This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ns53C157yUD7oILiiLypNGR4EuY.roa File: ns53C157yUD7oILiiLypNGR4EuY.roa (raw, json) Hash identifier: ehzV7fbIvl4JsyuzhHGa70LFpVS03P5E0xTPY/SyGk4= Subject key identifier: 9E:CE:77:0B:5E:7B:C9:40:FB:A0:82:E2:88:BC:A9:34:64:78:12:E6 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019A2AC92CDDCA0CAD41A362BC68F56349BD Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ns53C157yUD7oILiiLypNGR4EuY.roa Signing time: Tue 28 Oct 2025 12:26:58 +0000 ROA not before: Tue 28 Oct 2025 12:26:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214111 IP address blocks: 2a14:67c1:a170::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2a:c9:2c:dd:ca:0c:ad:41:a3:62:bc:68:f5:63:49:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Oct 28 12:26:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ece770b5e7bc940fba082e288bca934647812e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:51:da:38:d0:e4:09:03:ad:71:41:25:74: 2d:16:c2:8c:4f:08:f0:8d:7e:48:a3:58:0f:ed:42: 12:ac:e4:19:b7:3c:1e:17:98:fd:12:e9:46:0a:a7: 23:db:23:fd:09:79:bd:49:4d:da:32:29:01:de:77: 51:56:74:0c:1e:c4:78:5d:7e:3b:e6:e5:09:01:03: 0f:10:a6:e0:36:07:b5:9b:bb:cf:c5:17:ad:2e:9d: 70:02:ae:d7:fb:3e:fc:79:f5:e9:ea:0c:fd:66:d3: 9f:6c:e0:f5:2c:9b:a6:fd:ff:bc:5b:7f:48:6e:93: 02:3b:de:6f:f8:cd:73:5f:f1:e3:da:49:61:4c:43: 7f:ad:28:f0:24:42:84:f6:eb:a2:5f:b7:a6:06:57: 0a:8b:c4:10:b3:f9:9b:5e:a6:6c:0b:10:33:37:aa: f6:cc:9c:0f:fd:b7:a7:5d:3e:f3:3d:0c:62:c1:93: 06:06:d9:38:ba:5d:ae:a3:55:16:b4:36:01:0e:a9: fb:6e:b9:9a:ab:84:b6:a6:87:33:51:19:ce:27:54: 94:3b:bc:8e:a3:59:4e:40:4c:d2:f1:4d:52:2c:53: 1c:7c:de:f4:8e:cf:79:c0:31:32:fa:ed:0f:73:c6: 70:12:6e:81:5c:6c:e8:72:a0:bc:66:e3:80:d8:42: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:77:0B:5E:7B:C9:40:FB:A0:82:E2:88:BC:A9:34:64:78:12:E6 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ns53C157yUD7oILiiLypNGR4EuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a170::/44 Signature Algorithm: sha256WithRSAEncryption 9b:f0:e7:79:23:2a:0c:72:c7:5b:9c:59:a3:da:65:e1:ca:7a: ca:e5:85:93:df:97:84:74:02:06:55:a0:99:9f:e0:85:de:06: 84:e1:c7:3f:0e:26:2a:ea:2e:28:a3:26:5c:0c:e8:2c:01:9f: f6:c7:df:2b:41:9c:73:5c:d3:24:e7:8d:36:56:32:87:a9:ee: 9a:66:7f:91:76:e5:67:3f:23:47:4f:70:98:eb:08:2c:ad:5e: a5:7e:fd:22:a1:d9:5f:7d:6c:88:6a:35:a8:35:0a:cd:27:90: 49:b8:40:55:03:71:d0:9c:64:c5:3c:24:85:dc:d2:9a:76:9e: 34:73:33:52:34:b3:f3:10:eb:d2:e7:b3:af:a8:3a:3c:1d:2f: 39:ef:9b:fa:dc:54:1d:59:23:45:9c:af:96:bc:5c:80:f3:ff: b5:53:a1:b9:fd:fa:2f:14:a9:3d:fb:ef:c4:ac:24:ef:08:17: bc:58:cb:ca:b4:08:00:93:c9:a8:4d:94:e4:e6:21:6d:ec:f4: f7:83:7c:8e:d0:38:93:4f:3f:6b:c2:b2:35:34:58:ba:7d:f4: 10:3d:82:6e:de:eb:e9:df:66:bc:76:9c:51:b8:c4:72:c9:7f: 1a:c4:49:42:e1:3f:8b:0d:80:46:85:f2:36:2c:00:93:c9:17: a4:83:e1:d4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZoqySzdygytQaNivGj1Y0m9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMDI4MTIyNjU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWNlNzcwYjVlN2JjOTQwZmJhMDgyZTI4OGJjYTkzNDY0NzgxMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FBR2jjQ5AkDrXFBJXQtFsKMTwjw jX5Io1gP7UISrOQZtzweF5j9EulGCqcj2yP9CXm9SU3aMikB3ndRVnQMHsR4XX47 5uUJAQMPEKbgNge1m7vPxRetLp1wAq7X+z78efXp6gz9ZtOfbOD1LJum/f+8W39I bpMCO95v+M1zX/Hj2klhTEN/rSjwJEKE9uuiX7emBlcKi8QQs/mbXqZsCxAzN6r2 zJwP/benXT7zPQxiwZMGBtk4ul2uo1UWtDYBDqn7brmaq4S2poczURnOJ1SUO7yO o1lOQEzS8U1SLFMcfN70js95wDEy+u0Pc8ZwEm6BXGzocqC8ZuOA2EJhkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ7Odwtee8lA+6CC4oi8qTRkeBLmMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvbnM1M0MxNTd5VUQ3b0lMaWlMeXBOR1I0RXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaFw MA0GCSqGSIb3DQEBCwUAA4IBAQCb8Od5IyoMcsdbnFmj2mXhynrK5YWT35eEdAIG VaCZn+CF3gaE4cc/DiYq6i4ooyZcDOgsAZ/2x98rQZxzXNMk5402VjKHqe6aZn+R duVnPyNHT3CY6wgsrV6lfv0iodlffWyIajWoNQrNJ5BJuEBVA3HQnGTFPCSF3NKa dp40czNSNLPzEOvS57OvqDo8HS8575v63FQdWSNFnK+WvFyA8/+1U6G5/fovFKk9 ++/ErCTvCBe8WMvKtAgAk8moTZTk5iFt7PT3g3yO0DiTTz9rwrI1NFi6ffQQPYJu 3uvp32a8dpxRuMRyyX8axElC4T+LDYBGhfI2LACTyRekg+HU -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:04 2025 by rpki-client