This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/98yMPwUJ0_5s9parrAZCLX2DdmU.roa File: 98yMPwUJ0_5s9parrAZCLX2DdmU.roa (raw, json) Hash identifier: vO+2NZ+ddBEX0mLI2chI3rzVjUuHgjvVqxuLV6tA9qA= Subject key identifier: F7:CC:8C:3F:05:09:D3:FE:6C:F6:96:AB:AC:06:42:2D:7D:83:76:65 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B8365B009837AA080AE45C30BECEDBA1B Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/98yMPwUJ0_5s9parrAZCLX2DdmU.roa Signing time: Sat 03 Jan 2026 10:27:18 +0000 ROA not before: Sat 03 Jan 2026 10:27:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199310 IP address blocks: 2a14:67c3:800::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:83:65:b0:09:83:7a:a0:80:ae:45:c3:0b:ec:ed:ba:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 3 10:27:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7cc8c3f0509d3fe6cf696abac06422d7d837665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:e1:bb:c8:d0:5d:d0:51:3f:25:4c:99:9d: b6:b8:b3:1f:15:67:2d:b0:e3:d0:bd:40:c6:ce:8d: 70:3c:9e:87:79:b7:7f:54:e6:fc:dd:c0:49:e0:1e: f7:f2:69:56:7f:c8:c3:64:6e:a6:a2:e9:7d:9b:09: 09:fb:1a:6c:02:42:6b:1e:e9:ba:54:e8:d9:7e:fe: d8:63:9c:96:cc:54:dc:4e:95:08:1c:9e:7d:bb:3b: 9b:81:8c:92:9b:26:91:25:47:8c:60:8e:84:83:00: 48:a6:bd:72:4f:53:33:f3:37:51:f8:88:72:30:dd: b0:fd:e4:48:9a:74:78:d3:60:36:14:d8:1e:b0:bf: 20:d0:d9:59:b5:e6:e8:b9:e8:62:77:82:b9:80:55: 36:eb:8d:a6:57:f3:f7:0e:30:fa:dd:e7:83:5b:4c: 27:27:94:23:05:d4:d6:00:90:2d:81:5b:85:79:ab: 13:92:e9:11:4e:9a:ec:38:fd:b6:e9:25:d1:83:b6: f5:c3:43:ec:54:fa:c3:2a:69:c3:ae:88:ba:22:42: b9:dd:7d:42:c7:8a:2e:41:b1:a9:a3:09:94:61:69: 10:a3:5e:12:2a:00:d5:23:b7:4a:66:8b:d7:43:5c: f6:e3:62:62:0a:6c:c4:6c:96:1d:aa:b2:d9:f7:4b: 31:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:8C:3F:05:09:D3:FE:6C:F6:96:AB:AC:06:42:2D:7D:83:76:65 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/98yMPwUJ0_5s9parrAZCLX2DdmU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:800::/44 Signature Algorithm: sha256WithRSAEncryption 79:2e:d4:e0:3a:b5:ab:46:ad:65:67:39:8d:80:ab:8d:14:69: 4f:9b:54:8b:55:d2:aa:a9:8a:30:b3:01:63:e6:fd:23:3c:d6: a4:d5:13:6d:d3:45:12:b6:88:de:ed:fb:ea:be:24:dd:39:8f: c3:0b:ba:e7:ce:a7:15:9e:b3:1e:d8:36:ad:26:96:08:e1:2d: 9a:b4:c4:08:da:99:84:a1:8e:02:e2:a1:cc:f7:e3:d7:8a:f2: 66:d4:90:a9:91:dc:27:9a:86:90:25:54:d7:9d:46:21:a4:4a: f9:02:4b:d2:57:8b:df:e3:59:53:92:e6:70:5a:1e:3f:76:56: f4:59:dc:0d:18:9e:7c:f7:ab:81:75:90:b7:44:37:5f:65:e9: f8:e0:2c:5a:9e:b0:94:c9:b0:c0:b0:14:7b:1c:17:12:d9:39: 92:60:fa:76:1f:64:c7:b0:3e:e1:97:4c:4c:8f:ce:2c:1e:e1: 34:cf:d5:75:46:d1:fa:d3:da:4d:68:49:61:30:0f:14:68:6a: bf:aa:dd:c4:e5:6c:03:b5:ed:69:28:72:10:a1:0f:ae:d1:4f: 45:fa:a3:9e:89:92:bf:5c:16:7a:6f:3f:cd:8e:95:1e:ce:68: e3:9f:fe:05:c3:26:85:00:65:9d:77:b2:c3:f1:9e:3b:4e:34: e9:54:bd:af -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuDZbAJg3qggK5Fwwvs7bobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAzMTAyNzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2NjOGMzZjA1MDlkM2ZlNmNmNjk2YWJhYzA2NDIyZDdkODM3NjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NHhu8jQXdBRPyVMmZ22uLMfFWct sOPQvUDGzo1wPJ6Hebd/VOb83cBJ4B738mlWf8jDZG6moul9mwkJ+xpsAkJrHum6 VOjZfv7YY5yWzFTcTpUIHJ59uzubgYySmyaRJUeMYI6EgwBIpr1yT1Mz8zdR+Ihy MN2w/eRImnR402A2FNgesL8g0NlZtebouehid4K5gFU2642mV/P3DjD63eeDW0wn J5QjBdTWAJAtgVuFeasTkukRTprsOP226SXRg7b1w0PsVPrDKmnDroi6IkK53X1C x4ouQbGpowmUYWkQo14SKgDVI7dKZovXQ1z242JiCmzEbJYdqrLZ90sxswIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPfMjD8FCdP+bPaWq6wGQi19g3ZlMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvOTh5TVB3VUowXzVzOXBhcnJBWkNMWDJEZG1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwwgA MA0GCSqGSIb3DQEBCwUAA4IBAQB5LtTgOrWrRq1lZzmNgKuNFGlPm1SLVdKqqYow swFj5v0jPNak1RNt00UStoje7fvqviTdOY/DC7rnzqcVnrMe2DatJpYI4S2atMQI 2pmEoY4C4qHM9+PXivJm1JCpkdwnmoaQJVTXnUYhpEr5AkvSV4vf41lTkuZwWh4/ dlb0WdwNGJ5896uBdZC3RDdfZen44CxanrCUybDAsBR7HBcS2TmSYPp2H2THsD7h l0xMj84sHuE0z9V1RtH609pNaElhMA8UaGq/qt3E5WwDte1pKHIQoQ+u0U9F+qOe iZK/XBZ6bz/NjpUezmjjn/4FwyaFAGWdd7LD8Z47TjTpVL2v -----END CERTIFICATE-----Generated at Sun Jan 18 16:38:00 2026 by rpki-client