This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9c51UyXiEAxzps6WE_ve2mvPhik.roa File: 9c51UyXiEAxzps6WE_ve2mvPhik.roa (raw, json) Hash identifier: OrbQ0whxYeAmDAkM/BQSz4M+Su5G1ARP27og4NuoL88= Subject key identifier: F5:CE:75:53:25:E2:10:0C:73:A6:CE:96:13:FB:DE:DA:6B:CF:86:29 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019ADE484120D1F61A1ACBBC4F4E54FBF8CA Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9c51UyXiEAxzps6WE_ve2mvPhik.roa Signing time: Tue 02 Dec 2025 08:57:48 +0000 ROA not before: Tue 02 Dec 2025 08:57:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 2a14:67c1:a128::/48 maxlen: 48 2a14:67c1:a129::/48 maxlen: 48 2a14:67c2:510::/48 maxlen: 48 2a14:67c2:576::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:48:41:20:d1:f6:1a:1a:cb:bc:4f:4e:54:fb:f8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 2 08:57:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5ce755325e2100c73a6ce9613fbdeda6bcf8629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:96:87:b3:b0:59:8a:82:b1:48:5f:48:d7: bc:90:84:c9:14:96:ce:aa:45:dc:0f:5e:a4:f9:a9: 40:e6:38:ae:32:07:c5:a3:1b:f0:13:c5:10:56:80: 58:4e:a7:41:eb:de:98:dd:e3:f6:d4:86:95:2a:46: bf:1d:e0:ef:00:a6:31:da:b5:3a:44:e3:8b:ca:9e: 51:d6:33:fe:11:ef:63:68:b0:78:b6:f0:50:a8:82: f8:b6:9f:f6:4f:c3:d3:6b:6f:0d:b1:7b:19:a3:6e: 67:58:50:f2:86:f7:fd:53:18:83:88:ce:0d:e6:ce: 59:33:d7:b3:98:fd:1f:24:4e:d1:41:60:9f:c9:43: bd:46:6b:b3:dd:9a:cf:64:90:f3:02:e3:34:6f:bf: 85:cb:3f:da:a9:38:8b:77:a6:81:36:09:45:eb:17: c1:41:59:43:e3:aa:a7:78:75:31:b1:4d:b6:a7:94: 3a:96:59:ee:1d:7f:03:91:63:10:8d:80:a8:2a:8f: 89:82:b5:5a:82:e5:01:b0:b8:c8:d1:5d:0d:2a:cb: 87:ed:d4:25:fe:33:16:ce:54:66:7f:15:57:09:c0: 7a:04:fd:49:08:79:fd:a8:d3:2c:c4:c9:9a:fb:04: 9f:bf:64:12:4d:2d:61:a5:29:09:b1:03:f0:40:7f: 66:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:75:53:25:E2:10:0C:73:A6:CE:96:13:FB:DE:DA:6B:CF:86:29 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9c51UyXiEAxzps6WE_ve2mvPhik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a128::/47 2a14:67c2:510::/48 2a14:67c2:576::/48 Signature Algorithm: sha256WithRSAEncryption 18:6c:36:3d:43:2c:91:4b:b7:d0:f3:5c:0b:1c:0e:e8:76:44: ac:88:19:8b:f7:30:f1:fa:6a:59:36:cd:65:59:45:e6:cf:53: ee:34:86:63:d2:a4:ab:8e:76:e7:b3:13:98:70:30:90:b7:a5: ea:4e:a9:fb:68:37:c4:25:9c:da:fa:f9:78:d1:48:e8:dd:80: c8:a3:2f:da:38:24:c1:10:7d:2e:88:10:23:ce:50:99:f4:9e: 61:5b:14:e9:c1:fb:ce:8e:df:9c:62:4e:83:86:a4:f0:2b:b6: fa:71:41:b8:ab:a2:ee:e4:3a:02:55:41:7e:f8:0b:23:d0:4a: 00:df:15:2f:a3:96:ca:f2:52:52:39:1c:e8:e7:af:c9:c0:5a: a0:74:e7:c1:02:a9:21:e7:48:48:97:40:f7:bc:7a:4b:7e:79: ed:35:3b:08:32:ef:ed:82:46:11:5f:bb:80:22:6d:2a:da:ae: 07:af:0f:3e:7d:7f:19:26:fc:8d:a1:5f:bf:f9:cf:83:4c:f6: f3:32:a0:41:f7:19:37:f3:6c:94:1b:9b:3a:05:08:39:44:a6: ba:b5:14:b8:6c:98:6b:9c:d0:16:a4:91:f6:f4:5c:05:d7:d0: 1a:d4:cd:40:be:fe:4e:d6:ad:fa:6b:62:e6:55:f2:fc:f6:f9: 6f:a2:5d:eb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZreSEEg0fYaGsu8T05U+/jKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjAyMDg1NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWNlNzU1MzI1ZTIxMDBjNzNhNmNlOTYxM2ZiZGVkYTZiY2Y4NjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL+Wh7OwWYqCsUhfSNe8kITJFJbO qkXcD16k+alA5jiuMgfFoxvwE8UQVoBYTqdB696Y3eP21IaVKka/HeDvAKYx2rU6 ROOLyp5R1jP+Ee9jaLB4tvBQqIL4tp/2T8PTa28NsXsZo25nWFDyhvf9UxiDiM4N 5s5ZM9ezmP0fJE7RQWCfyUO9Rmuz3ZrPZJDzAuM0b7+Fyz/aqTiLd6aBNglF6xfB QVlD46qneHUxsU22p5Q6llnuHX8DkWMQjYCoKo+JgrVaguUBsLjI0V0NKsuH7dQl /jMWzlRmfxVXCcB6BP1JCHn9qNMsxMma+wSfv2QSTS1hpSkJsQPwQH9mGwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPXOdVMl4hAMc6bOlhP73tprz4YpMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvOWM1MVV5WGlFQXh6cHM2V0VfdmUybXZQaGlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcBKhRnwaEo AwcAKhRnwgUQAwcAKhRnwgV2MA0GCSqGSIb3DQEBCwUAA4IBAQAYbDY9QyyRS7fQ 81wLHA7odkSsiBmL9zDx+mpZNs1lWUXmz1PuNIZj0qSrjnbnsxOYcDCQt6XqTqn7 aDfEJZza+vl40Ujo3YDIoy/aOCTBEH0uiBAjzlCZ9J5hWxTpwfvOjt+cYk6DhqTw K7b6cUG4q6Lu5DoCVUF++Asj0EoA3xUvo5bK8lJSORzo56/JwFqgdOfBAqkh50hI l0D3vHpLfnntNTsIMu/tgkYRX7uAIm0q2q4Hrw8+fX8ZJvyNoV+/+c+DTPbzMqBB 9xk382yUG5s6BQg5RKa6tRS4bJhrnNAWpJH29FwF19Aa1M1Avv5O1q36a2LmVfL8 9vlvol3r -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:59 2025 by rpki-client