This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/MQtqY1zngEoEZeaZeS9Shc-1xzc.roa File: MQtqY1zngEoEZeaZeS9Shc-1xzc.roa (raw, json) Hash identifier: mfit1VS6zPMi/vnxJBHK5rADYnJtg6rsd0P4F3stTg4= Subject key identifier: 31:0B:6A:63:5C:E7:80:4A:04:65:E6:99:79:2F:52:85:CF:B5:C7:37 Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5 Certificate serial: 019B4FAAC2AD2DE70C23DF9513725AC819E1 Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/MQtqY1zngEoEZeaZeS9Shc-1xzc.roa Signing time: Wed 24 Dec 2025 09:22:29 +0000 ROA not before: Wed 24 Dec 2025 09:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214132 IP address blocks: 2001:67c:f24::/48 maxlen: 48 2a12:e00:100::/40 maxlen: 40 2a12:e00:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:aa:c2:ad:2d:e7:0c:23:df:95:13:72:5a:c8:19:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5 Validity Not Before: Dec 24 09:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=310b6a635ce7804a0465e699792f5285cfb5c737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a7:b7:ed:bd:6e:c8:6a:2e:93:10:11:9f:c2: b6:b8:cc:1b:b8:fe:a6:bc:a8:14:58:4f:24:89:4d: 97:96:fc:f4:5f:ca:b2:7a:af:9c:51:f7:b5:64:00: 2d:5d:fa:b0:66:9b:0e:6d:db:70:9c:00:20:a3:83: ab:8c:7b:3b:df:8a:08:27:3c:2d:a1:9b:5c:24:a6: 31:c5:34:18:df:3b:25:59:b9:83:06:d8:30:63:b8: de:8f:5a:de:22:da:02:2d:33:32:91:b3:a6:db:c9: 21:ad:06:bf:d4:f1:31:45:5c:e9:9f:26:d4:fc:09: 6c:78:59:31:7f:e6:7b:7b:ef:6c:bb:a8:26:b0:ed: cb:6f:ec:82:92:fd:08:d9:90:91:f5:7e:6c:bc:82: 0b:24:40:3a:3e:a7:ed:e6:b2:42:26:5c:40:74:a8: 0d:5b:71:9d:e5:1c:e9:bd:55:78:c2:0b:89:49:54: 61:61:fc:ee:11:75:f0:66:07:a4:37:fa:7e:2f:b5: 4b:58:76:52:87:5e:15:10:06:a1:c6:d5:28:54:f4: 28:43:d1:bc:87:17:4d:2b:87:53:24:52:dc:03:48: e6:4c:1c:80:e0:79:3b:02:2c:48:36:c9:d2:f7:37: 7f:b6:14:71:b3:88:e3:d2:f8:52:c1:39:a2:4f:02: 76:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0B:6A:63:5C:E7:80:4A:04:65:E6:99:79:2F:52:85:CF:B5:C7:37 X509v3 Authority Key Identifier: keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/MQtqY1zngEoEZeaZeS9Shc-1xzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f24::/48 2a12:e00:100::/40 2a12:e00:f00::/40 Signature Algorithm: sha256WithRSAEncryption 84:0e:71:4d:f5:d4:76:e7:56:77:07:fd:07:21:1e:a8:09:5b: 4a:4c:23:a8:20:e6:8a:73:74:1b:24:ae:c7:f4:e6:65:97:8a: 31:60:e0:af:3d:b0:fe:3a:38:6a:d3:f5:55:3e:e8:ad:8c:fc: 07:df:f1:18:a1:eb:d8:d4:8a:97:b3:fe:07:83:08:10:0d:4e: 32:0f:bb:6e:64:05:44:c7:58:bf:1a:0b:52:65:f0:34:21:dc: e2:6d:bc:1f:11:e4:24:d7:47:58:89:0c:35:5b:1b:cc:7c:b8: be:60:61:95:b2:c1:29:8c:7b:5d:d5:8c:4d:f4:67:83:d9:d6: 81:2c:a6:dd:a7:c7:b8:4b:3d:a5:37:5a:4c:0f:3a:a6:fc:9c: eb:ed:c3:c1:ed:a6:38:9e:f3:a8:7c:7d:49:8f:2b:d2:e6:7f: a1:6a:63:b1:de:d5:a7:e3:1b:29:94:6e:e8:2c:9c:c9:9a:bf: 06:5c:a8:7d:36:90:27:dd:f8:3d:fd:ae:59:f2:5f:e8:ef:68: 33:ac:99:ad:d7:b8:8c:cc:30:95:39:8c:50:49:c4:65:ac:16: 88:13:cc:b4:5f:07:f8:13:e7:8b:6a:fd:95:8c:d1:55:0b:4f: fd:ef:4d:09:a0:c0:47:ac:dd:88:af:e3:59:91:a6:6f:81:19: 6f:4a:4d:2e -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZtPqsKtLecMI9+VE3JayBnhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NGY2YTExNzc4MjZjNWFiNjRiZDNhZjAxMzhhOWI1N2E0 YjkxZTUwHhcNMjUxMjI0MDkyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTBiNmE2MzVjZTc4MDRhMDQ2NWU2OTk3OTJmNTI4NWNmYjVjNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qe37b1uyGoukxARn8K2uMwbuP6m vKgUWE8kiU2Xlvz0X8qyeq+cUfe1ZAAtXfqwZpsObdtwnAAgo4OrjHs734oIJzwt oZtcJKYxxTQY3zslWbmDBtgwY7jej1reItoCLTMykbOm28khrQa/1PExRVzpnybU /AlseFkxf+Z7e+9su6gmsO3Lb+yCkv0I2ZCR9X5svIILJEA6Pqft5rJCJlxAdKgN W3Gd5RzpvVV4wguJSVRhYfzuEXXwZgekN/p+L7VLWHZSh14VEAahxtUoVPQoQ9G8 hxdNK4dTJFLcA0jmTByA4Hk7AixINsnS9zd/thRxs4jj0vhSwTmiTwJ2/QIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFDELamNc54BKBGXmmXkvUoXPtcc3MB8GA1UdIwQY MBaAFMVPahF3gmxatkvTrwE4qbV6S5HlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYt MmVhOGFjZTViOTVlLzEvTVF0cVkxem5nRW9FWmVhWmVTOVNoYy0xeHpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNGYzNjctM2I5ZS00OWQ0LTk2ODYtMmVhOGFjZTViOTVl LzEveFU5cUVYZUNiRnEyUzlPdkFUaXB0WHBMa2VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcAIAEGfA8k AwYAKhIOAAEDBgAqEg4ADzANBgkqhkiG9w0BAQsFAAOCAQEAhA5xTfXUdudWdwf9 ByEeqAlbSkwjqCDminN0GySux/TmZZeKMWDgrz2w/jo4atP1VT7orYz8B9/xGKHr 2NSKl7P+B4MIEA1OMg+7bmQFRMdYvxoLUmXwNCHc4m28HxHkJNdHWIkMNVsbzHy4 vmBhlbLBKYx7XdWMTfRng9nWgSym3afHuEs9pTdaTA86pvyc6+3Dwe2mOJ7zqHx9 SY8r0uZ/oWpjsd7Vp+MbKZRu6CycyZq/BlyofTaQJ934Pf2uWfJf6O9oM6yZrde4 jMwwlTmMUEnEZawWiBPMtF8H+BPni2r9lYzRVQtP/e9NCaDAR6zdiK/jWZGmb4EZ b0pNLg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:15 2025 by rpki-client