This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TbJUdoEpBJbOVmX4KgGPqqoCuIw.roa File: TbJUdoEpBJbOVmX4KgGPqqoCuIw.roa (raw, json) Hash identifier: w8ol6jvAtS/xVDIW6WRWzaxqwr7+FgjV19hWTeyDqsA= Subject key identifier: 4D:B2:54:76:81:29:04:96:CE:56:65:F8:2A:01:8F:AA:AA:02:B8:8C Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019ABC73C735F021938798913B062F94E5EA Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TbJUdoEpBJbOVmX4KgGPqqoCuIw.roa Signing time: Tue 25 Nov 2025 19:18:15 +0000 ROA not before: Tue 25 Nov 2025 19:18:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207299 IP address blocks: 2a14:67c1:a120::/44 maxlen: 48 2a14:67c1:a123::/48 maxlen: 48 2a14:67c1:a128::/48 maxlen: 48 2a14:67c1:c300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:73:c7:35:f0:21:93:87:98:91:3b:06:2f:94:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Nov 25 19:18:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4db2547681290496ce5665f82a018faaaa02b88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:ec:52:8e:49:d2:c9:51:6f:64:c2:b9:22: 97:44:2c:c1:74:0b:23:a3:5a:22:a9:6c:b5:bf:e8: 01:72:7b:1f:8a:74:d2:f0:f8:74:a8:ff:c1:4d:c5: da:f2:21:61:ad:1c:16:04:0b:a6:b3:cf:56:8d:09: aa:a4:f2:f9:11:43:80:2c:15:7d:bd:65:bb:3b:56: 00:68:bd:cf:4f:4a:8b:7b:3c:d6:b1:0f:04:e6:6f: 65:14:fa:0e:ff:b2:f9:6a:5c:a6:e0:6f:5b:2d:36: fd:69:ea:68:4c:aa:0e:eb:f2:75:86:a9:64:6c:8f: 6f:d4:0e:3b:4b:ff:12:be:be:f3:05:81:ed:be:b7: 1e:ab:96:fb:56:56:25:1d:8a:8e:7e:64:56:0f:8c: 5c:ca:9f:f7:8a:6e:76:5a:60:9c:6f:e1:25:ad:20: f8:e2:e4:08:b5:4e:4b:b0:e1:c2:47:fe:0d:bd:38: 69:ab:63:26:63:8b:7a:7f:76:44:89:f8:44:60:48: c2:c3:a5:c4:d8:ee:6a:09:c8:3f:94:c6:d0:44:f0: 64:72:b4:40:90:04:b4:5f:ef:83:e2:dd:0c:05:9b: e8:98:9d:85:48:39:10:e4:c1:9b:6c:61:c3:23:cf: ed:cc:01:8d:c8:c3:01:32:26:20:12:cf:8f:78:5d: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B2:54:76:81:29:04:96:CE:56:65:F8:2A:01:8F:AA:AA:02:B8:8C X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TbJUdoEpBJbOVmX4KgGPqqoCuIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a120::/44 2a14:67c1:c300::/40 Signature Algorithm: sha256WithRSAEncryption a6:62:51:30:39:b0:ab:e0:57:d2:6d:ef:cf:9b:1b:c7:34:7c: 33:67:0c:9b:10:08:5b:63:3d:f9:57:ee:6c:ff:eb:42:fa:ed: f6:90:1e:ed:42:7b:12:f0:00:7b:8a:c2:2f:7e:2a:34:7e:11: 67:5e:ae:e9:e3:36:fe:f0:96:19:d3:39:25:d6:f4:55:e0:77: 23:27:d9:d3:85:83:b1:43:3c:9d:b9:3c:ae:eb:ab:07:72:fd: ec:cd:50:75:69:3e:6e:e9:08:c3:23:ca:00:7e:47:c4:88:3e: 44:0d:14:85:8a:bd:91:82:49:1b:67:8c:4d:41:0a:a4:01:0f: b8:5d:b4:bb:bb:86:54:da:0b:48:77:6e:ff:56:55:16:ee:3f: 23:ff:2f:fc:e2:2d:d0:fd:8e:09:49:a9:28:4d:74:c7:c0:c7: c1:9b:fc:05:7a:07:6d:2c:05:69:bf:04:07:b7:e5:74:5e:a7: ae:03:b8:46:cd:8d:ff:20:41:e8:3c:2f:c4:ef:de:b9:2d:90: 34:c0:dc:a0:cc:ef:53:22:aa:f5:7e:51:08:cd:c4:4a:1e:4d: c6:23:b6:bf:41:c5:6c:e8:bf:cc:ef:4a:d6:65:d5:cc:03:bf: 1f:37:18:63:21:3f:a3:f5:3f:95:33:ab:9a:fd:8e:1c:9f:0b: d8:ca:7d:09 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZq8c8c18CGTh5iROwYvlOXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMTI1MTkxODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGIyNTQ3NjgxMjkwNDk2Y2U1NjY1ZjgyYTAxOGZhYWFhMDJiODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug7sUo5J0slRb2TCuSKXRCzBdAsj o1oiqWy1v+gBcnsfinTS8Ph0qP/BTcXa8iFhrRwWBAums89WjQmqpPL5EUOALBV9 vWW7O1YAaL3PT0qLezzWsQ8E5m9lFPoO/7L5alym4G9bLTb9aepoTKoO6/J1hqlk bI9v1A47S/8Svr7zBYHtvrceq5b7VlYlHYqOfmRWD4xcyp/3im52WmCcb+ElrSD4 4uQItU5LsOHCR/4NvThpq2MmY4t6f3ZEifhEYEjCw6XE2O5qCcg/lMbQRPBkcrRA kAS0X++D4t0MBZvomJ2FSDkQ5MGbbGHDI8/tzAGNyMMBMiYgEs+PeF3/8QIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFE2yVHaBKQSWzlZl+CoBj6qqAriMMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvVGJKVWRvRXBCSmJPVm1YNEtnR1BxcW9DdUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhRnwaEg AwYAKhRnwcMwDQYJKoZIhvcNAQELBQADggEBAKZiUTA5sKvgV9Jt78+bG8c0fDNn DJsQCFtjPflX7mz/60L67faQHu1CexLwAHuKwi9+KjR+EWderunjNv7wlhnTOSXW 9FXgdyMn2dOFg7FDPJ25PK7rqwdy/ezNUHVpPm7pCMMjygB+R8SIPkQNFIWKvZGC SRtnjE1BCqQBD7hdtLu7hlTaC0h3bv9WVRbuPyP/L/ziLdD9jglJqShNdMfAx8Gb /AV6B20sBWm/BAe35XRep64DuEbNjf8gQeg8L8Tv3rktkDTA3KDM71MiqvV+UQjN xEoeTcYjtr9BxWzov8zvStZl1cwDvx83GGMhP6P1P5Uzq5r9jhyfC9jKfQk= -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:13 2025 by rpki-client