This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/tp30q0xyHfqaBu_Z1AJENNi5OcI.roa File: tp30q0xyHfqaBu_Z1AJENNi5OcI.roa (raw, json) Hash identifier: sgFmSx7QgcQb3jmGEpRoiU+vHeejk7I5MNfriK3pNN4= Subject key identifier: B6:9D:F4:AB:4C:72:1D:FA:9A:06:EF:D9:D4:02:44:34:D8:B9:39:C2 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B1562F929232F46BE7C9C2F9D1C016ED5 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/tp30q0xyHfqaBu_Z1AJENNi5OcI.roa Signing time: Sat 13 Dec 2025 01:46:06 +0000 ROA not before: Sat 13 Dec 2025 01:46:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207299 IP address blocks: 2a14:67c1:a120::/44 maxlen: 48 2a14:67c1:a123::/48 maxlen: 48 2a14:67c1:a128::/48 maxlen: 48 2a14:67c1:a129::/48 maxlen: 48 2a14:67c1:c300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:62:f9:29:23:2f:46:be:7c:9c:2f:9d:1c:01:6e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 13 01:46:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b69df4ab4c721dfa9a06efd9d4024434d8b939c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e4:e8:a8:3b:85:74:5e:e0:dc:7c:fd:b2:39: cb:39:0e:13:20:44:96:af:16:19:5f:fc:8f:34:6a: 19:99:c9:3c:ad:38:40:f0:bf:87:6c:c1:35:04:2e: c2:96:93:1c:f0:62:32:07:90:52:45:6a:b1:0f:b5: a3:c6:02:df:8a:9f:15:6e:68:59:5f:47:fb:10:de: 1f:8c:10:f3:11:0b:2b:66:f3:39:a2:ef:10:c4:df: af:7c:a5:11:bf:96:c4:88:5e:cc:5d:f9:61:e6:83: fd:a4:b6:18:97:77:c2:93:83:2e:49:10:28:f9:ba: 5a:7e:a1:51:9c:42:53:4a:20:2b:a2:bf:97:dd:80: 12:91:52:49:49:78:11:c7:0c:6e:fd:a7:c7:d3:43: da:92:d8:c4:c0:30:d0:23:93:13:94:6b:96:fa:e9: 6c:59:8c:f6:1c:be:01:e0:d4:b4:0a:62:6f:63:58: 0f:2d:30:16:f5:ce:b7:af:f0:0a:f5:9c:84:42:58: 13:7f:66:97:ab:ec:99:b1:9b:22:b2:95:97:29:81: 9e:ac:fa:68:11:47:1a:27:c3:f5:3a:a0:50:1c:26: 72:ad:2e:04:22:3d:af:54:16:d1:fa:73:11:4b:66: a2:7c:f0:f7:ab:bd:30:20:49:73:5d:f1:c2:c7:3c: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:F4:AB:4C:72:1D:FA:9A:06:EF:D9:D4:02:44:34:D8:B9:39:C2 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/tp30q0xyHfqaBu_Z1AJENNi5OcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a120::/44 2a14:67c1:c300::/40 Signature Algorithm: sha256WithRSAEncryption 09:66:fd:b0:bd:43:c0:9e:b4:b0:9e:36:5d:c3:f8:0d:2d:fb: 92:30:64:72:eb:3c:fa:02:22:dc:a4:a0:7c:88:aa:20:1b:72: 04:28:f2:0a:a3:1a:ad:91:59:15:f9:10:d2:6a:1e:32:67:e3: f7:39:66:61:a6:a5:9e:31:c4:29:41:f8:96:2e:0f:f9:73:1f: 00:f4:ad:51:af:03:4e:c8:90:a5:4c:72:1c:09:42:9f:12:42: 14:bd:eb:d2:21:af:c9:ff:5a:f4:81:5f:d6:c2:4b:e0:e7:36: 05:23:f9:57:af:7e:f5:ba:97:30:83:5b:03:c9:34:81:f4:aa: 97:6e:31:88:16:6b:0e:93:49:db:ce:b6:81:6a:18:ba:20:01: a2:f3:f8:cc:9b:7c:07:6f:17:38:04:01:8d:da:7e:1d:f8:2a: 4e:fe:44:1b:3e:8e:2b:4e:04:1f:65:48:b0:c5:c7:9e:e7:84: 49:29:33:84:5b:73:13:12:0d:ab:56:7a:7a:11:5a:c2:35:d2: 5b:c2:30:ec:65:42:23:68:f8:a6:9f:c2:38:0a:8d:02:ea:98: e7:db:5a:d5:8b:93:13:78:ab:90:10:8c:a9:c4:28:fe:e5:34: b0:08:0c:55:72:19:6e:d1:d4:97:5e:9d:4b:80:0c:93:71:fd: d5:89:63:cb -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZsVYvkpIy9GvnycL50cAW7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjEzMDE0NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjlkZjRhYjRjNzIxZGZhOWEwNmVmZDlkNDAyNDQzNGQ4YjkzOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uToqDuFdF7g3Hz9sjnLOQ4TIESW rxYZX/yPNGoZmck8rThA8L+HbME1BC7ClpMc8GIyB5BSRWqxD7WjxgLfip8VbmhZ X0f7EN4fjBDzEQsrZvM5ou8QxN+vfKURv5bEiF7MXflh5oP9pLYYl3fCk4MuSRAo +bpafqFRnEJTSiAror+X3YASkVJJSXgRxwxu/afH00PaktjEwDDQI5MTlGuW+uls WYz2HL4B4NS0CmJvY1gPLTAW9c63r/AK9ZyEQlgTf2aXq+yZsZsispWXKYGerPpo EUcaJ8P1OqBQHCZyrS4EIj2vVBbR+nMRS2aifPD3q70wIElzXfHCxzyQoQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFLad9KtMch36mgbv2dQCRDTYuTnCMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvdHAzMHEweHlIZnFhQnVfWjFBSkVOTmk1T2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhRnwaEg AwYAKhRnwcMwDQYJKoZIhvcNAQELBQADggEBAAlm/bC9Q8CetLCeNl3D+A0t+5Iw ZHLrPPoCItykoHyIqiAbcgQo8gqjGq2RWRX5ENJqHjJn4/c5ZmGmpZ4xxClB+JYu D/lzHwD0rVGvA07IkKVMchwJQp8SQhS969Ihr8n/WvSBX9bCS+DnNgUj+VevfvW6 lzCDWwPJNIH0qpduMYgWaw6TSdvOtoFqGLogAaLz+MybfAdvFzgEAY3afh34Kk7+ RBs+jitOBB9lSLDFx57nhEkpM4RbcxMSDatWenoRWsI10lvCMOxlQiNo+KafwjgK jQLqmOfbWtWLkxN4q5AQjKnEKP7lNLAIDFVyGW7R1JdenUuADJNx/dWJY8s= -----END CERTIFICATE-----Generated at Sat Dec 20 01:10:04 2025 by rpki-client