This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/dFWTgzVbD7QE8avl0HmFOkySa0c.roa File: dFWTgzVbD7QE8avl0HmFOkySa0c.roa (raw, json) Hash identifier: MLbpkHKyaG93t0L963D173N7xY/xyg6z++OEY0PC0kc= Subject key identifier: 74:55:93:83:35:5B:0F:B4:04:F1:AB:E5:D0:79:85:3A:4C:92:6B:47 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019ABEC6DF14ADE54F9A7130233A1E855A5D Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/dFWTgzVbD7QE8avl0HmFOkySa0c.roa Signing time: Wed 26 Nov 2025 06:08:15 +0000 ROA not before: Wed 26 Nov 2025 06:08:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207529 IP address blocks: 2a14:67c1:b590::/48 maxlen: 48 2a14:67c1:c200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:be:c6:df:14:ad:e5:4f:9a:71:30:23:3a:1e:85:5a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Nov 26 06:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=74559383355b0fb404f1abe5d079853a4c926b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c0:a5:1e:4b:8d:ef:df:bc:36:bd:b0:5e:02: d7:41:f8:46:83:da:d2:ac:81:09:38:f4:b6:3f:c8: a9:ca:f6:ad:44:c5:2d:c1:4f:95:7e:09:15:78:c4: 91:c4:4a:e0:c0:ff:f1:37:47:e6:80:67:ca:8f:b3: 6f:f8:68:65:7c:26:f3:da:b4:a0:c5:c5:0a:c8:5d: 51:2d:60:0d:c2:0d:03:0e:0d:ab:92:b2:10:bf:69: 20:8c:9a:fa:49:eb:ba:89:96:6d:b2:78:eb:cb:e4: de:67:45:bd:c9:71:6f:b9:da:3a:bd:b7:48:7a:c5: 4b:11:cd:c1:6d:a1:84:35:e4:f8:41:df:db:aa:1b: 4b:46:73:64:57:48:82:6e:ea:57:9e:3f:ea:0b:c6: 3c:95:d5:29:2b:72:5d:6c:66:0f:32:38:8e:25:6d: a1:ad:c4:2b:55:4c:f6:28:81:1f:1f:c5:e1:4b:de: 46:0d:87:d8:13:5e:59:2d:3d:e2:6e:33:57:10:3f: 2e:f6:c7:24:9d:59:96:ff:25:a1:f1:fe:5f:2f:cf: 0d:67:60:90:2c:c4:d9:48:ec:9d:dd:56:1f:22:b2: f3:ce:3a:bc:e3:9f:10:1d:05:1a:b9:61:d0:7c:97: 59:ee:bc:09:5a:80:66:33:85:83:45:03:0e:03:72: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:55:93:83:35:5B:0F:B4:04:F1:AB:E5:D0:79:85:3A:4C:92:6B:47 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/dFWTgzVbD7QE8avl0HmFOkySa0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:b590::/48 2a14:67c1:c200::/40 Signature Algorithm: sha256WithRSAEncryption 1f:b3:36:f5:8d:4f:59:48:3b:62:d2:36:ce:b6:5d:4f:be:a9: 26:38:bb:cb:12:5a:4a:08:b4:d2:22:78:95:2a:37:40:89:37: 90:5c:97:b6:65:04:44:b7:c9:2f:5d:63:b7:e6:04:77:4a:c4: 6f:ff:d2:7f:61:11:e4:48:60:78:09:a4:c0:d8:3d:5e:47:dc: d4:42:d1:28:49:c8:85:bc:16:57:3e:df:8d:58:69:45:bc:d8: ae:1c:e9:2d:5a:9f:4e:3f:c6:d3:b8:8c:c5:f1:8a:7b:2f:66: 5a:5c:0e:d2:4d:13:51:8c:05:fb:2e:a9:a0:57:19:1b:12:01: 16:cc:49:51:16:4b:6b:b4:c4:c0:5f:ce:e4:80:f8:94:e4:a5: b2:cb:85:b9:fd:91:64:ec:09:f7:c5:29:1d:00:a4:17:88:a1: 2d:99:ae:e8:eb:e9:6f:ad:50:60:00:52:0f:36:f5:c7:24:f0: 1e:dd:a9:9f:34:64:a2:ef:14:e8:a3:9b:48:d9:3f:6b:03:b4: 31:c1:5a:1a:6a:e9:bc:93:9c:c4:16:cb:99:e5:ab:0e:99:e3: 6a:47:41:d8:f3:dd:64:ae:4e:f6:3c:e8:80:c0:66:67:63:e3: fc:4d:f7:51:78:dd:f1:d0:8f:30:63:af:e0:a2:fa:9b:76:2f: 52:f8:c7:c2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZq+xt8UreVPmnEwIzoehVpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMTI2MDYwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDU1OTM4MzM1NWIwZmI0MDRmMWFiZTVkMDc5ODUzYTRjOTI2YjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMClHkuN79+8Nr2wXgLXQfhGg9rS rIEJOPS2P8ipyvatRMUtwU+VfgkVeMSRxErgwP/xN0fmgGfKj7Nv+GhlfCbz2rSg xcUKyF1RLWANwg0DDg2rkrIQv2kgjJr6Seu6iZZtsnjry+TeZ0W9yXFvudo6vbdI esVLEc3BbaGENeT4Qd/bqhtLRnNkV0iCbupXnj/qC8Y8ldUpK3JdbGYPMjiOJW2h rcQrVUz2KIEfH8XhS95GDYfYE15ZLT3ibjNXED8u9scknVmW/yWh8f5fL88NZ2CQ LMTZSOyd3VYfIrLzzjq8458QHQUauWHQfJdZ7rwJWoBmM4WDRQMOA3K+9wIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFHRVk4M1Ww+0BPGr5dB5hTpMkmtHMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvZEZXVGd6VmJEN1FFOGF2bDBIbUZPa3lTYTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhRnwbWQ AwYAKhRnwcIwDQYJKoZIhvcNAQELBQADggEBAB+zNvWNT1lIO2LSNs62XU++qSY4 u8sSWkoItNIieJUqN0CJN5Bcl7ZlBES3yS9dY7fmBHdKxG//0n9hEeRIYHgJpMDY PV5H3NRC0ShJyIW8Flc+341YaUW82K4c6S1an04/xtO4jMXxinsvZlpcDtJNE1GM BfsuqaBXGRsSARbMSVEWS2u0xMBfzuSA+JTkpbLLhbn9kWTsCffFKR0ApBeIoS2Z rujr6W+tUGAAUg829cck8B7dqZ80ZKLvFOijm0jZP2sDtDHBWhpq6byTnMQWy5nl qw6Z42pHQdjz3WSuTvY86IDAZmdj4/xN91F43fHQjzBjr+Ci+pt2L1L4x8I= -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:15 2025 by rpki-client