This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TmcAWPxeue7wxFh1ZJgWuVz440Y.roa File: TmcAWPxeue7wxFh1ZJgWuVz440Y.roa (raw, json) Hash identifier: IaUTV4EcOtSg1sKUS+8eOn969lT+iI1axPjxb4yR+fg= Subject key identifier: 4E:67:00:58:FC:5E:B9:EE:F0:C4:58:75:64:98:16:B9:5C:F8:E3:46 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019ABB9F601A3403B1827EEAA6B804AA4F4D Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TmcAWPxeue7wxFh1ZJgWuVz440Y.roa Signing time: Tue 25 Nov 2025 15:26:15 +0000 ROA not before: Tue 25 Nov 2025 15:26:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215355 IP address blocks: 2a14:67c0:100::/40 maxlen: 48 2a14:67c0:110::/44 maxlen: 48 2a14:67c0:298::/48 maxlen: 48 2a14:67c0:300::/40 maxlen: 48 2a14:67c0:600::/48 maxlen: 48 2a14:67c0:601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:9f:60:1a:34:03:b1:82:7e:ea:a6:b8:04:aa:4f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Nov 25 15:26:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e670058fc5eb9eef0c45875649816b95cf8e346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:1e:d9:bd:c5:72:ec:6b:f4:96:60:fa:75: d5:dd:b4:51:71:cb:61:53:5d:6a:c0:86:61:2e:00: 70:aa:1d:34:a7:d3:aa:49:04:07:b8:bb:72:91:1f: 1e:12:81:07:66:00:17:ec:25:87:42:a3:09:14:c0: 0d:f0:f1:fe:4c:49:da:61:b5:ce:5a:ea:15:42:9d: a0:5f:25:48:99:ef:5f:e2:82:b0:0c:15:48:84:41: ca:c1:c5:8a:aa:d1:59:cc:7c:56:be:c2:ed:49:cd: 29:92:19:a2:6d:38:79:5a:23:b3:6f:56:5f:bd:98: 00:a4:c5:43:50:2d:d4:ee:13:84:46:4b:bc:22:df: 31:cd:7a:54:05:65:5d:d7:c8:53:ff:b0:cc:51:51: ee:bc:1f:3e:3d:3d:c2:53:cb:fa:d3:59:d9:23:10: bd:05:2e:56:0a:11:d7:b5:d5:63:c2:b2:ef:dc:44: f0:5d:da:1d:da:c3:2b:d6:45:8d:7f:2c:21:b3:6d: db:d6:ca:60:1e:c9:3a:5f:ff:61:49:ad:c2:3f:aa: 3c:71:71:6d:85:e9:55:2b:75:31:be:dd:f4:27:81: 23:e5:d2:ea:b9:a2:6a:bc:74:54:78:cc:ae:be:0d: 70:71:56:77:e7:1d:fe:8e:4f:f9:c6:18:40:a0:28: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:67:00:58:FC:5E:B9:EE:F0:C4:58:75:64:98:16:B9:5C:F8:E3:46 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/TmcAWPxeue7wxFh1ZJgWuVz440Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c0:100::/40 2a14:67c0:298::/48 2a14:67c0:300::/40 2a14:67c0:600::/47 Signature Algorithm: sha256WithRSAEncryption 43:32:0c:95:8b:de:15:84:6e:bb:94:b0:ca:13:7b:33:da:a6: 01:fa:a9:af:b6:74:44:f2:c5:ab:00:8d:2b:fa:d4:66:4b:34: 26:97:85:8a:50:0d:04:df:5f:f4:cd:c1:6d:e0:9d:1b:a8:67: f4:c9:6b:b8:d2:e5:1a:69:28:e0:88:cd:ce:ec:fb:bb:37:57: c3:11:81:59:b3:60:18:f6:93:08:70:ea:ac:e4:1a:33:77:19: 05:c1:68:76:29:7d:58:4c:1f:f0:af:e8:be:88:e5:18:24:f8: 90:d8:a3:40:cf:03:fd:a0:50:f4:9d:0b:04:38:52:65:07:95: 72:a7:c8:b4:df:e1:5e:b3:54:2b:45:b3:25:2c:53:e7:4b:6d: d3:1e:59:74:4e:e4:e8:01:89:d2:03:ff:c5:19:9e:33:48:d2: 79:a5:f6:2b:7f:e9:64:99:89:1b:e6:b1:8a:95:31:5d:92:22: a6:ce:33:20:51:65:09:25:4f:42:64:22:ff:d6:41:fc:5a:13: 4e:82:7c:db:aa:07:3d:52:5b:ac:34:db:a4:3d:00:e7:ad:56: 2c:09:0c:e3:50:69:8e:b3:32:a9:77:b7:7f:99:77:ea:fc:28: fe:2b:03:0a:ba:e4:2a:c2:3a:0b:b2:e3:e8:9e:19:e2:33:6c: 45:89:bc:b4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZq7n2AaNAOxgn7qprgEqk9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMTI1MTUyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTY3MDA1OGZjNWViOWVlZjBjNDU4NzU2NDk4MTZiOTVjZjhlMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU4e2b3Fcuxr9JZg+nXV3bRRccth U11qwIZhLgBwqh00p9OqSQQHuLtykR8eEoEHZgAX7CWHQqMJFMAN8PH+TEnaYbXO WuoVQp2gXyVIme9f4oKwDBVIhEHKwcWKqtFZzHxWvsLtSc0pkhmibTh5WiOzb1Zf vZgApMVDUC3U7hOERku8It8xzXpUBWVd18hT/7DMUVHuvB8+PT3CU8v601nZIxC9 BS5WChHXtdVjwrLv3ETwXdod2sMr1kWNfywhs23b1spgHsk6X/9hSa3CP6o8cXFt helVK3Uxvt30J4Ej5dLquaJqvHRUeMyuvg1wcVZ35x3+jk/5xhhAoCgNyQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE5nAFj8Xrnu8MRYdWSYFrlc+ONGMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvVG1jQVdQeGV1ZTd3eEZoMVpKZ1d1Vno0NDBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAAjAiAwYAKhRnwAED BwAqFGfAApgDBgAqFGfAAwMHASoUZ8AGADANBgkqhkiG9w0BAQsFAAOCAQEAQzIM lYveFYRuu5SwyhN7M9qmAfqpr7Z0RPLFqwCNK/rUZks0JpeFilANBN9f9M3BbeCd G6hn9MlruNLlGmko4IjNzuz7uzdXwxGBWbNgGPaTCHDqrOQaM3cZBcFodil9WEwf 8K/ovojlGCT4kNijQM8D/aBQ9J0LBDhSZQeVcqfItN/hXrNUK0WzJSxT50tt0x5Z dE7k6AGJ0gP/xRmeM0jSeaX2K3/pZJmJG+axipUxXZIips4zIFFlCSVPQmQi/9ZB /FoTToJ826oHPVJbrDTbpD0A561WLAkM41BpjrMyqXe3f5l36vwo/isDCrrkKsI6 C7Lj6J4Z4jNsRYm8tA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:00 2025 by rpki-client