This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eoZ6LYmmV8zb6CZuHEdR8LdEkoM.roa File: eoZ6LYmmV8zb6CZuHEdR8LdEkoM.roa (raw, json) Hash identifier: 9+OUMy8HRIjZaYDFGA25eZSocWPqkx9mtrCsPCp4xf4= Subject key identifier: 7A:86:7A:2D:89:A6:57:CC:DB:E8:26:6E:1C:47:51:F0:B7:44:92:83 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B82646C1CBD85B75805A20184FA13A245 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eoZ6LYmmV8zb6CZuHEdR8LdEkoM.roa Signing time: Sat 03 Jan 2026 05:46:17 +0000 ROA not before: Sat 03 Jan 2026 05:46:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7721 IP address blocks: 2a14:67c3:660::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:82:64:6c:1c:bd:85:b7:58:05:a2:01:84:fa:13:a2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 3 05:46:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a867a2d89a657ccdbe8266e1c4751f0b7449283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:1c:73:c3:8c:d1:09:35:18:94:9f:e9:64: 53:a7:3d:73:40:fc:9b:6e:be:9e:c9:65:33:7e:ac: f4:f8:9a:04:00:20:93:09:13:8b:4e:3f:8f:7b:d8: 12:e3:1f:c6:6c:20:3d:f5:a5:d2:93:e5:94:d6:b4: 62:9c:22:65:3b:de:79:fb:7f:cc:9f:c4:02:21:a7: bc:3a:45:d8:ba:16:80:02:69:96:2b:69:2a:92:b5: 4e:71:a3:5a:3f:b9:76:a9:55:a7:37:13:cc:27:02: 03:b7:07:0c:0a:4d:97:6f:80:e2:f5:f4:78:51:3e: ec:1e:dc:ec:dd:88:fc:30:a3:a4:1f:94:05:89:9e: 95:7f:9b:cb:8a:b4:a5:4b:a1:32:69:82:53:48:23: 8d:07:37:68:0b:ca:81:e1:ec:81:06:22:ea:a4:06: bd:2e:5c:9c:d4:76:8f:c2:ab:44:e2:77:85:e7:6b: 3e:5e:ec:26:c9:02:39:95:dc:cc:43:2d:09:27:b8: b2:06:b6:67:8d:e5:07:d5:3d:d3:50:09:d9:ba:1f: 17:d1:ec:c0:2f:40:91:b2:f0:0a:c7:fd:4c:b1:97: 48:a4:2b:5c:76:dc:80:2a:c3:85:a7:36:dd:f7:58: 60:c4:90:88:45:2e:39:dc:d8:15:a4:ea:78:3f:b0: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:86:7A:2D:89:A6:57:CC:DB:E8:26:6E:1C:47:51:F0:B7:44:92:83 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eoZ6LYmmV8zb6CZuHEdR8LdEkoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c3:660::/44 Signature Algorithm: sha256WithRSAEncryption 19:2f:81:35:f2:cf:cd:24:76:b1:ec:27:1f:5e:75:7f:e5:88: 14:7d:bc:9a:da:56:9c:93:f3:4d:39:4a:bd:7f:17:71:9b:d5: 2e:a9:08:a9:f8:49:8b:da:32:70:19:fa:1e:c7:66:64:a7:8d: c4:14:05:89:30:c5:8b:73:1e:60:7f:79:2f:c2:77:02:67:39: e0:b1:e5:2b:d3:6a:09:54:95:79:d3:ad:4a:81:1a:29:81:76: 01:5d:af:e2:c8:9e:a6:7d:8c:f0:44:c3:26:ce:30:1d:5c:42: 17:07:e1:8a:9f:5e:c9:c6:eb:4b:87:9a:23:67:86:67:33:c4: 36:82:c2:34:0d:e1:16:8d:9c:ab:23:63:8f:4c:90:d8:69:6d: e8:a7:d6:bc:cb:c3:9b:a9:af:96:65:93:88:d4:0b:f5:01:d0: f0:af:ca:48:e9:e3:8b:2b:20:a0:ad:f3:32:d0:0a:85:47:34: 64:44:24:fb:9d:19:94:25:80:10:9a:79:76:37:2c:23:ec:e9: ea:da:61:43:d2:70:47:2e:ec:b2:7e:2a:b5:c5:2d:13:bc:f9: d9:c8:f9:6c:99:55:99:7c:82:1a:c5:06:d8:8d:4d:9e:de:6c: 50:df:d7:90:b5:10:78:70:d2:e2:c5:f8:77:a2:fd:a1:56:70: af:23:a4:74 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuCZGwcvYW3WAWiAYT6E6JFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTAzMDU0NjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTg2N2EyZDg5YTY1N2NjZGJlODI2NmUxYzQ3NTFmMGI3NDQ5MjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ckcc8OM0Qk1GJSf6WRTpz1zQPyb br6eyWUzfqz0+JoEACCTCROLTj+Pe9gS4x/GbCA99aXSk+WU1rRinCJlO955+3/M n8QCIae8OkXYuhaAAmmWK2kqkrVOcaNaP7l2qVWnNxPMJwIDtwcMCk2Xb4Di9fR4 UT7sHtzs3Yj8MKOkH5QFiZ6Vf5vLirSlS6EyaYJTSCONBzdoC8qB4eyBBiLqpAa9 Llyc1HaPwqtE4neF52s+XuwmyQI5ldzMQy0JJ7iyBrZnjeUH1T3TUAnZuh8X0ezA L0CRsvAKx/1MsZdIpCtcdtyAKsOFpzbd91hgxJCIRS453NgVpOp4P7BDcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHqGei2JplfM2+gmbhxHUfC3RJKDMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvZW9aNkxZbW1WOHpiNkNadUhFZFI4TGRFa29NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwwZg MA0GCSqGSIb3DQEBCwUAA4IBAQAZL4E18s/NJHax7CcfXnV/5YgUfbya2lack/NN OUq9fxdxm9UuqQip+EmL2jJwGfoex2Zkp43EFAWJMMWLcx5gf3kvwncCZzngseUr 02oJVJV5061KgRopgXYBXa/iyJ6mfYzwRMMmzjAdXEIXB+GKn17JxutLh5ojZ4Zn M8Q2gsI0DeEWjZyrI2OPTJDYaW3op9a8y8Obqa+WZZOI1Av1AdDwr8pI6eOLKyCg rfMy0AqFRzRkRCT7nRmUJYAQmnl2Nywj7Onq2mFD0nBHLuyyfiq1xS0TvPnZyPls mVWZfIIaxQbYjU2e3mxQ39eQtRB4cNLixfh3ov2hVnCvI6R0 -----END CERTIFICATE-----Generated at Thu Jan 22 09:27:32 2026 by rpki-client