0onG5 57PJVmEaD69B3XeEnQIV+dBmzfN0qoBm0jHUnCA0DvcmD9zgcuPaS19C+XzUBDMa 41c7U4y9tI3BFvbNNY3pOpVftttAYKwvmCLi+77ji2RRK/tiribVaFjZQkiSVMMY sVFE9MeI5cR/LWqqlK1nYELDmTOa2L13 -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:58 2026 by rpki-client