This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/_vBk8ZAKjoGpCRYvm7lsOD5PV0I.roa File: _vBk8ZAKjoGpCRYvm7lsOD5PV0I.roa (raw, json) Hash identifier: YQ976Va2ZobNkgoc2kpFmckUjKj3QGQxWFlgJB7FA2Q= Subject key identifier: FE:F0:64:F1:90:0A:8E:81:A9:09:16:2F:9B:B9:6C:38:3E:4F:57:42 Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8 Certificate serial: 019B0CA43F96AFB3076AD47821F028F142E4 Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/_vBk8ZAKjoGpCRYvm7lsOD5PV0I.roa Signing time: Thu 11 Dec 2025 09:00:49 +0000 ROA not before: Thu 11 Dec 2025 09:00:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201301 IP address blocks: 185.45.96.0/22 maxlen: 24 2a04:a180::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:a4:3f:96:af:b3:07:6a:d4:78:21:f0:28:f1:42:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8 Validity Not Before: Dec 11 09:00:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fef064f1900a8e81a909162f9bb96c383e4f5742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:1a:e9:ea:ea:d0:bf:db:9a:74:eb:58:28: 57:43:10:6e:10:53:a8:f2:c6:6a:90:41:82:dc:7c: 41:af:a9:ae:bc:09:28:be:bd:b1:cd:e1:0c:9b:3f: 18:8c:3e:d2:a1:d1:cb:12:e5:d4:cf:6f:1e:55:43: d5:61:99:82:f4:fe:0d:b2:43:e6:fc:85:b7:0e:90: 80:eb:ff:29:98:82:da:79:fb:d0:a0:64:aa:73:31: d9:59:a1:b1:83:8f:fa:0c:46:b7:15:30:95:89:8d: 16:b8:df:13:35:1b:65:56:f7:d0:23:70:7e:32:65: 31:b1:af:3e:8e:94:39:90:4e:20:f5:fc:e0:46:0b: 4f:f3:fa:ea:90:43:86:5b:dd:2e:c7:f1:ab:10:a2: 84:da:bb:8f:d4:85:e5:dc:a2:6c:ac:a1:a6:4d:41: c3:4a:76:e5:33:5f:79:2d:54:a1:9c:30:5e:cc:08: 38:e9:14:b8:9b:43:26:3d:95:eb:47:4d:95:86:f6: e7:b7:df:7d:eb:de:fb:20:8d:b8:e4:2e:95:06:b5: 64:c3:88:24:c7:9c:59:8c:9f:49:a7:a5:f2:dc:82: 05:54:e5:1b:44:b1:02:8e:8d:35:c0:f9:5e:c6:e0: 4b:76:51:90:ae:d4:2d:af:6f:30:de:6d:a0:5f:15: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F0:64:F1:90:0A:8E:81:A9:09:16:2F:9B:B9:6C:38:3E:4F:57:42 X509v3 Authority Key Identifier: keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/_vBk8ZAKjoGpCRYvm7lsOD5PV0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.96.0/22 IPv6: 2a04:a180::/29 Signature Algorithm: sha256WithRSAEncryption 03:14:59:c4:a3:18:34:c3:e8:30:a8:67:9b:65:f5:83:80:5f: 76:cd:31:c6:6c:8b:ed:83:03:fe:c2:55:45:d6:50:cb:73:62: 8e:d2:ce:45:1b:de:31:b8:f8:e3:17:dc:ae:e3:8c:69:cc:fa: 95:b6:59:fa:1d:b2:3e:fd:1b:56:bf:dd:79:41:9d:58:5d:4d: 48:07:95:ac:f4:66:b5:6b:79:2e:6f:9b:9f:20:be:44:55:22: 83:8c:a4:df:b5:92:4c:52:a2:d5:69:4d:b1:90:13:11:f0:ba: b5:c3:5c:99:bd:a2:99:16:26:21:1b:45:88:7b:9c:0c:ed:8e: 40:90:60:84:b8:47:41:95:b0:ec:3c:13:e4:70:56:5d:04:15: c1:f5:24:26:d3:2c:98:93:cc:8f:d3:11:6c:bd:fe:82:65:36: aa:58:04:a7:a8:58:9b:d9:6f:82:28:54:70:d1:91:a6:c3:6e: 8f:81:cd:95:0d:33:76:18:42:26:47:22:6d:3c:76:57:d2:83: ce:e2:3a:ea:14:15:9b:3c:7d:00:0a:3b:cf:5e:aa:23:b6:5a: 05:23:b6:c7:89:4b:ec:33:94:1a:70:84:41:ba:f2:6d:a6:44: 0e:53:49:98:72:07:d9:ee:5f:8d:8a:e7:08:79:c4:0b:84:8d: 8c:b8:88:99 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsMpD+Wr7MHatR4IfAo8ULkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2EzN2RlZDFiNzBjODFiNzRhNDMwZjliNGQ3YWNjNjI4 MDVlZDgwHhcNMjUxMjExMDkwMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWYwNjRmMTkwMGE4ZTgxYTkwOTE2MmY5YmI5NmMzODNlNGY1NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe4a6erq0L/bmnTrWChXQxBuEFOo 8sZqkEGC3HxBr6muvAkovr2xzeEMmz8YjD7SodHLEuXUz28eVUPVYZmC9P4NskPm /IW3DpCA6/8pmILaefvQoGSqczHZWaGxg4/6DEa3FTCViY0WuN8TNRtlVvfQI3B+ MmUxsa8+jpQ5kE4g9fzgRgtP8/rqkEOGW90ux/GrEKKE2ruP1IXl3KJsrKGmTUHD SnblM195LVShnDBezAg46RS4m0MmPZXrR02Vhvbnt9996977II245C6VBrVkw4gk x5xZjJ9Jp6Xy3IIFVOUbRLECjo01wPlexuBLdlGQrtQtr28w3m2gXxXkuQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP7wZPGQCo6BqQkWL5u5bDg+T1dCMB8GA1UdIwQY MBaAFKLKN97RtwyBt0pDD5tNesxigF7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2Yt MzA2MTg5ZDVjMDQ5LzEvX3ZCazhaQUtqb0dwQ1JZdm03bHNPRDVQVjBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2YtMzA2MTg5ZDVjMDQ5 LzEvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuS1gMA0E AgACMAcDBQMqBKGAMA0GCSqGSIb3DQEBCwUAA4IBAQADFFnEoxg0w+gwqGebZfWD gF92zTHGbIvtgwP+wlVF1lDLc2KO0s5FG94xuPjjF9yu44xpzPqVtln6HbI+/RtW v915QZ1YXU1IB5Ws9Ga1a3kub5ufIL5EVSKDjKTftZJMUqLVaU2xkBMR8Lq1w1yZ vaKZFiYhG0WIe5wM7Y5AkGCEuEdBlbDsPBPkcFZdBBXB9SQm0yyYk8yP0xFsvf6C ZTaqWASnqFib2W+CKFRw0ZGmw26Pgc2VDTN2GEImRyJtPHZX0oPO4jrqFBWbPH0A CjvPXqojtloFI7bHiUvsM5QacIRBuvJtpkQOU0mYcgfZ7l+NiucIecQLhI2MuIiZ -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:05 2025 by rpki-client