This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/2r_9eoiZd8K864XrWkOnEkLMtLI.roa File: 2r_9eoiZd8K864XrWkOnEkLMtLI.roa (raw, json) Hash identifier: rifvFqX4B9+3FziGOwmMOqikXsmK+q2jUk07Y+v10l8= Subject key identifier: DA:BF:FD:7A:88:99:77:C2:BC:EB:85:EB:5A:43:A7:12:42:CC:B4:B2 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B1562F80C51E0D7D9BBE1C87B22465AD0 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/2r_9eoiZd8K864XrWkOnEkLMtLI.roa Signing time: Sat 13 Dec 2025 01:46:06 +0000 ROA not before: Sat 13 Dec 2025 01:46:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31898 IP address blocks: 2a14:67c1:a123::/48 maxlen: 48 2a14:67c1:a129::/48 maxlen: 48 2a14:67c1:c300::/40 maxlen: 48 2a14:67c1:c700::/48 maxlen: 48 2a14:67c2:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:62:f8:0c:51:e0:d7:d9:bb:e1:c8:7b:22:46:5a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 13 01:46:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dabffd7a889977c2bceb85eb5a43a71242ccb4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:ca:da:e0:da:af:05:9a:a5:9c:ce:da:23: 43:ed:6d:ce:51:9a:e1:23:03:ea:1d:15:1d:5b:e8: 9d:ef:1b:fb:69:f9:f1:58:68:cc:f1:1a:95:ec:e1: d2:2b:56:22:fc:78:aa:95:5b:ca:20:ce:50:3f:a5: 7b:3b:eb:6f:d3:59:ee:0b:c0:f9:c6:56:68:94:3a: e9:9d:70:eb:00:f5:b4:dc:7f:6b:cd:b3:c3:10:83: 0b:e6:d7:76:97:26:e4:47:4e:78:96:f9:de:13:2c: 2e:2b:d2:60:b8:38:3d:b8:c7:a2:f5:4d:58:e2:41: 22:82:9c:17:34:05:a9:5b:f6:f5:10:c5:b1:54:2d: 0f:bf:fc:58:21:e6:7c:97:21:74:a4:76:7c:ba:ba: e7:22:22:af:40:ab:d6:95:ec:ae:61:78:4d:df:dd: 1f:05:2d:0e:23:79:76:73:e0:22:d6:5e:af:48:87: 11:cb:6d:63:2f:ac:42:d9:3e:f8:3e:cb:a2:92:a1: 7e:7f:5e:39:16:53:54:1c:7e:90:4f:f1:54:4b:a1: eb:00:e5:1d:be:f0:ea:a6:6c:5e:a2:7f:a1:b1:20: 06:fe:a4:ba:c0:10:7d:3d:8d:30:98:14:06:51:c2: 92:7b:ef:82:03:8f:3a:50:b8:2d:e3:29:1b:78:20: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BF:FD:7A:88:99:77:C2:BC:EB:85:EB:5A:43:A7:12:42:CC:B4:B2 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/2r_9eoiZd8K864XrWkOnEkLMtLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a123::/48 2a14:67c1:a129::/48 2a14:67c1:c300::/40 2a14:67c1:c700::/48 2a14:67c2:3f0::/48 Signature Algorithm: sha256WithRSAEncryption 3d:1b:93:1b:0e:ff:7e:f4:f9:ba:3c:01:20:af:9b:6f:ec:ab: 67:2e:f0:50:fb:91:1b:f5:91:69:c4:7c:15:a3:0f:52:03:d3: b7:8c:8d:26:a0:fc:e0:22:11:7f:ba:d5:77:69:bd:fe:e4:d6: ea:02:97:61:2a:bc:44:46:7b:a9:18:25:0c:64:94:40:8b:40: 61:8c:de:24:7a:22:a6:ae:d8:6b:fe:e4:02:88:dd:6b:0d:17: 4d:d0:ae:4a:56:fd:25:3f:cd:ac:c8:4e:bf:fb:ae:23:27:7b: 26:ef:24:eb:19:48:2f:d0:a0:ba:3f:7e:7a:f2:c7:04:d8:32: 7b:da:0f:d7:13:8f:5a:92:04:21:72:75:7d:f6:da:4b:3d:45: 4f:5d:27:d9:5b:88:0c:b9:0d:d6:d7:fa:8e:93:13:e3:04:f3: b0:b6:cf:33:d5:8c:23:e6:ef:f6:6b:e8:42:98:cf:c9:3d:02: 98:eb:e0:2d:af:ab:7e:cc:f3:91:b3:e7:ee:c3:67:34:5b:f9: ea:0f:5d:ab:73:66:a3:22:cd:16:75:82:12:49:b2:16:15:a0: f0:13:5f:b8:b7:45:27:9b:00:c8:e0:e7:af:8a:50:13:a8:8b: c7:66:e8:49:c4:cc:4a:a6:31:38:5d:7d:32:a0:d3:5e:0a:d2: 4f:88:d0:51 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZsVYvgMUeDX2bvhyHsiRlrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjEzMDE0NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWJmZmQ3YTg4OTk3N2MyYmNlYjg1ZWI1YTQzYTcxMjQyY2NiNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywLK2uDarwWapZzO2iND7W3OUZrh IwPqHRUdW+id7xv7afnxWGjM8RqV7OHSK1Yi/HiqlVvKIM5QP6V7O+tv01nuC8D5 xlZolDrpnXDrAPW03H9rzbPDEIML5td2lybkR054lvneEywuK9JguDg9uMei9U1Y 4kEigpwXNAWpW/b1EMWxVC0Pv/xYIeZ8lyF0pHZ8urrnIiKvQKvWleyuYXhN390f BS0OI3l2c+Ai1l6vSIcRy21jL6xC2T74PsuikqF+f145FlNUHH6QT/FUS6HrAOUd vvDqpmxeon+hsSAG/qS6wBB9PY0wmBQGUcKSe++CA486ULgt4ykbeCDguQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFNq//XqImXfCvOuF61pDpxJCzLSyMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvMnJfOWVvaVpkOEs4NjRYcldrT25Fa0xNdExJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAAjAsAwcAKhRnwaEj AwcAKhRnwaEpAwYAKhRnwcMDBwAqFGfBxwADBwAqFGfCA/AwDQYJKoZIhvcNAQEL BQADggEBAD0bkxsO/370+bo8ASCvm2/sq2cu8FD7kRv1kWnEfBWjD1ID07eMjSag /OAiEX+61Xdpvf7k1uoCl2EqvERGe6kYJQxklECLQGGM3iR6Iqau2Gv+5AKI3WsN F03QrkpW/SU/zazITr/7riMneybvJOsZSC/QoLo/fnryxwTYMnvaD9cTj1qSBCFy dX322ks9RU9dJ9lbiAy5DdbX+o6TE+ME87C2zzPVjCPm7/Zr6EKYz8k9Apjr4C2v q37M85Gz5+7DZzRb+eoPXatzZqMizRZ1ghJJshYVoPATX7i3RSebAMjg56+KUBOo i8dm6EnEzEqmMThdfTKg014K0k+I0FE= -----END CERTIFICATE-----Generated at Thu Dec 18 18:26:25 2025 by rpki-client