This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/W3Z5LP6_Hco12u7u6j2bvTxSZ0g.roa File: W3Z5LP6_Hco12u7u6j2bvTxSZ0g.roa (raw, json) Hash identifier: qToVxalN8oQRpo8SDqg0vimUm3sXsAx1yndp91sxyeM= Subject key identifier: 5B:76:79:2C:FE:BF:1D:CA:35:DA:EE:EE:EA:3D:9B:BD:3C:52:67:48 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B88AD006CFBF14742822C388C9D67B33E Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/W3Z5LP6_Hco12u7u6j2bvTxSZ0g.roa Signing time: Sun 04 Jan 2026 11:03:17 +0000 ROA not before: Sun 04 Jan 2026 11:03:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214899 IP address blocks: 2a14:67c3:520::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:88:ad:00:6c:fb:f1:47:42:82:2c:38:8c:9d:67:b3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 4 11:03:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b76792cfebf1dca35daeeeeea3d9bbd3c526748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c6:9d:11:7b:81:17:7d:74:16:a3:61:7d:a6: f4:d9:16:d1:ba:ed:ba:cc:ad:83:1f:8a:00:c3:5c: 9a:b5:83:a2:69:d8:ed:a8:25:13:46:b6:42:89:60: 76:02:bb:50:a4:4d:be:ee:de:83:15:cf:bc:f9:ab: 23:67:d4:4d:c0:28:dd:f1:36:3b:c5:2c:75:b1:48: 52:97:dc:e9:1b:15:e0:73:63:11:42:3a:c8:ad:fd: b7:ef:37:e3:a4:43:42:63:6b:c7:6e:6f:49:7c:4a: 5e:92:cf:08:d3:3b:45:66:80:53:13:ca:8d:bf:f8: 90:eb:51:71:49:86:0d:f9:03:78:cd:bc:34:8f:a3: b6:21:d2:f9:53:78:b8:21:be:5d:be:bc:08:35:f7: f2:ee:d1:8e:ab:60:b1:59:fa:3c:8a:1a:b8:bb:bb: 4e:0e:7b:70:32:b8:a9:60:74:6f:08:45:09:ea:f5: 98:54:59:46:35:4a:df:d5:07:7c:cf:b0:95:ee:26: 0e:c1:3d:75:60:da:2f:4f:03:d5:15:aa:7d:26:4d: ae:8f:c8:aa:0c:bd:f3:c2:ec:8d:35:ff:8d:2d:f9: 3e:c4:d4:26:3e:2f:79:16:13:ba:bd:57:5b:13:20: 63:32:16:d6:a5:d6:c9:30:75:7d:0a:92:d1:38:b2: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:76:79:2C:FE:BF:1D:CA:35:DA:EE:EE:EA:3D:9B:BD:3C:52:67:48 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/W3Z5LP6_Hco12u7u6j2bvTxSZ0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:520::/44 Signature Algorithm: sha256WithRSAEncryption 19:bb:ab:ce:84:95:eb:ed:b1:ca:76:28:7e:c0:85:ba:28:e3: f2:f9:4b:48:96:10:ec:01:a9:1c:09:6a:30:e1:54:21:45:25: 1e:d4:ae:04:fc:f7:26:2f:1c:f5:f1:c9:f3:c1:6a:75:76:f5: 9e:ac:9c:85:df:28:07:3d:2e:77:94:0d:48:64:60:78:5d:b3: 4b:b2:24:36:bf:72:30:7e:0b:f7:a5:0e:6d:8b:c6:ef:a6:7c: e2:00:9a:cf:1e:00:56:eb:ee:54:4c:56:43:06:04:b9:ed:ea: bb:69:de:20:bf:15:5f:96:68:d6:88:5a:32:dd:b2:a6:8d:c6: a3:e4:b0:f5:a5:3c:57:bc:1c:42:0d:7b:fe:e0:63:50:e6:83: e2:f3:b7:10:eb:98:0d:e7:c5:5d:cf:be:05:ab:92:ea:32:e1: 88:5b:cf:cc:ae:aa:fe:58:c3:63:51:c8:8c:71:b1:44:ea:6c: 1e:2e:de:ec:10:cd:9a:c2:24:b0:97:91:34:dc:26:35:56:e2: 3a:07:b3:4e:45:f4:bb:9c:50:49:bf:a2:af:99:e3:ff:e0:09: 0e:0f:c1:65:b5:05:61:f7:2b:15:ca:9e:9e:36:49:d2:a2:c4: 59:44:2d:45:a3:9b:bf:3b:e5:ac:87:91:6f:7d:4f:68:04:64: ef:59:ab:af -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuIrQBs+/FHQoIsOIydZ7M+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTA0MTEwMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjc2NzkyY2ZlYmYxZGNhMzVkYWVlZWVlYTNkOWJiZDNjNTI2NzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58adEXuBF310FqNhfab02RbRuu26 zK2DH4oAw1yatYOiadjtqCUTRrZCiWB2ArtQpE2+7t6DFc+8+asjZ9RNwCjd8TY7 xSx1sUhSl9zpGxXgc2MRQjrIrf237zfjpENCY2vHbm9JfEpeks8I0ztFZoBTE8qN v/iQ61FxSYYN+QN4zbw0j6O2IdL5U3i4Ib5dvrwINffy7tGOq2CxWfo8ihq4u7tO DntwMripYHRvCEUJ6vWYVFlGNUrf1Qd8z7CV7iYOwT11YNovTwPVFap9Jk2uj8iq DL3zwuyNNf+NLfk+xNQmPi95FhO6vVdbEyBjMhbWpdbJMHV9CpLROLImXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFt2eSz+vx3KNdru7uo9m708UmdIMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvVzNaNUxQNl9IY28xMnU3dTZqMmJ2VHhTWjBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwwUg MA0GCSqGSIb3DQEBCwUAA4IBAQAZu6vOhJXr7bHKdih+wIW6KOPy+UtIlhDsAakc CWow4VQhRSUe1K4E/PcmLxz18cnzwWp1dvWerJyF3ygHPS53lA1IZGB4XbNLsiQ2 v3Iwfgv3pQ5ti8bvpnziAJrPHgBW6+5UTFZDBgS57eq7ad4gvxVflmjWiFoy3bKm jcaj5LD1pTxXvBxCDXv+4GNQ5oPi87cQ65gN58Vdz74Fq5LqMuGIW8/Mrqr+WMNj UciMcbFE6mweLt7sEM2awiSwl5E03CY1VuI6B7NORfS7nFBJv6KvmeP/4AkOD8Fl tQVh9ysVyp6eNknSosRZRC1Fo5u/O+Wsh5FvfU9oBGTvWauv -----END CERTIFICATE-----Generated at Fri Jan 9 00:25:16 2026 by rpki-client