This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/pVRJjAXhKsCtdzmxDcJ2bZjJf3M.roa File: pVRJjAXhKsCtdzmxDcJ2bZjJf3M.roa (raw, json) Hash identifier: K4OYonCbXBWCF0140HRoWQH0wXOqWq7Ea+i/kk5nHio= Subject key identifier: A5:54:49:8C:05:E1:2A:C0:AD:77:39:B1:0D:C2:76:6D:98:C9:7F:73 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019AF9340F3781ACACEF0218583B40F618D4 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/pVRJjAXhKsCtdzmxDcJ2bZjJf3M.roa Signing time: Sun 07 Dec 2025 14:25:29 +0000 ROA not before: Sun 07 Dec 2025 14:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 396982 IP address blocks: 2a14:67c2:577::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:34:0f:37:81:ac:ac:ef:02:18:58:3b:40:f6:18:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 7 14:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a554498c05e12ac0ad7739b10dc2766d98c97f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:97:ec:28:02:00:c9:71:8d:f5:85:4e:38: 4a:2a:ec:ee:7e:60:83:b0:14:3f:3b:a1:f1:b7:36: ba:58:8f:2f:47:60:0b:4c:cd:87:97:27:a6:13:53: c4:3a:c2:04:34:ca:97:0a:58:54:18:59:de:92:67: d7:23:14:91:82:03:42:26:45:c4:96:f1:42:6b:f6: ae:d2:51:3e:22:da:64:7c:5e:95:10:dc:29:3e:a1: 68:be:e0:13:a2:7e:74:c0:de:03:b8:c0:d3:a1:69: f4:bd:94:cc:7a:21:ed:cf:0b:32:b3:6b:45:27:bf: 92:93:c6:46:34:85:fc:d7:ca:d7:7c:c8:27:27:56: 57:91:eb:a0:ad:be:a6:be:9a:79:88:b3:b8:60:78: 19:29:ea:14:f0:e2:38:df:24:84:93:be:79:7b:36: 37:a8:2d:11:81:d1:d9:2a:d2:fd:09:19:1b:a4:aa: a2:52:c1:d8:bd:12:84:d0:e1:95:cc:df:21:83:5a: 9f:92:f6:70:4c:6a:56:9a:14:79:82:15:72:fb:08: 3a:39:2a:56:9b:d8:80:ad:4b:c8:fc:3a:18:e4:a2: 21:0a:7f:38:b1:1d:66:c9:63:72:e2:a0:63:99:c0: e7:80:9e:c5:2c:73:02:70:66:bb:f7:3b:74:69:30: c3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:54:49:8C:05:E1:2A:C0:AD:77:39:B1:0D:C2:76:6D:98:C9:7F:73 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/pVRJjAXhKsCtdzmxDcJ2bZjJf3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:577::/48 Signature Algorithm: sha256WithRSAEncryption 68:ae:be:97:00:f1:5b:4a:48:e1:20:0c:c7:d1:9c:a1:47:fd: 52:c0:5c:1e:60:89:8f:e1:ce:13:44:46:1d:fd:2f:d1:2e:a9: bd:5a:c7:d8:ec:e0:9d:84:8f:a0:79:a6:47:47:a9:62:4b:4e: 51:32:22:dc:52:1f:d0:89:db:33:8e:3b:34:1d:a0:71:9a:04: 4b:e2:4a:5e:34:ed:fa:67:65:9c:d1:48:84:de:69:73:f9:b5: 13:2f:98:d6:8f:a8:c8:69:67:ff:6f:29:7e:75:66:6a:40:50: ed:5d:9d:de:fb:84:25:ad:e3:0d:f5:9f:8a:4b:e9:58:62:fb: a6:c3:cb:70:45:26:e2:c7:e0:c2:1a:e6:2e:74:15:0d:3a:cb: 3b:aa:8d:6b:88:af:cb:11:70:ae:ee:42:20:ed:a3:9e:b2:7d: 98:4b:47:18:4f:58:4e:ed:3d:54:64:35:bc:7b:e0:7c:d0:2e: 19:1a:f0:3b:bb:5c:70:22:a7:4f:5e:20:2b:0e:90:1a:23:96: 70:c9:6f:0b:65:f3:b0:75:d5:b0:ac:6d:89:18:33:69:ed:89: f7:1c:f8:b5:8c:d1:83:f6:d3:09:95:66:38:43:b7:f2:43:c3: 22:7b:55:40:bb:6f:f6:ac:1f:f8:89:16:d3:6d:9a:3e:2e:80: c9:c9:1c:21 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZr5NA83gays7wIYWDtA9hjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjA3MTQyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTU0NDk4YzA1ZTEyYWMwYWQ3NzM5YjEwZGMyNzY2ZDk4Yzk3ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4qX7CgCAMlxjfWFTjhKKuzufmCD sBQ/O6Hxtza6WI8vR2ALTM2HlyemE1PEOsIENMqXClhUGFnekmfXIxSRggNCJkXE lvFCa/au0lE+ItpkfF6VENwpPqFovuATon50wN4DuMDToWn0vZTMeiHtzwsys2tF J7+Sk8ZGNIX818rXfMgnJ1ZXkeugrb6mvpp5iLO4YHgZKeoU8OI43ySEk755ezY3 qC0RgdHZKtL9CRkbpKqiUsHYvRKE0OGVzN8hg1qfkvZwTGpWmhR5ghVy+wg6OSpW m9iArUvI/DoY5KIhCn84sR1myWNy4qBjmcDngJ7FLHMCcGa79zt0aTDDVQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKVUSYwF4SrArXc5sQ3Cdm2YyX9zMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvcFZSSmpBWGhLc0N0ZHpteERjSjJiWmpKZjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRnwgV3 MA0GCSqGSIb3DQEBCwUAA4IBAQBorr6XAPFbSkjhIAzH0ZyhR/1SwFweYImP4c4T REYd/S/RLqm9WsfY7OCdhI+geaZHR6liS05RMiLcUh/Qidszjjs0HaBxmgRL4kpe NO36Z2Wc0UiE3mlz+bUTL5jWj6jIaWf/byl+dWZqQFDtXZ3e+4QlreMN9Z+KS+lY Yvumw8twRSbix+DCGuYudBUNOss7qo1riK/LEXCu7kIg7aOesn2YS0cYT1hO7T1U ZDW8e+B80C4ZGvA7u1xwIqdPXiArDpAaI5ZwyW8LZfOwddWwrG2JGDNp7Yn3HPi1 jNGD9tMJlWY4Q7fyQ8Mie1VAu2/2rB/4iRbTbZo+LoDJyRwh -----END CERTIFICATE-----Generated at Wed Dec 10 08:04:04 2025 by rpki-client