This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vkFwwNqB_ICwNnQv_0c0BjXwhkc.roa File: vkFwwNqB_ICwNnQv_0c0BjXwhkc.roa (raw, json) Hash identifier: a3rSSugcF/W8EnRna3Y5K0Q4cnP41HN2mioCgG5ku08= Subject key identifier: BE:41:70:C0:DA:81:FC:80:B0:36:74:2F:FF:47:34:06:35:F0:86:47 Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B089E2EFCE177B9F3A626800DACD05250 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vkFwwNqB_ICwNnQv_0c0BjXwhkc.roa Signing time: Wed 10 Dec 2025 14:15:42 +0000 ROA not before: Wed 10 Dec 2025 14:15:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205358 IP address blocks: 193.163.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:9e:2e:fc:e1:77:b9:f3:a6:26:80:0d:ac:d0:52:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Dec 10 14:15:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be4170c0da81fc80b036742fff47340635f08647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:21:ee:7c:d4:18:38:a1:4b:43:f1:05:db: 94:95:98:98:9a:c7:96:d3:ac:61:9b:8f:5e:7b:b8: 30:61:3c:f1:a5:c9:92:b8:4c:46:45:d6:a4:5d:81: 0d:6c:d1:77:af:0f:72:6e:0a:75:04:ad:c5:ef:6f: f6:d5:30:19:af:91:4e:69:3d:e4:22:5a:56:4e:2a: 20:71:b5:60:45:7e:e5:35:fe:ec:e3:88:ef:e2:e8: 53:8b:d1:9b:2e:a1:4a:d3:a7:66:b7:45:e5:0a:7d: 3f:61:53:57:12:9c:2f:4b:08:dc:93:e0:3c:08:e7: 56:03:14:79:6c:1a:fe:80:44:d2:3c:b7:a7:a1:ce: 60:d0:78:ea:6e:3b:a0:23:83:5c:2b:79:f1:c1:6c: 85:e1:94:2e:28:29:7e:00:be:4a:58:13:0a:3e:79: 50:66:f8:50:21:34:b6:43:1d:60:63:05:1e:14:84: 89:ee:41:20:12:45:19:45:20:35:72:90:90:b7:5a: 4d:43:28:f9:e6:3d:30:55:9b:2d:8f:a8:17:cd:0d: 59:77:ce:e9:43:c2:31:74:a1:6a:27:41:f0:4d:67: 4d:d5:e5:67:99:40:ed:8b:f2:e6:b9:b4:a2:38:89: 24:1a:ce:3e:4d:b1:1e:49:b9:81:2b:86:6d:43:55: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:41:70:C0:DA:81:FC:80:B0:36:74:2F:FF:47:34:06:35:F0:86:47 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vkFwwNqB_ICwNnQv_0c0BjXwhkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.70.0/24 Signature Algorithm: sha256WithRSAEncryption 63:b1:23:6e:d1:cb:58:3f:26:81:11:20:78:50:1a:d5:d1:f3: 46:93:24:b5:aa:c3:fd:63:78:c7:70:83:81:79:e7:62:7b:87: 54:08:40:f6:42:30:e4:00:58:53:cc:f9:1d:8a:6e:89:58:20: 4e:84:4f:9d:73:53:62:fd:a7:4c:51:c0:5a:1e:ac:bc:4e:23: 5e:0e:4b:cf:92:05:bd:8c:b6:ef:82:b3:75:d1:4a:1e:e2:8c: ab:93:47:b8:c1:b8:c2:84:24:57:c3:e2:e6:10:14:c2:f8:01: f1:07:44:e9:33:33:45:f9:ea:fa:45:76:44:87:e2:7a:21:bf: 51:99:46:2b:90:81:40:64:e8:81:41:97:bb:a1:9e:db:4c:e7: 6c:a5:13:13:ef:17:de:53:b4:1f:61:b3:61:cd:02:22:55:3e: 56:d4:13:2d:fc:0c:1a:00:d5:2c:3b:ae:c2:c9:5a:c5:ed:f3: 6a:26:86:26:3c:9c:18:75:bd:61:15:d8:76:a4:43:47:2e:a1: 4f:6e:a6:30:ba:17:63:6c:b2:8f:b9:74:55:75:3f:78:c6:1b: d8:15:af:81:7b:b7:55:c0:92:a8:19:dd:0d:63:af:10:4d:cc: 2d:24:90:17:7d:29:36:44:61:41:86:a5:0b:33:32:f7:32:9d: a5:4f:b0:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsIni784Xe586YmgA2s0FJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUxMjEwMTQxNTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQxNzBjMGRhODFmYzgwYjAzNjc0MmZmZjQ3MzQwNjM1ZjA4NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R4h7nzUGDihS0PxBduUlZiYmseW 06xhm49ee7gwYTzxpcmSuExGRdakXYENbNF3rw9ybgp1BK3F72/21TAZr5FOaT3k IlpWTiogcbVgRX7lNf7s44jv4uhTi9GbLqFK06dmt0XlCn0/YVNXEpwvSwjck+A8 COdWAxR5bBr+gETSPLenoc5g0HjqbjugI4NcK3nxwWyF4ZQuKCl+AL5KWBMKPnlQ ZvhQITS2Qx1gYwUeFISJ7kEgEkUZRSA1cpCQt1pNQyj55j0wVZstj6gXzQ1Zd87p Q8IxdKFqJ0HwTWdN1eVnmUDti/LmubSiOIkkGs4+TbEeSbmBK4ZtQ1XO+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5BcMDagfyAsDZ0L/9HNAY18IZHMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvdmtGd3dOcUJfSUN3Tm5Rdl8wYzBCalh3aGtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaNGMA0G CSqGSIb3DQEBCwUAA4IBAQBjsSNu0ctYPyaBESB4UBrV0fNGkyS1qsP9Y3jHcIOB eedie4dUCED2QjDkAFhTzPkdim6JWCBOhE+dc1Ni/adMUcBaHqy8TiNeDkvPkgW9 jLbvgrN10Uoe4oyrk0e4wbjChCRXw+LmEBTC+AHxB0TpMzNF+er6RXZEh+J6Ib9R mUYrkIFAZOiBQZe7oZ7bTOdspRMT7xfeU7QfYbNhzQIiVT5W1BMt/AwaANUsO67C yVrF7fNqJoYmPJwYdb1hFdh2pENHLqFPbqYwuhdjbLKPuXRVdT94xhvYFa+Be7dV wJKoGd0NY68QTcwtJJAXfSk2RGFBhqULMzL3Mp2lT7Da -----END CERTIFICATE-----Generated at Tue Dec 16 00:11:31 2025 by rpki-client