This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/7JZx9c6XDeqetJQ168f_qyH8sGo.roa File: 7JZx9c6XDeqetJQ168f_qyH8sGo.roa (raw, json) Hash identifier: qwQd8DIHVCiZVijR7ZMXbREc20xhro95ocI99mf1nJo= Subject key identifier: EC:96:71:F5:CE:97:0D:EA:9E:B4:94:35:EB:C7:FF:AB:21:FC:B0:6A Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B1D1F9DC2B50EC361F93848926C22C4C3 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/7JZx9c6XDeqetJQ168f_qyH8sGo.roa Signing time: Sun 14 Dec 2025 13:49:29 +0000 ROA not before: Sun 14 Dec 2025 13:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210634 IP address blocks: 2a14:67c1:a040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:1f:9d:c2:b5:0e:c3:61:f9:38:48:92:6c:22:c4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 14 13:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec9671f5ce970dea9eb49435ebc7ffab21fcb06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:2b:3b:27:d9:ff:00:7c:24:ea:1b:c6:81: a1:b7:20:6b:f1:cb:7d:8f:06:ec:69:c1:2b:a6:1a: f5:8e:ef:a1:19:fc:ef:8e:e1:7c:db:5e:b6:c7:83: 76:51:a9:1c:a8:5d:14:4c:86:d7:41:20:46:f6:55: 36:3a:70:2e:b0:0a:c8:6d:ad:94:0a:92:5c:32:ac: b7:99:5a:a4:4b:af:65:25:93:f5:a0:e5:a4:2d:9b: b6:3d:8e:01:33:59:1d:08:f7:12:61:90:20:0c:e9: 09:cd:09:34:20:ef:46:c9:09:02:f4:af:6d:9d:ca: 7e:10:7a:20:2d:15:ca:17:e1:11:cb:c2:c3:58:ce: de:3e:b4:77:4d:2d:6d:d8:bd:90:87:43:1d:bd:ef: 49:c3:c7:ea:1e:59:d5:29:c9:08:fb:ed:a4:1f:64: 77:4a:36:36:68:3c:38:b8:2a:29:87:4a:0a:c4:19: df:91:41:7b:bc:57:07:3a:ea:7a:a7:c1:0a:0b:a2: d4:96:db:ea:9e:98:01:ad:e1:6c:53:41:f1:dd:5b: 10:14:13:ee:b5:fd:c4:39:a0:7e:07:d9:d3:47:5a: d7:ad:e3:93:ca:3e:df:73:ee:20:a4:98:b0:7d:5a: 85:04:cb:58:01:b0:32:4e:d1:9b:82:fc:bf:23:24: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:96:71:F5:CE:97:0D:EA:9E:B4:94:35:EB:C7:FF:AB:21:FC:B0:6A X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/7JZx9c6XDeqetJQ168f_qyH8sGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a040::/44 Signature Algorithm: sha256WithRSAEncryption 42:1d:f6:02:a3:f6:5e:91:ec:08:85:a6:42:66:96:5b:34:73: c7:1e:2e:c2:bf:de:04:d6:6a:02:b8:fc:41:ad:d9:70:46:ea: d9:27:89:39:44:fc:c3:42:e2:13:b8:b9:cb:5e:46:07:fa:82: 0b:61:a5:9b:05:88:0d:7e:27:c0:73:d8:7a:e2:4c:de:64:41: c3:9d:cf:b4:da:14:97:1b:9e:3b:21:a8:55:60:31:0f:8f:45: 10:06:49:08:20:8a:33:a6:5c:9f:b7:6e:9e:8e:71:88:a2:d3: 24:f5:55:47:5f:3b:34:1e:5c:9d:51:68:6c:9d:96:99:4c:90: a4:4e:0a:f4:66:07:cb:33:b1:b8:79:cc:ce:b6:69:2b:0c:1c: 5e:e4:bd:7e:22:06:f6:25:bb:cd:dc:45:30:72:d9:91:19:50: a8:3c:59:4a:df:1d:8a:8b:31:b6:5c:c2:e7:85:3c:8b:58:b7: db:c7:6e:10:25:5b:75:89:fa:ca:4f:71:13:df:d9:69:a4:60: f1:d2:95:3f:45:85:c4:a1:86:34:4b:ae:2a:93:cd:ad:de:2f: f5:12:d2:96:2c:69:72:95:09:09:eb:d4:f9:68:71:cb:8d:a6: dc:91:65:df:06:a8:71:57:32:4e:df:dc:46:28:2d:f1:c7:04: 9b:a3:7a:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsdH53CtQ7DYfk4SJJsIsTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjE0MTM0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzk2NzFmNWNlOTcwZGVhOWViNDk0MzVlYmM3ZmZhYjIxZmNiMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp54rOyfZ/wB8JOobxoGhtyBr8ct9 jwbsacErphr1ju+hGfzvjuF82162x4N2UakcqF0UTIbXQSBG9lU2OnAusArIba2U CpJcMqy3mVqkS69lJZP1oOWkLZu2PY4BM1kdCPcSYZAgDOkJzQk0IO9GyQkC9K9t ncp+EHogLRXKF+ERy8LDWM7ePrR3TS1t2L2Qh0Mdve9Jw8fqHlnVKckI++2kH2R3 SjY2aDw4uCoph0oKxBnfkUF7vFcHOup6p8EKC6LUltvqnpgBreFsU0Hx3VsQFBPu tf3EOaB+B9nTR1rXreOTyj7fc+4gpJiwfVqFBMtYAbAyTtGbgvy/IyQo6QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOyWcfXOlw3qnrSUNevH/6sh/LBqMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvN0paeDljNlhEZXFldEpRMTY4Zl9xeUg4c0dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaBA MA0GCSqGSIb3DQEBCwUAA4IBAQBCHfYCo/ZekewIhaZCZpZbNHPHHi7Cv94E1moC uPxBrdlwRurZJ4k5RPzDQuITuLnLXkYH+oILYaWbBYgNfifAc9h64kzeZEHDnc+0 2hSXG547IahVYDEPj0UQBkkIIIozplyft26ejnGIotMk9VVHXzs0HlydUWhsnZaZ TJCkTgr0ZgfLM7G4eczOtmkrDBxe5L1+Igb2JbvN3EUwctmRGVCoPFlK3x2KizG2 XMLnhTyLWLfbx24QJVt1ifrKT3ET39lppGDx0pU/RYXEoYY0S64qk82t3i/1EtKW LGlylQkJ69T5aHHLjabckWXfBqhxVzJO39xGKC3xxwSbo3q9 -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:32 2025 by rpki-client