This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BE0kuF9VRLLXedWDPrjz7zEIoAg.roa File: BE0kuF9VRLLXedWDPrjz7zEIoAg.roa (raw, json) Hash identifier: LRM2RuYQ/TGLFoCW04HKYha/6QmvF/KmBz7t3oyUTUE= Subject key identifier: 04:4D:24:B8:5F:55:44:B2:D7:79:D5:83:3E:B8:F3:EF:31:08:A0:08 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B302BB6DB34B434800AF83367E04968C4 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BE0kuF9VRLLXedWDPrjz7zEIoAg.roa Signing time: Thu 18 Dec 2025 06:35:29 +0000 ROA not before: Thu 18 Dec 2025 06:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201386 IP address blocks: 2a14:67c2:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:2b:b6:db:34:b4:34:80:0a:f8:33:67:e0:49:68:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 18 06:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=044d24b85f5544b2d779d5833eb8f3ef3108a008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:b7:29:eb:71:0f:da:12:df:07:98:fa:77: ea:94:fa:f5:65:58:c3:de:06:60:1d:a2:1f:e7:61: 26:f0:6e:dd:29:79:99:98:5a:92:09:b4:a7:ab:fb: 36:6b:2c:cf:cd:6b:db:2d:bb:1a:b0:bf:66:73:53: 22:63:ed:82:cf:26:b1:8f:49:90:e1:85:05:df:aa: 34:d6:25:2a:21:63:eb:b8:af:89:58:12:13:80:3c: 83:a9:fb:69:87:47:f6:86:21:28:42:92:9a:36:26: 90:d3:8c:d2:bc:a3:09:d1:7b:f6:f8:c5:ec:4a:82: a7:8d:dd:53:5f:7b:e3:45:0e:5c:9f:11:f0:0d:78: 24:88:32:d3:90:bb:a4:42:68:06:ce:10:72:3c:ef: 3d:80:73:db:dc:5a:78:c1:3a:85:1d:7a:cd:b9:87: ed:c7:48:45:23:90:42:e3:42:72:0b:b9:8c:25:eb: a8:59:09:8d:ae:b6:ba:f6:97:d5:9a:42:b0:c4:94: 1e:25:c7:e4:d6:3d:7a:e3:bc:13:45:a1:5a:34:71: 4d:50:ee:f7:50:f7:25:b1:0a:d6:27:9b:75:98:f9: 0e:f5:96:08:44:85:2e:c4:19:89:22:29:ed:b8:b1: 38:7c:d0:8b:02:f8:8e:c6:92:74:78:f3:4b:26:c7: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4D:24:B8:5F:55:44:B2:D7:79:D5:83:3E:B8:F3:EF:31:08:A0:08 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/BE0kuF9VRLLXedWDPrjz7zEIoAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:a00::/40 Signature Algorithm: sha256WithRSAEncryption 8c:4e:9f:56:28:41:29:61:f0:22:f9:3d:a1:3d:ff:3a:bb:42: ce:38:b1:fb:83:12:66:7c:7c:a6:1b:21:38:a0:d5:3c:5e:03: 66:a2:17:3e:ad:01:52:5b:ab:d8:3a:48:ae:c4:01:0b:9f:8f: 39:fc:de:c4:41:75:b4:a1:cf:4c:9f:08:c4:a5:7c:e9:10:14: 30:75:f6:02:a8:94:a6:ff:20:53:7f:e6:5e:f6:62:89:ca:e7: dc:01:f9:d1:fc:70:ed:a3:85:b8:27:6a:9e:66:66:14:38:13: 04:cb:94:30:3a:6d:de:96:31:b4:1d:e1:5d:da:96:6d:be:20: 22:02:cd:bb:f2:0b:1b:6a:d9:8c:65:be:96:c9:4a:27:3a:7d: 7f:82:1d:2e:d2:04:f5:48:29:5b:40:18:02:d8:b4:1b:13:fe: 24:7d:bb:23:bb:44:ad:09:62:bb:4c:78:d0:72:54:0e:ba:ac: 9d:4a:1c:68:82:12:67:d8:c1:30:71:ea:88:d5:7f:28:c0:6d: ee:14:a5:5a:b5:d2:5c:f4:1c:07:59:a3:c6:74:1f:d9:5f:54: bc:0b:7a:32:e3:b4:60:3f:b3:93:2d:64:c8:b9:ae:0c:48:af: d7:f5:f3:54:8a:7b:55:d2:3d:89:7a:10:0e:51:21:b8:cb:41: 56:2e:be:48 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZswK7bbNLQ0gAr4M2fgSWjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjE4MDYzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDRkMjRiODVmNTU0NGIyZDc3OWQ1ODMzZWI4ZjNlZjMxMDhhMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ty3KetxD9oS3weY+nfqlPr1ZVjD 3gZgHaIf52Em8G7dKXmZmFqSCbSnq/s2ayzPzWvbLbsasL9mc1MiY+2Czyaxj0mQ 4YUF36o01iUqIWPruK+JWBITgDyDqftph0f2hiEoQpKaNiaQ04zSvKMJ0Xv2+MXs SoKnjd1TX3vjRQ5cnxHwDXgkiDLTkLukQmgGzhByPO89gHPb3Fp4wTqFHXrNuYft x0hFI5BC40JyC7mMJeuoWQmNrra69pfVmkKwxJQeJcfk1j1647wTRaFaNHFNUO73 UPclsQrWJ5t1mPkO9ZYIRIUuxBmJIintuLE4fNCLAviOxpJ0ePNLJsfUYQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFARNJLhfVUSy13nVgz648+8xCKAIMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvQkUwa3VGOVZSTExYZWRXRFByano3ekVJb0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwgow DQYJKoZIhvcNAQELBQADggEBAIxOn1YoQSlh8CL5PaE9/zq7Qs44sfuDEmZ8fKYb ITig1TxeA2aiFz6tAVJbq9g6SK7EAQufjzn83sRBdbShz0yfCMSlfOkQFDB19gKo lKb/IFN/5l72YonK59wB+dH8cO2jhbgnap5mZhQ4EwTLlDA6bd6WMbQd4V3alm2+ ICICzbvyCxtq2YxlvpbJSic6fX+CHS7SBPVIKVtAGALYtBsT/iR9uyO7RK0JYrtM eNByVA66rJ1KHGiCEmfYwTBx6ojVfyjAbe4UpVq10lz0HAdZo8Z0H9lfVLwLejLj tGA/s5MtZMi5rgxIr9f181SKe1XSPYl6EA5RIbjLQVYuvkg= -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:32 2025 by rpki-client