This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/n64T8iGozPOi4A6djGYSUVLinU4.roa File: n64T8iGozPOi4A6djGYSUVLinU4.roa (raw, json) Hash identifier: EaQVFsic5JfKLH4CODQO096prcewnfdQV72WQ+P5ZsE= Subject key identifier: 9F:AE:13:F2:21:A8:CC:F3:A2:E0:0E:9D:8C:66:12:51:52:E2:9D:4E Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019AD02616E8AFE33410276D4F39DD150DF2 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/n64T8iGozPOi4A6djGYSUVLinU4.roa Signing time: Sat 29 Nov 2025 15:05:48 +0000 ROA not before: Sat 29 Nov 2025 15:05:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200455 IP address blocks: 2a14:67c2:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:26:16:e8:af:e3:34:10:27:6d:4f:39:dd:15:0d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Nov 29 15:05:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9fae13f221a8ccf3a2e00e9d8c66125152e29d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:1b:63:b3:e7:6c:aa:23:a6:c2:16:13:29: 1e:02:e7:30:1c:56:29:94:08:b1:f9:9d:f4:2d:6e: aa:6b:98:7e:02:d8:5a:c3:41:42:01:cb:38:f3:de: 38:8b:5a:23:fb:93:e6:5d:76:5e:bb:f2:a3:3e:06: 22:74:60:e2:56:d8:cb:86:99:1f:0c:b7:5b:b8:8c: 3b:2a:23:79:a7:b5:53:b7:ff:90:43:8a:85:f6:7b: 1c:99:a8:67:80:73:18:26:bd:81:64:00:05:fc:65: 21:bb:20:95:a0:cf:d7:e4:1b:9e:33:65:32:3b:8b: 04:c6:81:79:83:81:e0:9f:98:1c:c5:99:72:b8:6d: 6f:7e:f0:b3:5f:78:5a:01:9a:84:08:d7:a0:dd:e2: 8f:e5:aa:80:41:fb:66:ab:43:ee:f1:3c:07:a4:a6: 52:ca:18:cb:84:30:0c:9c:5c:c9:60:4e:ab:8e:bc: 0d:c3:23:45:b9:d1:cb:d0:5a:db:da:19:c5:3f:0a: 3d:4b:b5:b4:3a:b7:5a:49:73:e1:34:62:e2:bb:c0: 60:6a:d9:7a:a8:d1:a6:04:16:de:cd:d2:ae:91:51: a7:f5:20:79:5f:b3:50:6e:d3:1e:11:31:06:7d:b9: 7c:b5:b5:08:df:a3:d8:11:61:83:58:3a:58:95:a9: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AE:13:F2:21:A8:CC:F3:A2:E0:0E:9D:8C:66:12:51:52:E2:9D:4E X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/n64T8iGozPOi4A6djGYSUVLinU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:b00::/40 Signature Algorithm: sha256WithRSAEncryption 91:a7:68:3e:10:ae:56:fc:f7:d4:c2:4c:5a:10:46:5f:35:7a: 2b:74:16:fd:8d:2e:b7:cd:a4:23:0d:e7:56:a6:f4:71:68:af: a3:df:0e:f6:28:66:98:9f:18:ea:29:d2:05:be:0b:65:72:d4: 49:61:89:6c:67:0e:7f:87:c0:de:d2:c7:60:52:1f:df:7b:c1: 50:51:de:3e:15:04:5c:89:30:04:6f:86:43:e6:0f:8c:21:54: 36:98:91:ec:d3:99:fa:1a:ac:32:ec:dd:49:54:69:b7:7b:b3: 04:b4:1b:54:d6:03:a7:23:05:05:8a:99:9a:0d:ed:19:ee:12: dd:54:28:e4:50:68:4b:e7:9d:d9:08:56:4a:8e:69:40:42:06: f7:67:c0:24:24:a6:12:14:bf:61:fc:7f:72:5e:7f:4a:f4:57: 70:88:ba:3d:e4:42:47:b6:81:b0:0d:59:a0:ce:9b:bc:d9:fa: 72:cb:13:06:33:33:c6:23:75:b1:31:27:d6:44:a3:c7:d3:c9: e9:fc:a6:ff:3f:f2:34:fb:af:f7:39:63:d6:64:5e:ce:40:11: 15:4d:6a:9a:25:d3:4b:82:19:bb:ad:72:33:dd:a5:e9:9f:ac: b6:c4:71:86:3d:a2:80:60:71:99:c6:6c:1a:67:da:84:52:6a: de:55:33:57 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZrQJhbor+M0ECdtTzndFQ3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMTI5MTUwNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmFlMTNmMjIxYThjY2YzYTJlMDBlOWQ4YzY2MTI1MTUyZTI5ZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPobY7PnbKojpsIWEykeAucwHFYp lAix+Z30LW6qa5h+Athaw0FCAcs48944i1oj+5PmXXZeu/KjPgYidGDiVtjLhpkf DLdbuIw7KiN5p7VTt/+QQ4qF9nscmahngHMYJr2BZAAF/GUhuyCVoM/X5BueM2Uy O4sExoF5g4Hgn5gcxZlyuG1vfvCzX3haAZqECNeg3eKP5aqAQftmq0Pu8TwHpKZS yhjLhDAMnFzJYE6rjrwNwyNFudHL0Frb2hnFPwo9S7W0OrdaSXPhNGLiu8Bgatl6 qNGmBBbezdKukVGn9SB5X7NQbtMeETEGfbl8tbUI36PYEWGDWDpYlakj0QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJ+uE/IhqMzzouAOnYxmElFS4p1OMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvbjY0VDhpR296UE9pNEE2ZGpHWVNVVkxpblU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwgsw DQYJKoZIhvcNAQELBQADggEBAJGnaD4Qrlb899TCTFoQRl81eit0Fv2NLrfNpCMN 51am9HFor6PfDvYoZpifGOop0gW+C2Vy1ElhiWxnDn+HwN7Sx2BSH997wVBR3j4V BFyJMARvhkPmD4whVDaYkezTmfoarDLs3UlUabd7swS0G1TWA6cjBQWKmZoN7Rnu Et1UKORQaEvnndkIVkqOaUBCBvdnwCQkphIUv2H8f3Jef0r0V3CIuj3kQke2gbAN WaDOm7zZ+nLLEwYzM8YjdbExJ9ZEo8fTyen8pv8/8jT7r/c5Y9ZkXs5AERVNapol 00uCGbutcjPdpemfrLbEcYY9ooBgcZnGbBpn2oRSat5VM1c= -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:04 2025 by rpki-client