This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FhcfVTrKs3wdnweHSfUbrMAymjM.roa File: FhcfVTrKs3wdnweHSfUbrMAymjM.roa (raw, json) Hash identifier: 53RCkAN1bZh17VlnHAbEFgrtHLkugYga5sFKxWOJMg8= Subject key identifier: 16:17:1F:55:3A:CA:B3:7C:1D:9F:07:87:49:F5:1B:AC:C0:32:9A:33 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B1D1CCBBB5DCF36B2028D8E95FF18039E Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FhcfVTrKs3wdnweHSfUbrMAymjM.roa Signing time: Sun 14 Dec 2025 13:46:24 +0000 ROA not before: Sun 14 Dec 2025 13:46:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134823 IP address blocks: 2a14:67c1:a190::/48 maxlen: 48 2a14:67c1:a191::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:1c:cb:bb:5d:cf:36:b2:02:8d:8e:95:ff:18:03:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 14 13:46:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=16171f553acab37c1d9f078749f51bacc0329a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:90:73:a3:ef:17:48:21:a5:aa:be:ef:bc:06: 66:89:72:a7:3f:a8:85:6a:6b:32:a8:dd:99:3e:61: 6a:f3:8f:58:d5:00:3e:95:4e:53:fa:9f:c9:61:a2: 24:1b:82:75:66:0f:30:c0:57:de:4f:08:29:9c:5e: ba:f8:bc:10:98:24:42:14:a3:0c:44:df:b5:b9:fd: 80:53:9a:88:7f:82:d5:de:50:ba:82:f7:50:0f:55: 24:cd:c8:9a:7f:e9:0b:67:b8:36:f1:47:6e:7d:2d: f9:a1:22:ac:43:39:cf:30:b5:a2:4a:3f:f7:e2:28: 72:af:16:b2:68:db:b8:00:c1:c2:37:88:e7:a6:6b: ba:5f:e0:b7:ff:0e:3a:8c:a5:8a:97:1b:df:b7:a5: 67:9a:ae:f2:c5:5e:25:c1:48:26:b7:3e:45:3f:f2: d5:4c:dd:fc:04:9a:9b:5a:2b:5a:de:c2:72:87:97: 1e:26:34:f6:cd:23:e3:b7:5d:f1:9b:0f:96:ca:6d: 22:ab:1c:d4:0b:ee:16:60:c9:6c:7d:c4:cd:fd:0d: 78:a2:f3:89:ba:1c:d6:a7:6e:32:0a:db:fe:9a:dd: b2:fd:a7:be:ce:36:1c:34:6f:6d:f8:02:04:ba:10: eb:8c:37:a0:8c:83:22:41:46:2b:0c:14:99:10:1c: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:17:1F:55:3A:CA:B3:7C:1D:9F:07:87:49:F5:1B:AC:C0:32:9A:33 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/FhcfVTrKs3wdnweHSfUbrMAymjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a190::/47 Signature Algorithm: sha256WithRSAEncryption 1d:ea:9a:e5:12:d8:aa:bb:55:52:02:1d:b2:73:1d:4d:66:10: 71:71:13:fc:c9:a6:07:8e:35:c9:d1:6e:09:ae:21:c7:f2:b4: 27:16:fe:a5:ad:8c:54:df:c5:d0:4d:d6:74:9e:35:40:81:ae: 54:8b:a7:33:7d:58:03:44:5a:36:70:b3:94:ab:67:2f:b6:3c: 89:d3:62:59:96:af:6e:d8:e1:02:b9:f2:98:83:9b:7b:ab:4e: e7:b3:ae:12:f8:e7:9e:63:36:1e:e1:ab:b7:be:9f:76:39:13: 6b:89:63:be:f7:d3:25:45:c9:dc:28:ac:d2:ff:e3:3c:7c:bd: c4:ed:69:be:3f:42:cf:21:8c:d0:54:d3:ae:a0:35:7e:40:87: f9:11:d8:8b:97:43:11:6b:0e:dc:3b:1e:96:1e:c1:76:7f:8e: c0:78:97:ae:9e:7e:66:3b:a6:1d:a2:5b:94:c1:e9:05:d1:57: 77:e8:85:cd:7b:44:75:bf:38:2d:8c:07:fe:ca:8c:5c:26:11: 81:a8:44:1b:5a:a5:4f:03:26:a9:2c:ca:d4:26:d1:e5:f4:8e: e3:05:15:39:16:3d:0a:95:1c:76:19:60:d7:2d:6b:1c:70:93: c9:89:4a:ba:9b:4c:33:c1:4d:f5:4d:5b:61:f5:88:75:61:4d: 99:02:8b:d0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsdHMu7Xc82sgKNjpX/GAOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjE0MTM0NjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjE3MWY1NTNhY2FiMzdjMWQ5ZjA3ODc0OWY1MWJhY2MwMzI5YTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JBzo+8XSCGlqr7vvAZmiXKnP6iF amsyqN2ZPmFq849Y1QA+lU5T+p/JYaIkG4J1Zg8wwFfeTwgpnF66+LwQmCRCFKMM RN+1uf2AU5qIf4LV3lC6gvdQD1Ukzciaf+kLZ7g28UdufS35oSKsQznPMLWiSj/3 4ihyrxayaNu4AMHCN4jnpmu6X+C3/w46jKWKlxvft6Vnmq7yxV4lwUgmtz5FP/LV TN38BJqbWita3sJyh5ceJjT2zSPjt13xmw+Wym0iqxzUC+4WYMlsfcTN/Q14ovOJ uhzWp24yCtv+mt2y/ae+zjYcNG9t+AIEuhDrjDegjIMiQUYrDBSZEByMbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBYXH1U6yrN8HZ8Hh0n1G6zAMpozMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvRmhjZlZUcktzM3dkbndlSFNmVWJyTUF5bWpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhRnwaGQ MA0GCSqGSIb3DQEBCwUAA4IBAQAd6prlEtiqu1VSAh2ycx1NZhBxcRP8yaYHjjXJ 0W4JriHH8rQnFv6lrYxU38XQTdZ0njVAga5Ui6czfVgDRFo2cLOUq2cvtjyJ02JZ lq9u2OECufKYg5t7q07ns64S+OeeYzYe4au3vp92ORNriWO+99MlRcncKKzS/+M8 fL3E7Wm+P0LPIYzQVNOuoDV+QIf5EdiLl0MRaw7cOx6WHsF2f47AeJeunn5mO6Yd oluUwekF0Vd36IXNe0R1vzgtjAf+yoxcJhGBqEQbWqVPAyapLMrUJtHl9I7jBRU5 Fj0KlRx2GWDXLWsccJPJiUq6m0wzwU31TVth9Yh1YU2ZAovQ -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:30 2025 by rpki-client