This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/WtgL6d3Yw033xcpFBvcvGKN8prg.roa File: WtgL6d3Yw033xcpFBvcvGKN8prg.roa (raw, json) Hash identifier: yyN0gApoSbkOUJD4SS+bu8s4U3jw8V0Y2/xCY3FSRiQ= Subject key identifier: 5A:D8:0B:E9:DD:D8:C3:4D:F7:C5:CA:45:06:F7:2F:18:A3:7C:A6:B8 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019AC0DD8B923B501141CF3D7564BB972443 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/WtgL6d3Yw033xcpFBvcvGKN8prg.roa Signing time: Wed 26 Nov 2025 15:52:15 +0000 ROA not before: Wed 26 Nov 2025 15:52:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199018 IP address blocks: 2a14:67c1:900::/40 maxlen: 48 2a14:67c2:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:dd:8b:92:3b:50:11:41:cf:3d:75:64:bb:97:24:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Nov 26 15:52:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5ad80be9ddd8c34df7c5ca4506f72f18a37ca6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4a:98:99:81:1d:c0:bc:25:c8:36:ee:16:0b: e7:6f:ab:15:c0:b7:a7:05:af:3f:eb:cd:5c:65:db: 3e:89:10:e9:ad:56:40:a0:1a:a2:27:9a:93:a8:3c: aa:1d:42:74:61:08:84:15:63:3f:04:11:05:41:4b: 6f:5e:89:b7:ca:2b:8b:b8:d6:97:95:68:f6:d4:ad: 7b:7d:e5:2e:79:99:8b:d0:57:4d:af:0e:97:2b:c7: e8:e1:bf:f2:b2:2c:d5:d6:2b:06:67:e3:7a:6c:a4: 51:4b:43:79:7a:d2:37:bd:35:12:4a:4c:f3:48:8f: 20:be:ce:7a:5a:ed:7f:61:93:af:7d:0c:ec:aa:03: 15:99:21:c0:9a:ab:d7:ae:4b:6e:06:19:0c:07:c6: 68:30:81:76:ca:d9:d1:3d:51:d6:52:11:8d:c1:51: e9:bb:ae:59:cf:bf:3a:c4:cb:0e:2b:ae:9c:7e:02: 81:64:e7:cd:00:29:ae:75:70:76:e6:14:9f:5d:14: 3f:3d:0d:4c:91:56:1c:1e:c8:bb:b3:bd:68:ce:d6: ca:1e:7f:7d:8c:35:9a:16:01:c7:19:ab:29:25:60: 4c:c3:3f:4c:7d:14:7e:75:94:98:a7:69:96:aa:cc: 0c:2f:b0:13:f9:2c:dd:b8:64:03:ba:7c:92:3e:ab: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:0B:E9:DD:D8:C3:4D:F7:C5:CA:45:06:F7:2F:18:A3:7C:A6:B8 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/WtgL6d3Yw033xcpFBvcvGKN8prg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:900::/40 2a14:67c2:100::/40 Signature Algorithm: sha256WithRSAEncryption be:9b:3a:92:d8:0e:d5:b6:b5:ac:e8:f0:92:cb:29:98:df:72: 6d:f0:92:55:29:ce:38:52:e7:e3:eb:5e:56:18:bf:7b:70:cb: 08:8d:ce:b4:b1:9b:f9:fd:0f:ef:54:f1:b1:2f:4a:86:86:5e: 41:7d:a1:f4:86:53:59:b3:df:23:08:c3:7c:e8:e3:d9:2c:e2: 80:7f:c3:77:e2:bc:5b:95:77:b3:5d:dc:22:5e:43:9c:86:84: 26:53:82:ba:e2:ba:7c:91:18:12:cc:0e:39:41:70:fb:5e:a7: 4f:58:a5:ba:e0:20:b8:4b:72:9d:bc:67:0f:49:13:44:2a:5d: 60:30:e5:fc:e7:b4:0e:8c:44:0b:d4:bb:48:06:10:77:be:f1: b7:67:06:c7:79:e0:9e:31:91:f9:4f:7f:35:03:cd:42:80:b3: ca:18:35:d4:49:fd:e9:ab:4b:9e:82:78:4a:0b:35:ac:24:55: da:31:9d:1f:17:4b:a2:a8:92:f9:2e:5f:1f:af:2e:28:30:8d: df:ef:d4:e5:0a:f6:05:49:97:36:dd:02:9b:c2:e8:34:ce:38: 32:b6:76:83:e1:29:3d:d9:48:2d:1d:2e:35:e9:0c:aa:a7:12: e9:44:96:31:be:bc:a5:52:e3:bc:ac:ce:ff:f9:d8:10:58:4a: d9:a2:82:29 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZrA3YuSO1ARQc89dWS7lyRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMTI2MTU1MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ4MGJlOWRkZDhjMzRkZjdjNWNhNDUwNmY3MmYxOGEzN2NhNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kqYmYEdwLwlyDbuFgvnb6sVwLen Ba8/681cZds+iRDprVZAoBqiJ5qTqDyqHUJ0YQiEFWM/BBEFQUtvXom3yiuLuNaX lWj21K17feUueZmL0FdNrw6XK8fo4b/ysizV1isGZ+N6bKRRS0N5etI3vTUSSkzz SI8gvs56Wu1/YZOvfQzsqgMVmSHAmqvXrktuBhkMB8ZoMIF2ytnRPVHWUhGNwVHp u65Zz786xMsOK66cfgKBZOfNACmudXB25hSfXRQ/PQ1MkVYcHsi7s71oztbKHn99 jDWaFgHHGaspJWBMwz9MfRR+dZSYp2mWqswML7AT+SzduGQDunySPqvf/wIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFFrYC+nd2MNN98XKRQb3LxijfKa4MB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvV3RnTDZkM1l3MDMzeGNwRkJ2Y3ZHS044cHJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKhRnwQkD BgAqFGfCATANBgkqhkiG9w0BAQsFAAOCAQEAvps6ktgO1ba1rOjwksspmN9ybfCS VSnOOFLn4+teVhi/e3DLCI3OtLGb+f0P71TxsS9KhoZeQX2h9IZTWbPfIwjDfOjj 2SzigH/Dd+K8W5V3s13cIl5DnIaEJlOCuuK6fJEYEswOOUFw+16nT1iluuAguEty nbxnD0kTRCpdYDDl/Oe0DoxEC9S7SAYQd77xt2cGx3ngnjGR+U9/NQPNQoCzyhg1 1En96atLnoJ4Sgs1rCRV2jGdHxdLoqiS+S5fH68uKDCN3+/U5Qr2BUmXNt0Cm8Lo NM44MrZ2g+EpPdlILR0uNekMqqcS6USWMb68pVLjvKzO//nYEFhK2aKCKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:13 2025 by rpki-client