This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BzMQHlp9-wcnZ7lWlLVZtE8IaE0.roa File: BzMQHlp9-wcnZ7lWlLVZtE8IaE0.roa (raw, json) Hash identifier: lVGUnmwT0uMAs3hW9C0ez6qJeQCK3fcIV57quBUftRM= Subject key identifier: 07:33:10:1E:5A:7D:FB:07:27:67:B9:56:94:B5:59:B4:4F:08:68:4D Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B82236B26274580DDADC2CA290FD0BE85 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BzMQHlp9-wcnZ7lWlLVZtE8IaE0.roa Signing time: Sat 03 Jan 2026 04:35:17 +0000 ROA not before: Sat 03 Jan 2026 04:35:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2a14:67c2:577::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:23:6b:26:27:45:80:dd:ad:c2:ca:29:0f:d0:be:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 3 04:35:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0733101e5a7dfb072767b95694b559b44f08684d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:6d:9b:96:96:40:79:e1:62:1b:f4:e5:84: a9:c5:e8:46:3f:fb:33:92:84:4f:ef:68:d5:3b:6b: 43:be:08:12:61:13:08:9a:a5:f1:29:ae:7e:7d:3e: 9f:17:19:9b:13:d2:cb:80:3b:1a:88:a9:90:0e:3f: ca:c6:0a:0f:30:63:cb:8f:3e:1b:14:d4:50:7e:f5: de:76:b8:99:e0:98:9a:11:8b:20:d7:37:3f:9c:4d: d2:33:60:39:c8:c8:4e:43:b2:02:7e:0e:ec:4e:79: 64:07:4e:69:c8:50:bb:d3:81:fd:23:5c:b7:96:3a: 1d:ef:4f:ce:b6:a0:6e:04:12:5a:51:53:15:a4:4d: 17:7f:14:df:21:9d:81:b0:95:a4:b6:6c:ff:1f:2b: b3:4f:3d:1e:df:7d:1e:bc:ab:f1:cb:c0:6e:96:95: 0d:c6:f3:31:a9:d7:61:0b:d1:04:c4:fc:f3:06:2f: e8:31:d6:25:40:cb:00:d4:b2:1f:c4:8c:af:e3:34: 1f:c7:c5:13:c9:71:ff:4c:74:cd:92:5b:8c:a0:19: c4:df:75:3a:ab:81:a1:dd:33:fc:84:bf:de:3a:b3: 23:07:f0:87:b2:d5:fb:70:d4:75:d4:e7:a4:fe:d3: b1:6d:1b:75:6b:65:47:06:15:81:c9:1e:17:63:63: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:33:10:1E:5A:7D:FB:07:27:67:B9:56:94:B5:59:B4:4F:08:68:4D X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BzMQHlp9-wcnZ7lWlLVZtE8IaE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:577::/48 Signature Algorithm: sha256WithRSAEncryption 7a:fc:3b:0b:94:85:a7:a6:60:81:5c:26:1f:fa:15:e4:f5:90: d9:e0:a8:66:5e:db:ea:a7:5e:ee:e3:5f:22:e3:11:72:7e:6e: 88:67:b6:d4:79:ed:7b:1c:3b:12:c1:c7:a9:5c:06:a9:c0:85: 80:d9:b7:fb:85:ec:34:39:58:ec:7f:f7:c0:46:b8:e3:b2:c7: b7:e8:2f:e9:c5:62:c2:45:60:16:35:94:c9:8b:7e:a6:9a:6e: 4e:d8:1e:d9:fe:8b:3b:7d:fa:3e:79:8c:73:00:c5:dc:18:f7: aa:af:a8:9e:a6:ec:b5:9e:d4:9e:ab:16:d2:ea:01:23:d0:c2: b0:b2:01:12:df:c9:18:77:55:ed:d3:4a:6c:1c:19:9e:64:6b: 5f:cb:f9:81:a6:0b:9e:67:9a:50:86:9a:ad:b3:e2:3f:76:9a: c4:b6:e5:a4:a9:3e:f2:80:42:f1:3e:e0:70:87:a3:43:20:ae: 31:1d:0a:02:ee:3b:4c:ce:76:51:ae:c9:fb:04:43:0f:32:f4: 6f:bc:23:e7:8c:42:90:71:cd:73:8d:cc:7f:f8:ea:75:2a:14: 7d:86:d1:9d:39:4d:c9:9f:5e:6c:82:23:55:a5:84:7f:8e:a1: af:30:86:5c:b0:39:c1:08:56:76:a0:80:f9:40:6b:20:c4:50: 4e:e6:4b:9b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuCI2smJ0WA3a3CyikP0L6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAzMDQzNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzMzMTAxZTVhN2RmYjA3Mjc2N2I5NTY5NGI1NTliNDRmMDg2ODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc1tm5aWQHnhYhv05YSpxehGP/sz koRP72jVO2tDvggSYRMImqXxKa5+fT6fFxmbE9LLgDsaiKmQDj/KxgoPMGPLjz4b FNRQfvXedriZ4JiaEYsg1zc/nE3SM2A5yMhOQ7ICfg7sTnlkB05pyFC704H9I1y3 ljod70/OtqBuBBJaUVMVpE0XfxTfIZ2BsJWktmz/HyuzTz0e330evKvxy8BulpUN xvMxqddhC9EExPzzBi/oMdYlQMsA1LIfxIyv4zQfx8UTyXH/THTNkluMoBnE33U6 q4Gh3TP8hL/eOrMjB/CHstX7cNR11Oek/tOxbRt1a2VHBhWByR4XY2NNDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAczEB5affsHJ2e5VpS1WbRPCGhNMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvQnpNUUhscDktd2NuWjdsV2xMVlp0RThJYUUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRnwgV3 MA0GCSqGSIb3DQEBCwUAA4IBAQB6/DsLlIWnpmCBXCYf+hXk9ZDZ4KhmXtvqp17u 418i4xFyfm6IZ7bUee17HDsSwcepXAapwIWA2bf7hew0OVjsf/fARrjjsse36C/p xWLCRWAWNZTJi36mmm5O2B7Z/os7ffo+eYxzAMXcGPeqr6iepuy1ntSeqxbS6gEj 0MKwsgES38kYd1Xt00psHBmeZGtfy/mBpgueZ5pQhpqts+I/dprEtuWkqT7ygELx PuBwh6NDIK4xHQoC7jtMznZRrsn7BEMPMvRvvCPnjEKQcc1zjcx/+Op1KhR9htGd OU3Jn15sgiNVpYR/jqGvMIZcsDnBCFZ2oID5QGsgxFBO5kub -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:41 2026 by rpki-client