This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/VU8Lnit5-5bWS_B3iU2pbUqjD3A.roa File: VU8Lnit5-5bWS_B3iU2pbUqjD3A.roa (raw, json) Hash identifier: f9Jbrulzf/covwNo8YJa0VovFN79QafWnPSPZ8cv6CI= Subject key identifier: 55:4F:0B:9E:2B:79:FB:96:D6:4B:F0:77:89:4D:A9:6D:4A:A3:0F:70 Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Certificate serial: 019ACACF33C1696FDD8F36C29287092C3EA7 Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/VU8Lnit5-5bWS_B3iU2pbUqjD3A.roa Signing time: Fri 28 Nov 2025 14:12:48 +0000 ROA not before: Fri 28 Nov 2025 14:12:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31673 IP address blocks: 185.121.92.0/23 maxlen: 23 185.121.94.0/24 maxlen: 24 2a03:8300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:cf:33:c1:69:6f:dd:8f:36:c2:92:87:09:2c:3e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Validity Not Before: Nov 28 14:12:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=554f0b9e2b79fb96d64bf077894da96d4aa30f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7c:fd:16:a4:d3:29:c9:f2:bd:58:5a:ec:21: ea:33:82:6f:a2:5a:7d:05:81:ba:2c:19:00:aa:d8: bc:a2:b4:a3:49:68:74:3a:02:e7:51:1e:c3:2d:8c: 0d:52:c1:74:7d:d2:08:af:ab:b0:4e:86:77:41:56: b9:b4:ff:60:d5:62:c7:f0:92:74:5d:41:e9:0b:27: 0b:86:6e:f4:b4:09:38:4b:43:32:25:5f:86:59:e5: d6:44:6a:2d:f3:20:b0:6a:c9:13:1c:ea:e2:0f:75: ad:5b:7a:c5:3e:93:20:35:08:36:8e:d7:7e:f7:7b: 97:a6:c6:33:91:05:1b:9b:98:fb:3f:b0:a0:12:4e: e3:68:6c:57:5d:92:79:83:dd:94:f5:e0:38:3a:60: de:97:f1:75:78:50:dd:02:5a:9a:fa:3e:9e:0c:e6: 1e:b4:d0:ab:9a:5b:06:2f:5f:bf:ec:cf:b5:83:0d: b8:98:43:9d:08:a8:43:f2:a2:79:8b:5d:23:f0:5b: dc:e6:02:ca:be:92:01:a2:48:b2:fb:75:38:1c:e5: 4f:b6:4a:f8:d7:c9:03:a6:0f:b5:60:10:e6:19:95: cb:a7:2b:38:2c:bf:03:2e:81:5f:1b:45:0f:be:28: 03:f0:0a:15:6c:a2:f8:92:53:26:e1:26:64:cc:7a: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4F:0B:9E:2B:79:FB:96:D6:4B:F0:77:89:4D:A9:6D:4A:A3:0F:70 X509v3 Authority Key Identifier: keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/VU8Lnit5-5bWS_B3iU2pbUqjD3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.92.0-185.121.94.255 IPv6: 2a03:8300::/32 Signature Algorithm: sha256WithRSAEncryption 8e:5a:a0:85:86:e0:48:4c:d7:cb:1c:9c:c6:92:67:01:f6:73: b0:56:e1:1f:eb:23:5a:6b:36:ca:38:93:14:32:e9:bc:1e:77: 5d:e2:ff:a0:ab:a9:35:25:ab:da:c1:ef:40:c9:ea:a3:5f:e9: a1:db:0a:97:c2:d9:26:f7:ae:5a:2a:6b:06:b5:9b:b5:68:58: b0:ae:77:98:97:86:28:d3:d2:46:21:9a:c9:e9:a0:17:e6:38: c7:10:2d:50:5d:68:c4:0e:ef:4b:88:74:19:d8:e5:04:36:36: c5:79:b4:7a:b8:de:44:86:4c:e6:8d:60:c1:04:b3:1c:81:28: 30:6f:4e:4c:44:66:24:db:a9:71:85:20:fe:4f:56:af:9e:58: 0d:0d:fd:5e:45:5d:42:6f:ec:34:3e:17:56:9f:52:54:31:96: 53:73:f4:0e:ef:c0:f7:7a:d4:9d:0d:a2:9c:88:38:12:05:d9: 80:f1:7e:28:56:41:8d:af:80:7b:bb:f8:40:29:d0:8e:4c:17: ae:02:09:26:7a:25:3e:d7:56:a9:c9:d9:e5:0d:cc:35:6b:f5: dd:0b:49:7f:ee:59:63:02:6d:fe:d4:b5:81:93:ac:90:da:2d: c2:9b:c5:37:0a:cc:fb:c3:8e:4d:0f:68:2c:50:58:bb:69:ed: 87:8a:9b:07 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZrKzzPBaW/djzbCkocJLD6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy M2Q1YjgwHhcNMjUxMTI4MTQxMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTRmMGI5ZTJiNzlmYjk2ZDY0YmYwNzc4OTRkYTk2ZDRhYTMwZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3z9FqTTKcnyvVha7CHqM4Jvolp9 BYG6LBkAqti8orSjSWh0OgLnUR7DLYwNUsF0fdIIr6uwToZ3QVa5tP9g1WLH8JJ0 XUHpCycLhm70tAk4S0MyJV+GWeXWRGot8yCwaskTHOriD3WtW3rFPpMgNQg2jtd+ 93uXpsYzkQUbm5j7P7CgEk7jaGxXXZJ5g92U9eA4OmDel/F1eFDdAlqa+j6eDOYe tNCrmlsGL1+/7M+1gw24mEOdCKhD8qJ5i10j8Fvc5gLKvpIBokiy+3U4HOVPtkr4 18kDpg+1YBDmGZXLpys4LL8DLoFfG0UPvigD8AoVbKL4klMm4SZkzHpXGQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFVPC54refuW1kvwd4lNqW1Kow9wMB8GA1UdIwQY MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt NDMxODdlMjliMGUzLzEvVlU4TG5pdDUtNWJXU19CM2lVMnBiVXFqRDNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5eVwD BAC5eV4wDQQCAAIwBwMFACoDgwAwDQYJKoZIhvcNAQELBQADggEBAI5aoIWG4EhM 18scnMaSZwH2c7BW4R/rI1prNso4kxQy6bwed13i/6CrqTUlq9rB70DJ6qNf6aHb CpfC2Sb3rloqawa1m7VoWLCud5iXhijT0kYhmsnpoBfmOMcQLVBdaMQO70uIdBnY 5QQ2NsV5tHq43kSGTOaNYMEEsxyBKDBvTkxEZiTbqXGFIP5PVq+eWA0N/V5FXUJv 7DQ+F1afUlQxllNz9A7vwPd61J0NopyIOBIF2YDxfihWQY2vgHu7+EAp0I5MF64C CSZ6JT7XVqnJ2eUNzDVr9d0LSX/uWWMCbf7UtYGTrJDaLcKbxTcKzPvDjk0PaCxQ WLtp7YeKmwc= -----END CERTIFICATE-----Generated at Thu Dec 11 23:59:40 2025 by rpki-client