This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/NviLvn2pVXoZAmJq9hJyArnB598.roa File: NviLvn2pVXoZAmJq9hJyArnB598.roa (raw, json) Hash identifier: 9r1KRm+R7WMgQtht9Lhj/smai2AansHuzGX5NkQLpxM= Subject key identifier: 36:F8:8B:BE:7D:A9:55:7A:19:02:62:6A:F6:12:72:02:B9:C1:E7:DF Certificate issuer: /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad Certificate serial: 019B075464763EA9754E17C08EF6CD598152 Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/NviLvn2pVXoZAmJq9hJyArnB598.roa Signing time: Wed 10 Dec 2025 08:15:29 +0000 ROA not before: Wed 10 Dec 2025 08:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25251 IP address blocks: 81.94.32.0/22 maxlen: 22 81.94.32.0/23 maxlen: 23 81.94.35.0/24 maxlen: 24 81.94.36.0/24 maxlen: 24 81.94.37.0/24 maxlen: 24 81.94.39.0/24 maxlen: 24 81.94.42.0/24 maxlen: 24 81.94.44.0/24 maxlen: 24 81.94.45.0/24 maxlen: 24 81.94.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:54:64:76:3e:a9:75:4e:17:c0:8e:f6:cd:59:81:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad Validity Not Before: Dec 10 08:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=36f88bbe7da9557a1902626af6127202b9c1e7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:21:79:ca:93:2f:90:9c:2a:b4:38:fb:b7: b9:ae:52:f0:0b:d5:0f:bc:3a:ac:2a:87:be:20:71: 09:91:a9:21:ae:d4:2f:21:09:12:d3:db:65:af:75: 8d:95:d8:3f:61:78:bc:a1:72:8d:2d:1b:04:e8:d1: b0:e2:71:1a:ee:8c:74:a7:8a:b6:4d:23:6d:b5:53: 7e:a7:93:cf:02:0c:5a:a3:01:38:f6:85:f2:b1:59: 24:3a:07:80:ba:fc:e7:ad:85:08:37:de:78:9b:7e: 2a:7f:c9:5a:4b:cf:70:a2:57:56:a9:d8:e6:7c:9d: ba:0e:b9:4e:93:ff:85:9a:af:86:ed:f9:b6:7e:1c: 4a:bc:bb:46:e0:15:41:76:76:69:1f:82:ba:74:ef: 49:03:14:a8:6b:e7:66:df:b7:56:1d:c8:81:af:39: 42:bd:53:19:a7:07:35:a9:bc:9b:e5:61:68:f9:cf: f3:a0:ee:ba:58:04:4a:4e:1a:bc:47:74:a1:60:65: 4e:24:f2:de:8b:ac:73:5a:e9:ff:35:e9:fb:b7:9e: 99:93:a4:18:2d:a1:a4:cf:33:7c:00:e8:13:db:37: 81:27:30:ca:a2:e1:24:63:79:31:69:49:46:6e:bd: 3a:91:54:d1:d4:c0:92:fd:ee:1e:b9:42:94:5a:7d: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F8:8B:BE:7D:A9:55:7A:19:02:62:6A:F6:12:72:02:B9:C1:E7:DF X509v3 Authority Key Identifier: keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/NviLvn2pVXoZAmJq9hJyArnB598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.94.32.0-81.94.37.255 81.94.39.0/24 81.94.42.0/24 81.94.44.0/22 Signature Algorithm: sha256WithRSAEncryption 97:a7:ac:d8:59:43:f6:4c:15:a1:37:e5:43:77:e5:b5:f2:24: 25:2f:85:d1:3c:2c:79:a9:0d:87:4b:4e:80:01:0b:66:0e:84: 4b:af:b2:6c:99:60:ae:60:08:0d:5c:ec:67:6b:77:27:33:46: 0a:14:1c:76:da:ad:c5:78:67:ae:31:94:5e:9c:75:c5:3b:d7: 9f:69:5f:19:a9:8a:d7:30:7b:fd:50:be:87:e3:80:42:c7:bc: 57:cf:70:21:85:a4:89:83:a4:c4:b5:31:69:b4:72:d8:27:99: 99:db:a3:cc:9a:34:c6:a5:d1:73:2e:79:67:a2:32:39:c4:99: 37:35:e9:52:18:6c:1f:c8:3c:40:87:f5:b8:b9:76:6b:7f:f9: 42:df:e1:f5:52:57:e7:47:0b:72:bf:fd:71:5b:f6:ee:d9:54: 71:16:50:94:69:c6:09:2c:65:a9:39:12:76:1c:48:0b:ab:67: f1:6d:68:c1:74:ba:fd:dc:5a:02:50:c3:e4:61:ac:64:e7:d1: 96:a5:fa:f0:cc:24:ce:ba:da:1b:75:65:c5:26:b8:5d:68:1c: a4:51:d5:09:ea:54:1b:5d:74:69:20:b9:5f:d8:73:28:26:1f: 95:46:38:06:e4:a0:70:fc:03:7b:5b:d8:f3:42:01:ae:18:e2: 05:8c:ca:af -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZsHVGR2Pql1ThfAjvbNWYFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNmM4YzA2ZDJkM2MyODAxZjA1NDU4ZmM4MzQxM2RiMGE1 ZGRmYWQwHhcNMjUxMjEwMDgxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmY4OGJiZTdkYTk1NTdhMTkwMjYyNmFmNjEyNzIwMmI5YzFlN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCYhecqTL5CcKrQ4+7e5rlLwC9UP vDqsKoe+IHEJkakhrtQvIQkS09tlr3WNldg/YXi8oXKNLRsE6NGw4nEa7ox0p4q2 TSNttVN+p5PPAgxaowE49oXysVkkOgeAuvznrYUIN954m34qf8laS89woldWqdjm fJ26DrlOk/+Fmq+G7fm2fhxKvLtG4BVBdnZpH4K6dO9JAxSoa+dm37dWHciBrzlC vVMZpwc1qbyb5WFo+c/zoO66WARKThq8R3ShYGVOJPLei6xzWun/Nen7t56Zk6QY LaGkzzN8AOgT2zeBJzDKouEkY3kxaUlGbr06kVTR1MCS/e4euUKUWn1uPQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFDb4i759qVV6GQJiavYScgK5weffMB8GA1UdIwQY MBaAFLxsjAbS08KAHwVFj8g0E9sKXd+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTct NGI0M2E0NzM4MmI2LzEvTnZpTHZuMnBWWG9aQW1KcTloSnlBcm5CNTk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTctNGI0M2E0NzM4MmI2 LzEvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAVRXiAD BAFRXiQDBABRXicDBABRXioDBAJRXiwwDQYJKoZIhvcNAQELBQADggEBAJenrNhZ Q/ZMFaE35UN35bXyJCUvhdE8LHmpDYdLToABC2YOhEuvsmyZYK5gCA1c7Gdrdycz RgoUHHbarcV4Z64xlF6cdcU7159pXxmpitcwe/1QvofjgELHvFfPcCGFpImDpMS1 MWm0ctgnmZnbo8yaNMal0XMueWeiMjnEmTc16VIYbB/IPECH9bi5dmt/+ULf4fVS V+dHC3K//XFb9u7ZVHEWUJRpxgksZak5EnYcSAurZ/FtaMF0uv3cWgJQw+RhrGTn 0Zal+vDMJM662ht1ZcUmuF1oHKRR1QnqVBtddGkguV/YcygmH5VGOAbkoHD8A3tb 2PNCAa4Y4gWMyq8= -----END CERTIFICATE-----Generated at Sun Dec 14 08:19:56 2025 by rpki-client