This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5m0clEiSF5RojVNJO3eg4EITXEY.roa File: 5m0clEiSF5RojVNJO3eg4EITXEY.roa (raw, json) Hash identifier: JPmQuS3UY7Ni1gpm3btcgPpK/1Z+34m3a09QIAcUiK8= Subject key identifier: E6:6D:1C:94:48:92:17:94:68:8D:53:49:3B:77:A0:E0:42:13:5C:46 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B7B3578875AE858269FBC7E6AAFA1500A Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5m0clEiSF5RojVNJO3eg4EITXEY.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 2a14:67c2:4ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:78:87:5a:e8:58:26:9f:bc:7e:6a:af:a1:50:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e66d1c9448921794688d53493b77a0e042135c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:ff:dc:5c:c9:b7:24:57:b0:7a:a6:8a:39: 90:13:05:dc:14:b2:d4:2c:50:21:98:2c:b3:42:ab: 01:94:f4:0f:58:80:dc:78:8d:1a:d4:27:39:c7:69: 33:ae:2e:cb:b8:72:31:8a:59:66:0e:3b:44:cb:9a: 6c:2a:19:9f:19:9a:6c:8f:a6:33:11:1e:3f:47:b5: 7c:38:6c:42:ac:c9:e9:a3:f5:fc:34:64:fd:48:59: 3c:3f:25:bd:ac:ad:58:9f:eb:0d:8b:8d:ef:d4:13: 82:59:46:d2:41:2d:b3:03:e0:0b:29:e1:51:7f:c3: 40:18:dd:15:e2:00:44:f5:e7:dd:df:db:c7:3b:bf: 20:78:6a:1a:9d:f8:e2:fe:f3:e0:89:56:6d:28:e4: 18:02:d5:84:7d:af:f6:c2:98:5b:bd:f0:dd:4d:3b: 93:58:95:2d:c0:87:51:f8:fb:d9:5e:2a:3b:42:9a: b1:22:38:ed:93:64:fc:dd:ea:e9:29:ae:b7:9c:93: 99:0c:96:27:5f:de:99:14:82:93:b7:de:f1:79:f0: c0:a4:f2:98:3a:80:a3:8f:24:70:57:ea:11:dd:2c: 44:92:e2:9f:63:d7:7e:f0:8f:8e:3b:33:d8:95:7c: 29:42:f2:0d:c5:b5:8f:f4:ae:50:86:2b:56:ed:9b: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6D:1C:94:48:92:17:94:68:8D:53:49:3B:77:A0:E0:42:13:5C:46 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5m0clEiSF5RojVNJO3eg4EITXEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:4ff::/48 Signature Algorithm: sha256WithRSAEncryption bf:97:16:4c:e8:88:73:6b:03:1b:78:83:7f:a4:d8:a5:23:9c: 75:d9:50:4a:e7:ea:59:6d:1f:95:95:a9:c0:7f:68:8c:eb:f2: c1:89:a4:56:87:d9:b5:94:1a:bc:ea:06:ca:8b:97:aa:40:4f: 32:90:69:80:92:72:00:93:e8:13:a5:85:c1:47:0c:71:b6:e7: cb:15:62:cc:5a:af:1a:36:6e:b4:85:bf:b8:51:de:e3:88:51: 64:22:8f:67:af:5a:94:05:d4:e0:9d:f2:d3:54:35:8a:e7:39: 7a:d2:32:06:f5:83:bf:ea:29:b1:d1:e4:92:3b:ee:e9:31:cc: f7:88:d3:67:fc:b0:be:1e:6d:da:db:db:b1:74:e9:83:81:a2: cd:b9:65:d9:e0:87:1b:f0:7f:1e:56:39:f6:44:a1:3f:36:1d: 34:47:d2:47:62:e4:bd:81:ce:c9:5c:16:c7:61:1b:30:9d:2d: 38:e4:ab:fb:05:59:f6:93:bb:82:a5:6b:ed:da:da:6f:cb:bd: e0:29:6d:ed:3f:a7:3c:c1:df:9d:d6:a9:79:23:86:07:c9:f0: 5f:fc:09:4b:ae:f1:e2:d0:f5:c4:23:35:d7:f1:62:f0:13:5d: 71:a8:81:a5:1a:4c:2a:cf:6c:29:cd:4e:83:fd:7f:62:ec:ab: 80:07:78:9e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NXiHWuhYJp+8fmqvoVAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjZkMWM5NDQ4OTIxNzk0Njg4ZDUzNDkzYjc3YTBlMDQyMTM1YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlP/3FzJtyRXsHqmijmQEwXcFLLU LFAhmCyzQqsBlPQPWIDceI0a1Cc5x2kzri7LuHIxillmDjtEy5psKhmfGZpsj6Yz ER4/R7V8OGxCrMnpo/X8NGT9SFk8PyW9rK1Yn+sNi43v1BOCWUbSQS2zA+ALKeFR f8NAGN0V4gBE9efd39vHO78geGoanfji/vPgiVZtKOQYAtWEfa/2wphbvfDdTTuT WJUtwIdR+PvZXio7QpqxIjjtk2T83erpKa63nJOZDJYnX96ZFIKTt97xefDApPKY OoCjjyRwV+oR3SxEkuKfY9d+8I+OOzPYlXwpQvINxbWP9K5QhitW7ZtDAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOZtHJRIkheUaI1TSTt3oOBCE1xGMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvNW0wY2xFaVNGNVJvalZOSk8zZWc0RUlUWEVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRnwgT/ MA0GCSqGSIb3DQEBCwUAA4IBAQC/lxZM6IhzawMbeIN/pNilI5x12VBK5+pZbR+V lanAf2iM6/LBiaRWh9m1lBq86gbKi5eqQE8ykGmAknIAk+gTpYXBRwxxtufLFWLM Wq8aNm60hb+4Ud7jiFFkIo9nr1qUBdTgnfLTVDWK5zl60jIG9YO/6imx0eSSO+7p Mcz3iNNn/LC+Hm3a29uxdOmDgaLNuWXZ4Icb8H8eVjn2RKE/Nh00R9JHYuS9gc7J XBbHYRswnS045Kv7BVn2k7uCpWvt2tpvy73gKW3tP6c8wd+d1ql5I4YHyfBf/AlL rvHi0PXEIzXX8WLwE11xqIGlGkwqz2wpzU6D/X9i7KuAB3ie -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:55 2026 by rpki-client