This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BJu1lLaN9YrdJpwYFZekLqBWFn8.roa File: BJu1lLaN9YrdJpwYFZekLqBWFn8.roa (raw, json) Hash identifier: 6WoCx+yU7FCTGdyKc4LbFdrphh44W+j9PX4zrDH9rnM= Subject key identifier: 04:9B:B5:94:B6:8D:F5:8A:DD:26:9C:18:15:97:A4:2E:A0:56:16:7F Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BDC4891B15F9C70720A2574DF1799681F Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BJu1lLaN9YrdJpwYFZekLqBWFn8.roa Signing time: Tue 20 Jan 2026 16:41:41 +0000 ROA not before: Tue 20 Jan 2026 16:41:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202464 IP address blocks: 2a14:67c3:6880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:48:91:b1:5f:9c:70:72:0a:25:74:df:17:99:68:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 20 16:41:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=049bb594b68df58add269c181597a42ea056167f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:ea:ae:cb:e1:1c:86:bf:1d:f9:fa:00:c6: 0f:09:15:00:a1:2f:cf:e3:62:02:81:42:d6:fd:19: 25:3a:8c:68:19:9b:34:a6:e1:77:e8:17:74:10:c4: ad:f8:2b:77:e5:5c:f4:31:7d:9d:d5:98:18:8e:be: f1:74:85:e9:d9:9d:fb:db:46:4e:e0:cc:2f:47:b2: 63:a9:42:4c:d9:2e:20:e8:59:6d:62:ac:4e:be:c3: 3f:c1:1b:d7:5a:aa:11:f9:ce:65:41:b9:ff:f0:7c: 70:a4:00:9d:73:8d:67:78:24:5f:88:f2:e9:14:c0: a2:71:36:5d:05:35:57:2e:6f:ba:db:3c:ef:4d:c9: 4a:20:94:3c:f4:b6:4b:ac:ba:65:5d:b0:2f:48:61: 1c:2d:b8:63:be:05:c1:da:16:f2:a6:07:62:af:3c: de:dd:64:d7:d6:07:c1:15:f2:a1:f6:93:2f:ac:a3: cc:99:52:ae:08:eb:5f:55:13:d7:8c:98:1f:bf:80: b1:8d:fa:24:ee:e9:80:22:97:0c:f2:ce:49:b3:ff: b1:49:62:85:f3:40:fe:09:cb:57:3e:0d:94:cf:68: 8e:7e:72:dc:68:30:4b:bf:5b:df:cb:45:3b:5d:b8: 1d:9e:a3:ec:30:b7:60:76:e3:90:04:db:54:8f:53: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9B:B5:94:B6:8D:F5:8A:DD:26:9C:18:15:97:A4:2E:A0:56:16:7F X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BJu1lLaN9YrdJpwYFZekLqBWFn8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:6880::/48 Signature Algorithm: sha256WithRSAEncryption a2:b6:3a:2e:1b:95:eb:14:0f:cb:97:4e:2e:a8:f1:04:fb:be: 93:76:77:4c:86:e5:5c:1b:83:de:20:d7:cb:f1:4a:98:92:55: 6f:93:9b:f5:70:e2:db:56:97:10:a4:2e:14:d3:27:a7:2e:59: f9:2a:4c:d5:da:51:3d:f4:50:a3:1f:2d:bc:ff:59:2a:d3:79: 13:fa:34:85:dc:fa:12:74:49:c9:11:ab:2a:34:3b:54:19:76: a6:03:e5:83:cc:07:ac:76:d0:aa:82:7b:f7:5c:95:6b:e3:f9: 79:bc:31:ce:fa:cd:73:58:fd:9d:7b:bd:27:8f:80:70:cc:51: f2:2c:f8:2a:1b:46:27:56:37:18:14:50:15:cb:90:1d:11:3e: a3:2e:b1:9d:8a:75:1e:8b:85:e9:52:63:de:f9:45:09:ae:fc: 4c:6a:23:eb:86:65:e0:b1:64:90:7e:71:f3:f4:56:24:8d:28: 25:d0:62:9d:11:21:e8:d9:37:6b:1d:8d:af:cb:39:d7:14:71: da:16:7e:c5:3c:d6:9c:87:1f:a6:89:ec:79:5e:f1:f3:37:d0: 09:86:44:e3:fb:50:e2:8e:7b:11:c7:88:3a:5b:20:63:e8:3f: cb:6b:1c:93:92:6d:a6:8c:ea:99:a2:0a:f6:5c:99:d1:a4:76: b4:38:08:de -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvcSJGxX5xwcgoldN8XmWgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTIwMTY0MTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDliYjU5NGI2OGRmNThhZGQyNjljMTgxNTk3YTQyZWEwNTYxNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dbqrsvhHIa/Hfn6AMYPCRUAoS/P 42ICgULW/RklOoxoGZs0puF36Bd0EMSt+Ct35Vz0MX2d1ZgYjr7xdIXp2Z3720ZO 4MwvR7JjqUJM2S4g6FltYqxOvsM/wRvXWqoR+c5lQbn/8HxwpACdc41neCRfiPLp FMCicTZdBTVXLm+62zzvTclKIJQ89LZLrLplXbAvSGEcLbhjvgXB2hbypgdirzze 3WTX1gfBFfKh9pMvrKPMmVKuCOtfVRPXjJgfv4Cxjfok7umAIpcM8s5Js/+xSWKF 80D+CctXPg2Uz2iOfnLcaDBLv1vfy0U7XbgdnqPsMLdgduOQBNtUj1NFPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFASbtZS2jfWK3SacGBWXpC6gVhZ/MB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvQkp1MWxMYU45WXJkSnB3WUZaZWtMcUJXRm44LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRnw2iA MA0GCSqGSIb3DQEBCwUAA4IBAQCitjouG5XrFA/Ll04uqPEE+76TdndMhuVcG4Pe INfL8UqYklVvk5v1cOLbVpcQpC4U0yenLln5KkzV2lE99FCjHy28/1kq03kT+jSF 3PoSdEnJEasqNDtUGXamA+WDzAesdtCqgnv3XJVr4/l5vDHO+s1zWP2de70nj4Bw zFHyLPgqG0YnVjcYFFAVy5AdET6jLrGdinUei4XpUmPe+UUJrvxMaiPrhmXgsWSQ fnHz9FYkjSgl0GKdESHo2TdrHY2vyznXFHHaFn7FPNachx+miex5XvHzN9AJhkTj +1DijnsRx4g6WyBj6D/LaxyTkm2mjOqZogr2XJnRpHa0OAje -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:30 2026 by rpki-client