This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VABjrz-NIXb0Xc2Li7suPdzZg1E.roa File: VABjrz-NIXb0Xc2Li7suPdzZg1E.roa (raw, json) Hash identifier: ZvDSbRCsgX5vB+Nu4+Sy2caje27MU5onLgiwRZjnlvk= Subject key identifier: 54:00:63:AF:3F:8D:21:76:F4:5D:CD:8B:8B:BB:2E:3D:DC:D9:83:51 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019AC2F9B4A95834EB4E5A7D67EDB9604A45 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VABjrz-NIXb0Xc2Li7suPdzZg1E.roa Signing time: Thu 27 Nov 2025 01:42:15 +0000 ROA not before: Thu 27 Nov 2025 01:42:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202939 IP address blocks: 2a14:67c2:300::/40 maxlen: 48 2a14:67c2:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c2:f9:b4:a9:58:34:eb:4e:5a:7d:67:ed:b9:60:4a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Nov 27 01:42:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=540063af3f8d2176f45dcd8b8bbb2e3ddcd98351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:c0:41:ed:f8:2e:7a:4c:3d:9e:95:f4:7d: 1b:60:bc:80:ea:71:ac:5d:17:de:48:03:e8:4a:f1: cf:9a:33:b4:d7:07:7a:f5:85:12:c3:a2:84:5d:9a: cd:c3:38:cc:a5:8d:b7:c4:e8:d6:7b:9e:e0:a0:15: ef:10:c2:1e:4b:c0:04:7c:61:7c:2e:8c:50:aa:55: 0e:2a:d1:d2:de:6f:d9:99:87:80:c8:f7:1f:a8:b8: eb:b7:db:c2:b1:d9:40:cd:b7:67:4e:ff:f6:e7:35: fb:af:18:a4:06:0c:22:4a:93:08:ee:be:c8:7d:d8: 05:c5:d0:a3:0b:c5:c3:dc:e7:fe:1a:6d:a9:5d:b5: 67:2a:92:0c:8c:da:a8:d4:4c:8b:7f:c2:2a:ff:bc: 94:8f:1b:a4:38:bf:7d:b8:ce:fb:bd:96:b9:06:be: df:cd:d6:56:01:77:5e:56:49:ae:94:57:8c:20:74: db:e8:53:03:04:af:e1:d6:cd:95:2f:af:b1:a1:eb: 70:1a:4e:82:b8:c3:f9:11:86:7c:c9:da:c7:76:e6: 53:ac:ab:f0:14:22:04:23:7f:5c:d9:85:1e:4b:77: aa:55:87:a5:0c:f1:69:04:17:75:f0:3e:73:dc:5f: 69:21:ee:dd:c9:fc:bb:6e:c0:43:76:f0:61:4e:1f: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:00:63:AF:3F:8D:21:76:F4:5D:CD:8B:8B:BB:2E:3D:DC:D9:83:51 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/VABjrz-NIXb0Xc2Li7suPdzZg1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:300::/40 Signature Algorithm: sha256WithRSAEncryption 09:be:80:a8:ed:74:d4:05:cf:9c:95:06:12:8a:37:20:96:6f: 64:a8:06:93:d0:e5:57:04:3c:3e:02:f6:bf:71:66:73:d8:02: 58:42:8e:13:19:ca:ee:2e:3a:7d:36:83:80:fb:f3:16:07:9e: 46:e3:8e:19:32:43:e0:f9:1c:0b:d3:ff:44:01:96:12:22:76: df:21:92:4e:0f:52:c2:c0:f1:26:96:e4:26:2a:e3:fe:cd:3b: bc:a6:96:4e:5d:a8:07:ef:de:c6:e0:1d:19:1c:28:95:87:5e: f2:04:3a:8e:18:48:95:2b:dd:a7:6a:b2:49:57:c5:fe:a0:b1: 7f:6c:a2:40:82:e1:1f:4a:ee:63:53:a2:ec:eb:c1:9a:c7:06: 17:d7:88:31:47:a8:25:06:c4:a5:df:dc:53:b8:6f:aa:fb:d8: 13:93:80:fe:90:76:aa:46:19:3c:f7:67:2b:5f:74:67:1e:2d: 3f:19:92:1b:b4:a7:7f:55:02:00:ec:e8:a8:35:d2:dd:97:07: 50:fc:12:83:36:9b:ed:c4:af:b9:9e:92:31:e4:61:3c:15:77: a2:77:37:aa:f8:e7:cf:a5:8e:1d:51:df:5b:68:74:61:7c:0f: f2:c4:85:bf:cd:32:bc:88:d1:dc:56:c6:c1:a0:78:65:dc:41: 57:51:55:64 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZrC+bSpWDTrTlp9Z+25YEpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMTI3MDE0MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDAwNjNhZjNmOGQyMTc2ZjQ1ZGNkOGI4YmJiMmUzZGRjZDk4MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu/AQe34LnpMPZ6V9H0bYLyA6nGs XRfeSAPoSvHPmjO01wd69YUSw6KEXZrNwzjMpY23xOjWe57goBXvEMIeS8AEfGF8 LoxQqlUOKtHS3m/ZmYeAyPcfqLjrt9vCsdlAzbdnTv/25zX7rxikBgwiSpMI7r7I fdgFxdCjC8XD3Of+Gm2pXbVnKpIMjNqo1EyLf8Iq/7yUjxukOL99uM77vZa5Br7f zdZWAXdeVkmulFeMIHTb6FMDBK/h1s2VL6+xoetwGk6CuMP5EYZ8ydrHduZTrKvw FCIEI39c2YUeS3eqVYelDPFpBBd18D5z3F9pIe7dyfy7bsBDdvBhTh90lQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFQAY68/jSF29F3Ni4u7Lj3c2YNRMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvVkFCanJ6LU5JWGIwWGMyTGk3c3VQZHpaZzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwgMw DQYJKoZIhvcNAQELBQADggEBAAm+gKjtdNQFz5yVBhKKNyCWb2SoBpPQ5VcEPD4C 9r9xZnPYAlhCjhMZyu4uOn02g4D78xYHnkbjjhkyQ+D5HAvT/0QBlhIidt8hkk4P UsLA8SaW5CYq4/7NO7ymlk5dqAfv3sbgHRkcKJWHXvIEOo4YSJUr3adqsklXxf6g sX9sokCC4R9K7mNTouzrwZrHBhfXiDFHqCUGxKXf3FO4b6r72BOTgP6QdqpGGTz3 ZytfdGceLT8Zkhu0p39VAgDs6Kg10t2XB1D8EoM2m+3Er7mekjHkYTwVd6J3N6r4 58+ljh1R31todGF8D/LEhb/NMryI0dxWxsGgeGXcQVdRVWQ= -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:03 2025 by rpki-client