This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/2I55Ggc9ezxQjKo9-02KrJOgj9Q.roa File: 2I55Ggc9ezxQjKo9-02KrJOgj9Q.roa (raw, json) Hash identifier: +EogsSF4v4nkocFIFpaXx4GRXjn1TloKeMp1w67mfdE= Subject key identifier: D8:8E:79:1A:07:3D:7B:3C:50:8C:AA:3D:FB:4D:8A:AC:93:A0:8F:D4 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019A8868722BFBA2AFCBEAF06CA859C24639 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/2I55Ggc9ezxQjKo9-02KrJOgj9Q.roa Signing time: Sat 15 Nov 2025 16:45:37 +0000 ROA not before: Sat 15 Nov 2025 16:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214601 IP address blocks: 2a14:67c1:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:88:68:72:2b:fb:a2:af:cb:ea:f0:6c:a8:59:c2:46:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Nov 15 16:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d88e791a073d7b3c508caa3dfb4d8aac93a08fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:ba:58:e5:af:7e:2b:d3:20:1f:4a:6d:2f: eb:d5:b9:ba:20:4f:e0:72:c1:cc:11:d0:b3:82:d0: 97:5f:1d:89:bf:f5:2f:b4:c3:23:74:4b:f3:cb:ff: f5:76:e1:3b:44:70:94:0a:67:dd:5c:0b:dc:58:14: 9a:56:20:07:3b:8e:90:95:97:b4:ee:66:9a:91:c5: ad:8a:d8:02:1d:2d:6e:8e:5a:97:b4:96:90:0c:f0: fd:a5:17:f0:b3:62:98:85:fc:37:3f:fb:e7:42:e0: 0f:49:8d:45:c2:c1:89:64:09:57:e2:5e:69:9f:6e: cc:6d:dc:4a:96:8c:fa:b6:40:ca:91:35:ca:ca:db: 1c:ae:37:67:43:4c:95:10:37:41:7e:4a:0d:f9:1c: 69:bc:11:cb:cd:14:46:69:7a:f1:7c:8f:ec:10:d4: 11:44:7a:f9:73:2a:2e:df:f7:fc:5e:7e:20:5b:6e: 39:e8:62:b5:ed:f4:30:bf:7f:48:eb:2d:5a:eb:f1: 47:e3:41:ce:e9:b7:ea:ed:61:d6:3b:85:81:b8:bb: 08:57:b7:e9:73:3a:51:c1:0a:e6:f6:f1:6c:8c:d6: 50:b9:70:0d:77:74:15:4f:57:97:04:e9:e5:78:43: 17:7a:25:9a:5a:4e:6d:94:52:b8:21:2c:53:3f:e2: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8E:79:1A:07:3D:7B:3C:50:8C:AA:3D:FB:4D:8A:AC:93:A0:8F:D4 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/2I55Ggc9ezxQjKo9-02KrJOgj9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:100::/40 Signature Algorithm: sha256WithRSAEncryption d9:49:92:bb:0b:07:39:59:2d:0a:c0:6e:d3:64:7a:1b:b3:a3: 1f:1f:49:ca:22:32:f7:8b:63:41:30:f7:4e:bf:44:a9:2b:e3: 0b:f1:45:57:a0:f2:ca:11:4e:b1:e3:84:e7:9c:e3:0b:ff:07: 3d:be:02:85:95:0f:12:91:06:8c:58:a6:ea:43:b1:29:1f:68: 84:12:b3:79:f5:8b:8c:7b:09:6c:d5:a0:e8:97:1a:8c:4b:47: 2e:1a:4d:de:20:49:09:1d:f8:e6:d5:ec:90:76:4c:e2:d8:b0: c2:56:46:05:60:0e:a1:ab:46:e8:cc:8e:9d:d2:8d:6d:24:b5: 77:16:07:96:d1:0d:e1:f6:84:52:54:86:23:6b:3c:c3:4d:25: c2:1f:40:c7:60:20:55:72:16:c3:0d:d0:8a:68:47:40:cb:bf: 44:3c:b4:40:f5:ba:45:46:1d:9a:6f:95:4b:7c:f5:d1:1b:24: cf:ac:6c:a5:fc:8e:bb:b1:2e:a9:ba:6c:ec:e3:b4:c4:0f:d4: 2a:3a:52:aa:05:ed:b9:51:b9:b7:d8:38:0f:42:36:1c:51:ca: 09:88:e0:31:4c:85:af:7a:ee:13:a1:53:a3:c9:39:4c:0b:e3: 3c:b0:a6:cf:99:1a:a4:bd:23:42:c1:29:ab:25:54:0a:10:4e: 2c:58:06:43 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZqIaHIr+6Kvy+rwbKhZwkY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMTE1MTY0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODhlNzkxYTA3M2Q3YjNjNTA4Y2FhM2RmYjRkOGFhYzkzYTA4ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCG6WOWvfivTIB9KbS/r1bm6IE/g csHMEdCzgtCXXx2Jv/UvtMMjdEvzy//1duE7RHCUCmfdXAvcWBSaViAHO46QlZe0 7maakcWtitgCHS1ujlqXtJaQDPD9pRfws2KYhfw3P/vnQuAPSY1FwsGJZAlX4l5p n27MbdxKloz6tkDKkTXKytscrjdnQ0yVEDdBfkoN+RxpvBHLzRRGaXrxfI/sENQR RHr5cyou3/f8Xn4gW2456GK17fQwv39I6y1a6/FH40HO6bfq7WHWO4WBuLsIV7fp czpRwQrm9vFsjNZQuXANd3QVT1eXBOnleEMXeiWaWk5tlFK4ISxTP+KOVQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNiOeRoHPXs8UIyqPftNiqyToI/UMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvMkk1NUdnYzllenhRaktvOS0wMktySk9najlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwQEw DQYJKoZIhvcNAQELBQADggEBANlJkrsLBzlZLQrAbtNkehuzox8fScoiMveLY0Ew 906/RKkr4wvxRVeg8soRTrHjhOec4wv/Bz2+AoWVDxKRBoxYpupDsSkfaIQSs3n1 i4x7CWzVoOiXGoxLRy4aTd4gSQkd+ObV7JB2TOLYsMJWRgVgDqGrRujMjp3SjW0k tXcWB5bRDeH2hFJUhiNrPMNNJcIfQMdgIFVyFsMN0IpoR0DLv0Q8tED1ukVGHZpv lUt89dEbJM+sbKX8jruxLqm6bOzjtMQP1Co6UqoF7blRubfYOA9CNhxRygmI4DFM ha967hOhU6PJOUwL4zywps+ZGqS9I0LBKaslVAoQTixYBkM= -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:40 2025 by rpki-client