This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/afRiru5bMGwqvFd7QtZxpeJVM4k.roa File: afRiru5bMGwqvFd7QtZxpeJVM4k.roa (raw, json) Hash identifier: tWHbfCfP/MBLLWIu0ggsJUbYuLlzas4U3Fl1AIsERWQ= Subject key identifier: 69:F4:62:AE:EE:5B:30:6C:2A:BC:57:7B:42:D6:71:A5:E2:55:33:89 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BC9C748802E18F88660DA491D06E29E3D Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/afRiru5bMGwqvFd7QtZxpeJVM4k.roa Signing time: Sat 17 Jan 2026 02:27:19 +0000 ROA not before: Sat 17 Jan 2026 02:27:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202396 IP address blocks: 2a14:67c3:9990::/44 maxlen: 48 2a14:67c3:9999::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c9:c7:48:80:2e:18:f8:86:60:da:49:1d:06:e2:9e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 17 02:27:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f462aeee5b306c2abc577b42d671a5e2553389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:19:30:2d:76:ff:66:e0:7d:2e:82:cb:28: a9:5e:55:57:ed:9f:94:e9:8a:97:9f:c3:04:b9:05: 5d:0a:09:82:20:8d:87:53:3f:00:fb:4a:43:5a:50: 52:49:cd:a3:86:53:d1:a0:01:76:9c:6b:43:08:5a: 5a:f6:b6:96:c8:b9:8a:b3:8e:b3:f4:f5:59:3f:59: 5c:31:51:58:18:6b:a9:15:84:e7:38:88:c1:12:2f: f0:35:18:68:eb:6b:95:fd:15:ed:9f:3c:60:59:f9: cb:cc:00:2e:78:57:95:32:20:4a:83:4a:68:67:cb: d3:0b:69:44:dc:c7:3c:7b:f7:4a:42:c7:99:b4:4b: 36:0b:c8:c3:ee:19:da:bb:17:67:ad:41:41:a3:ba: d0:c5:af:67:4a:05:91:5c:b3:c8:1e:a4:77:fe:ec: b6:f4:58:89:a2:f2:72:be:a2:5d:b5:4e:94:d2:59: 83:f1:66:b2:03:f3:15:ce:6d:4f:c4:3e:45:88:24: 0e:c3:ba:86:ee:d6:79:5a:bc:da:d3:df:ef:1d:2a: 84:0f:1d:8d:e8:b7:60:71:12:f1:23:64:b6:47:db: 5a:ea:c7:7b:81:88:9c:29:7a:35:aa:f7:41:62:7f: a3:6a:66:64:91:23:b8:4d:b4:d5:7b:0a:29:c5:2e: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F4:62:AE:EE:5B:30:6C:2A:BC:57:7B:42:D6:71:A5:E2:55:33:89 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/afRiru5bMGwqvFd7QtZxpeJVM4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:9990::/44 Signature Algorithm: sha256WithRSAEncryption 57:62:58:46:9a:a4:c7:46:61:8a:55:43:96:32:b9:3b:22:05: 4a:ed:a3:b8:39:f6:22:3e:64:cd:9b:ee:e1:d0:e9:b9:6f:8b: b5:01:c9:19:d0:40:9b:fc:49:7b:ef:12:5b:b6:0b:bc:73:99: 5f:c4:6c:98:62:9c:50:13:57:4a:ee:40:bf:fd:99:b9:5a:b0: 20:4c:62:11:62:5d:9e:26:44:80:18:72:e9:f5:28:4f:27:4a: 33:f7:a1:d9:b1:b5:95:45:1c:79:20:0d:b3:95:e7:b3:69:f9: be:38:a5:17:a2:a7:6e:e6:e8:89:c4:b1:1e:02:d8:90:b6:8d: e4:a7:3d:bb:86:25:4a:80:db:74:c6:ac:10:fe:a2:56:d4:c4: fd:cc:66:85:4d:4b:3f:2c:d4:7b:2e:87:09:1a:0c:4f:ac:09: 9b:c1:81:fc:5d:15:e4:43:27:f9:3f:93:1a:71:cc:25:dc:56: 49:e7:f0:0d:c9:ed:93:a0:c4:c5:38:89:f6:74:e9:7b:a4:5b: f7:b4:bf:ee:72:fd:ec:56:c2:44:2a:e3:c2:80:16:09:0b:d8: d8:f4:47:23:17:7b:8e:b3:84:06:6a:03:41:2c:f0:ad:62:64: 75:82:34:d5:99:95:7f:1d:2e:25:94:cb:95:9c:5c:de:03:35: ba:84:52:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvJx0iALhj4hmDaSR0G4p49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTE3MDIyNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWY0NjJhZWVlNWIzMDZjMmFiYzU3N2I0MmQ2NzFhNWUyNTUzMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw40ZMC12/2bgfS6CyyipXlVX7Z+U 6YqXn8MEuQVdCgmCII2HUz8A+0pDWlBSSc2jhlPRoAF2nGtDCFpa9raWyLmKs46z 9PVZP1lcMVFYGGupFYTnOIjBEi/wNRho62uV/RXtnzxgWfnLzAAueFeVMiBKg0po Z8vTC2lE3Mc8e/dKQseZtEs2C8jD7hnauxdnrUFBo7rQxa9nSgWRXLPIHqR3/uy2 9FiJovJyvqJdtU6U0lmD8WayA/MVzm1PxD5FiCQOw7qG7tZ5Wrza09/vHSqEDx2N 6LdgcRLxI2S2R9ta6sd7gYicKXo1qvdBYn+jamZkkSO4TbTVewopxS4kUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGn0Yq7uWzBsKrxXe0LWcaXiVTOJMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvYWZSaXJ1NWJNR3dxdkZkN1F0WnhwZUpWTTRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnw5mQ MA0GCSqGSIb3DQEBCwUAA4IBAQBXYlhGmqTHRmGKVUOWMrk7IgVK7aO4OfYiPmTN m+7h0Om5b4u1AckZ0ECb/El77xJbtgu8c5lfxGyYYpxQE1dK7kC//Zm5WrAgTGIR Yl2eJkSAGHLp9ShPJ0oz96HZsbWVRRx5IA2zleezafm+OKUXoqdu5uiJxLEeAtiQ to3kpz27hiVKgNt0xqwQ/qJW1MT9zGaFTUs/LNR7LocJGgxPrAmbwYH8XRXkQyf5 P5Maccwl3FZJ5/ANye2ToMTFOIn2dOl7pFv3tL/ucv3sVsJEKuPCgBYJC9jY9Ecj F3uOs4QGagNBLPCtYmR1gjTVmZV/HS4llMuVnFzeAzW6hFKs -----END CERTIFICATE-----Generated at Mon Jan 19 10:29:52 2026 by rpki-client