This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/pCvu8AAoJAetOw62bqVVv77tbic.roa File: pCvu8AAoJAetOw62bqVVv77tbic.roa (raw, json) Hash identifier: MwOO7PnqBYM7Mno4iVzjzmiUd0ssRPqT6G3/GPlWlec= Subject key identifier: A4:2B:EE:F0:00:28:24:07:AD:3B:0E:B6:6E:A5:55:BF:BE:ED:6E:27 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019AD9284D5AE623A49425D52578D6904487 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/pCvu8AAoJAetOw62bqVVv77tbic.roa Signing time: Mon 01 Dec 2025 09:04:48 +0000 ROA not before: Mon 01 Dec 2025 09:04:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135671 IP address blocks: 2a14:67c2:519::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:28:4d:5a:e6:23:a4:94:25:d5:25:78:d6:90:44:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 1 09:04:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a42beef000282407ad3b0eb66ea555bfbeed6e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:3c:e6:1d:75:24:65:31:30:1e:80:0c:00: be:1a:19:ee:f2:21:87:75:bf:a3:4a:e4:1c:20:26: cd:b4:04:96:11:da:09:6e:2b:7a:5a:3c:83:23:76: 4f:86:b4:6f:59:64:af:5e:8c:91:f0:09:ef:53:6f: 2e:43:95:67:79:89:fb:f9:0b:eb:4f:24:24:29:33: 96:b7:41:85:05:b9:73:45:fd:f0:1f:e1:97:ef:ec: b3:98:ca:2c:bc:d1:ae:ee:e6:93:d2:c5:bc:53:1c: 82:41:29:2a:b0:4b:d2:6b:50:04:97:87:97:e1:e7: bb:7e:d8:3c:29:c7:73:fa:fe:48:c0:e5:51:fd:e1: 2a:51:32:e6:63:2f:d9:bb:84:4c:f4:ed:29:3b:b6: 9d:ad:0e:c3:f3:73:01:4c:b5:57:36:73:fe:c8:6f: e0:2e:59:e2:c7:07:74:4b:30:a4:e5:9c:aa:16:7e: 02:eb:06:a8:fa:92:30:ed:cb:2f:7f:4a:5c:dc:37: 87:ed:16:0f:35:9c:e8:4d:85:e1:db:cb:df:cb:1e: 4e:e6:40:0a:11:0f:3c:05:2e:e3:b9:31:82:08:4a: 00:f3:e0:83:72:71:d0:7e:d1:70:bf:02:19:15:e5: 47:b3:36:7e:19:4f:c6:de:89:38:8c:fa:21:3f:c8: 3d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2B:EE:F0:00:28:24:07:AD:3B:0E:B6:6E:A5:55:BF:BE:ED:6E:27 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/pCvu8AAoJAetOw62bqVVv77tbic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:519::/48 Signature Algorithm: sha256WithRSAEncryption 8e:fa:26:29:0b:2f:ed:10:51:4d:e5:29:2b:a6:e4:f2:96:e1: b6:b2:dd:ff:16:de:c8:2f:14:9d:9c:c1:cb:a1:84:d6:20:35: 34:79:49:9f:44:20:18:3d:5b:1b:1e:f1:3a:7a:d4:06:72:2c: 51:ca:40:b0:4b:cd:18:47:60:33:e9:f2:e0:d5:0e:55:fa:24: 0e:5b:76:5f:12:21:72:57:d3:60:b1:46:26:36:53:7b:84:37: ca:32:8a:80:88:5e:78:4e:30:22:09:55:75:27:a8:b2:04:ed: c0:f9:a7:6a:44:a9:aa:c6:18:25:63:4e:d5:0d:46:c0:d0:c8: 14:b7:cc:27:a3:c5:b1:0a:bb:13:e5:66:32:b1:9a:44:62:6e: 7c:77:86:be:b5:1f:99:d9:b2:cf:fa:1a:ca:20:96:e0:de:31: 12:47:96:ef:1c:d9:8a:36:04:b7:04:d6:51:39:47:62:5b:94: c3:81:6e:a0:54:1c:c8:0e:51:96:42:d5:43:c5:be:57:a6:a6: cb:fa:e1:69:86:c8:6c:73:74:b8:0d:c5:43:13:d0:ee:f5:e2: 58:fb:98:17:4b:d9:8c:6c:b5:a9:25:10:bc:ef:c5:df:5a:0c: 54:5b:a5:b4:9a:4d:53:9b:70:74:c3:46:66:ec:b5:dd:e3:af: ab:7d:48:ed -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrZKE1a5iOklCXVJXjWkESHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjAxMDkwNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDJiZWVmMDAwMjgyNDA3YWQzYjBlYjY2ZWE1NTViZmJlZWQ2ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuE85h11JGUxMB6ADAC+Ghnu8iGH db+jSuQcICbNtASWEdoJbit6WjyDI3ZPhrRvWWSvXoyR8AnvU28uQ5VneYn7+Qvr TyQkKTOWt0GFBblzRf3wH+GX7+yzmMosvNGu7uaT0sW8UxyCQSkqsEvSa1AEl4eX 4ee7ftg8Kcdz+v5IwOVR/eEqUTLmYy/Zu4RM9O0pO7adrQ7D83MBTLVXNnP+yG/g Llnixwd0SzCk5ZyqFn4C6wao+pIw7csvf0pc3DeH7RYPNZzoTYXh28vfyx5O5kAK EQ88BS7juTGCCEoA8+CDcnHQftFwvwIZFeVHszZ+GU/G3ok4jPohP8g9zQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKQr7vAAKCQHrTsOtm6lVb++7W4nMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvcEN2dThBQW9KQWV0T3c2MmJxVlZ2Nzd0YmljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRnwgUZ MA0GCSqGSIb3DQEBCwUAA4IBAQCO+iYpCy/tEFFN5SkrpuTyluG2st3/Ft7ILxSd nMHLoYTWIDU0eUmfRCAYPVsbHvE6etQGcixRykCwS80YR2Az6fLg1Q5V+iQOW3Zf EiFyV9NgsUYmNlN7hDfKMoqAiF54TjAiCVV1J6iyBO3A+adqRKmqxhglY07VDUbA 0MgUt8wno8WxCrsT5WYysZpEYm58d4a+tR+Z2bLP+hrKIJbg3jESR5bvHNmKNgS3 BNZROUdiW5TDgW6gVBzIDlGWQtVDxb5XpqbL+uFphshsc3S4DcVDE9Du9eJY+5gX S9mMbLWpJRC878XfWgxUW6W0mk1Tm3B0w0Zm7LXd46+rfUjt -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:36 2025 by rpki-client