This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hVR1CGuTcCA-lkO1_4oapnmhQiQ.roa File: hVR1CGuTcCA-lkO1_4oapnmhQiQ.roa (raw, json) Hash identifier: epefwsKs/IoRFTzGBAT5D7sRjZJ0WF4yRAU8TGHgH8I= Subject key identifier: 85:54:75:08:6B:93:70:20:3E:96:43:B5:FF:8A:1A:A6:79:A1:42:24 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BA29B2226CB678DEA644FD37540EA2C13 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hVR1CGuTcCA-lkO1_4oapnmhQiQ.roa Signing time: Fri 09 Jan 2026 11:53:54 +0000 ROA not before: Fri 09 Jan 2026 11:53:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204539 IP address blocks: 2a14:67c1:b582::/48 maxlen: 48 2a14:67c1:b588::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:9b:22:26:cb:67:8d:ea:64:4f:d3:75:40:ea:2c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 9 11:53:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=855475086b9370203e9643b5ff8a1aa679a14224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:6d:9d:ee:25:ed:0b:7b:6d:69:58:02:56: 1c:ce:4e:47:88:ba:d0:88:2d:9e:9c:3e:d6:ff:ba: 58:38:10:0d:93:15:39:82:de:97:96:6a:70:bb:c9: 2c:8b:44:e3:a0:77:1e:a9:64:bd:20:49:dc:21:45: 48:81:c9:13:5f:83:af:2e:ac:5d:84:fd:82:1a:ff: 16:64:ca:9b:af:22:67:12:f8:64:59:2d:95:a8:dc: 9e:4f:09:f0:b4:69:21:12:ef:71:6f:e1:e9:93:60: 86:f6:2d:9d:e9:d9:98:42:8d:5f:4c:c9:e8:64:a7: 59:c8:36:30:fd:2b:b7:95:40:0b:b5:6f:df:d5:6f: 61:d1:eb:5e:76:5d:93:81:9e:3a:2b:ab:a8:79:bc: 84:26:bd:d5:2f:8e:b6:37:2c:5e:1a:bc:d5:8f:47: d7:d8:71:94:58:7b:d1:4a:6d:2b:71:00:59:04:f3: e8:ad:6d:d4:5f:31:7e:17:51:31:4d:0f:bd:94:30: 03:4a:70:9a:10:92:98:fb:57:28:06:9f:8b:17:d8: 30:ef:94:fe:29:fb:1f:fa:a6:90:79:76:5c:be:7e: af:cb:2f:c6:4b:47:40:9d:47:0a:6e:46:22:2d:3c: e5:4c:ed:86:d1:fa:aa:82:ea:3d:26:76:f6:f0:11: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:54:75:08:6B:93:70:20:3E:96:43:B5:FF:8A:1A:A6:79:A1:42:24 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hVR1CGuTcCA-lkO1_4oapnmhQiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:b582::/48 2a14:67c1:b588::/48 Signature Algorithm: sha256WithRSAEncryption 6a:1f:fb:78:4c:82:80:93:26:54:d4:b2:7c:54:32:da:79:f6: 5b:a9:85:17:3d:0e:4c:41:1e:f3:49:2f:5d:2f:db:41:78:df: c6:1b:12:87:31:10:f8:8a:73:40:6d:60:12:e3:53:2d:8f:70: 94:70:2a:13:ce:6a:ce:5b:eb:f5:05:f2:66:2f:5a:66:7e:97: 1f:2e:37:38:ae:f2:fc:90:93:60:cb:64:83:1e:58:33:5f:41: 55:34:8f:55:d1:15:42:37:2a:bb:5d:e0:da:1a:5c:fe:00:4f: 30:f6:23:9b:0a:33:e1:c3:20:84:34:4d:4b:d2:67:75:8d:aa: f2:6e:94:22:32:64:60:2c:8b:2e:29:9e:58:f7:cc:fe:04:51: 71:f1:ba:2f:b6:35:f0:d9:29:9c:04:58:73:67:ea:05:82:86: e3:29:f0:ef:78:53:3d:6a:88:3e:42:65:44:84:e7:b5:bf:0f: e7:77:c4:d7:11:6c:ac:30:33:ce:b8:a2:eb:ed:16:f8:e8:dc: 50:7e:81:78:3a:0a:fc:da:03:a0:ac:6a:67:d6:06:d3:6e:92: 42:46:b6:8d:a1:87:13:c7:ff:e4:49:f3:69:d9:85:13:44:46: a9:b3:f8:09:bb:96:f1:97:11:cb:15:f8:b7:ce:4c:20:e7:6b: 59:54:f4:d2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuimyImy2eN6mRP03VA6iwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTA5MTE1MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTU0NzUwODZiOTM3MDIwM2U5NjQzYjVmZjhhMWFhNjc5YTE0MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE1tne4l7Qt7bWlYAlYczk5HiLrQ iC2enD7W/7pYOBANkxU5gt6Xlmpwu8ksi0TjoHceqWS9IEncIUVIgckTX4OvLqxd hP2CGv8WZMqbryJnEvhkWS2VqNyeTwnwtGkhEu9xb+Hpk2CG9i2d6dmYQo1fTMno ZKdZyDYw/Su3lUALtW/f1W9h0etedl2TgZ46K6uoebyEJr3VL462NyxeGrzVj0fX 2HGUWHvRSm0rcQBZBPPorW3UXzF+F1ExTQ+9lDADSnCaEJKY+1coBp+LF9gw75T+ Kfsf+qaQeXZcvn6vyy/GS0dAnUcKbkYiLTzlTO2G0fqqguo9Jnb28BGSjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIVUdQhrk3AgPpZDtf+KGqZ5oUIkMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvaFZSMUNHdVRjQ0EtbGtPMV80b2Fwbm1oUWlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhRnwbWC AwcAKhRnwbWIMA0GCSqGSIb3DQEBCwUAA4IBAQBqH/t4TIKAkyZU1LJ8VDLaefZb qYUXPQ5MQR7zSS9dL9tBeN/GGxKHMRD4inNAbWAS41Mtj3CUcCoTzmrOW+v1BfJm L1pmfpcfLjc4rvL8kJNgy2SDHlgzX0FVNI9V0RVCNyq7XeDaGlz+AE8w9iObCjPh wyCENE1L0md1jarybpQiMmRgLIsuKZ5Y98z+BFFx8bovtjXw2SmcBFhzZ+oFgobj KfDveFM9aog+QmVEhOe1vw/nd8TXEWysMDPOuKLr7Rb46NxQfoF4Ogr82gOgrGpn 1gbTbpJCRraNoYcTx//kSfNp2YUTREaps/gJu5bxlxHLFfi3zkwg52tZVPTS -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:23 2026 by rpki-client