This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/D3EbZP_BbRaNkZKIe_8MMvCzTcI.roa File: D3EbZP_BbRaNkZKIe_8MMvCzTcI.roa (raw, json) Hash identifier: rXgGwJaGC8wByzSKVSwkYV2cY4Gvm6AuGax8Et/aL0c= Subject key identifier: 0F:71:1B:64:FF:C1:6D:16:8D:91:92:88:7B:FF:0C:32:F0:B3:4D:C2 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019AC2F8CA4B74083B679C4B10FA9BA0CCA7 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/D3EbZP_BbRaNkZKIe_8MMvCzTcI.roa Signing time: Thu 27 Nov 2025 01:41:15 +0000 ROA not before: Thu 27 Nov 2025 01:41:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31898 IP address blocks: 2a14:67c1:a123::/48 maxlen: 48 2a14:67c1:c300::/40 maxlen: 48 2a14:67c1:c700::/48 maxlen: 48 2a14:67c2:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c2:f8:ca:4b:74:08:3b:67:9c:4b:10:fa:9b:a0:cc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Nov 27 01:41:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f711b64ffc16d168d9192887bff0c32f0b34dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:cd:0c:32:b0:90:d6:b5:af:6c:58:fb:75: cd:27:2d:85:86:84:17:44:95:07:f4:fe:cc:19:36: 92:f6:ab:4b:f2:bd:6f:86:ab:a0:ee:eb:50:ca:88: dc:cd:35:86:d9:c7:5b:27:7c:98:07:4f:c6:88:18: 4e:6e:f8:a6:0f:5b:da:74:5e:02:dc:cb:75:c3:1f: 4f:f2:51:f9:a8:bf:82:63:ec:59:dd:b4:a0:6f:4e: 4b:9d:d8:48:ed:60:53:ec:cc:27:71:1f:81:70:85: 33:51:f6:67:e7:bb:4a:73:b6:06:46:96:89:af:09: df:0d:fb:2f:dd:d9:0a:b6:6d:b3:b9:62:8c:87:6b: f8:a1:c2:cb:f7:6d:90:49:a8:f2:38:a6:4b:93:d5: 15:b8:f2:f5:0b:ee:6a:28:35:48:0c:7d:bc:77:7a: 23:05:5a:0e:77:0d:10:4e:c2:7a:b7:c3:99:07:ac: 95:ff:ad:6a:84:13:79:92:5a:f5:74:40:da:d3:69: a6:ee:39:ad:14:d5:c5:71:4b:7c:41:ea:bd:6b:f8: b2:89:ae:aa:cc:b8:e2:c8:94:fb:c7:47:58:cd:ee: 96:af:8e:bb:7e:bc:15:b0:55:e1:87:03:08:2d:f5: 0a:b1:ef:72:0d:71:74:17:d0:93:2a:b2:15:95:00: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:71:1B:64:FF:C1:6D:16:8D:91:92:88:7B:FF:0C:32:F0:B3:4D:C2 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/D3EbZP_BbRaNkZKIe_8MMvCzTcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a123::/48 2a14:67c1:c300::/40 2a14:67c1:c700::/48 2a14:67c2:3f0::/48 Signature Algorithm: sha256WithRSAEncryption 2b:67:9a:8d:9e:8b:1f:86:32:c3:16:35:6e:d2:83:b8:54:40: f9:b6:82:8c:ea:1a:1a:b9:8c:7f:50:8d:ea:c1:88:80:4f:4c: c3:26:6f:8e:40:b2:6e:4f:11:db:36:33:82:8b:d9:b9:de:d7: 64:d5:a3:30:0f:b8:2e:b3:e7:a1:c5:80:df:a0:70:d2:95:8c: a7:91:ab:ab:40:65:b6:ab:9f:a8:72:56:fc:28:58:74:90:4d: 9e:11:0e:2e:57:1a:95:cc:c7:c7:48:38:1e:7a:b9:30:1d:44: a6:b3:8e:40:d0:c5:fd:f5:e7:ea:4f:8f:55:be:dc:71:5c:db: 47:ee:22:7d:d4:1b:8c:5a:e5:2e:c9:d5:43:7c:da:d5:56:d5: cd:d8:7b:69:00:1d:c7:96:8c:cf:40:e1:34:1c:9a:2f:ae:e7: 6f:a1:e4:8e:ea:5e:e5:86:7e:5a:97:17:84:9a:9c:1b:15:8d: ef:2e:c5:9d:53:c0:7e:03:5b:eb:bf:32:65:0a:35:5d:ac:68: 05:1c:55:a0:2b:f6:1b:a0:b7:d7:59:83:1d:55:db:4f:b5:a2: 5b:8f:0e:12:a0:11:d8:0f:d2:ed:3e:56:f8:58:10:27:a2:44: b4:10:dc:39:b3:3c:e2:9b:ca:6f:fb:ec:77:44:82:be:3f:0e: 51:8e:ab:c4 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZrC+MpLdAg7Z5xLEPqboMynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMTI3MDE0MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjcxMWI2NGZmYzE2ZDE2OGQ5MTkyODg3YmZmMGMzMmYwYjM0ZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgjNDDKwkNa1r2xY+3XNJy2FhoQX RJUH9P7MGTaS9qtL8r1vhqug7utQyojczTWG2cdbJ3yYB0/GiBhObvimD1vadF4C 3Mt1wx9P8lH5qL+CY+xZ3bSgb05LndhI7WBT7MwncR+BcIUzUfZn57tKc7YGRpaJ rwnfDfsv3dkKtm2zuWKMh2v4ocLL922QSajyOKZLk9UVuPL1C+5qKDVIDH28d3oj BVoOdw0QTsJ6t8OZB6yV/61qhBN5klr1dEDa02mm7jmtFNXFcUt8Qeq9a/iyia6q zLjiyJT7x0dYze6Wr467frwVsFXhhwMILfUKse9yDXF0F9CTKrIVlQAEewIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFA9xG2T/wW0WjZGSiHv/DDLws03CMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvRDNFYlpQX0JiUmFOa1pLSWVfOE1NdkN6VGNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwcAKhRnwaEj AwYAKhRnwcMDBwAqFGfBxwADBwAqFGfCA/AwDQYJKoZIhvcNAQELBQADggEBACtn mo2eix+GMsMWNW7Sg7hUQPm2gozqGhq5jH9QjerBiIBPTMMmb45Asm5PEds2M4KL 2bne12TVozAPuC6z56HFgN+gcNKVjKeRq6tAZbarn6hyVvwoWHSQTZ4RDi5XGpXM x8dIOB56uTAdRKazjkDQxf315+pPj1W+3HFc20fuIn3UG4xa5S7J1UN82tVW1c3Y e2kAHceWjM9A4TQcmi+u52+h5I7qXuWGflqXF4SanBsVje8uxZ1TwH4DW+u/MmUK NV2saAUcVaAr9hugt9dZgx1V20+1oluPDhKgEdgP0u0+VvhYECeiRLQQ3DmzPOKb ym/77HdEgr4/DlGOq8Q= -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:13 2025 by rpki-client