This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/VM7NBzljc-wtTrqP56M9539lbgc.roa File: VM7NBzljc-wtTrqP56M9539lbgc.roa (raw, json) Hash identifier: vBQyHiLXkYiKjrIGh1q5dMs6KoS64i4gV+QTksQfMRY= Subject key identifier: 54:CE:CD:07:39:63:73:EC:2D:4E:BA:8F:E7:A3:3D:E7:7F:65:6E:07 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019A984126AF52D46C8ED0DB9E7C45321624 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/VM7NBzljc-wtTrqP56M9539lbgc.roa Signing time: Tue 18 Nov 2025 18:36:37 +0000 ROA not before: Tue 18 Nov 2025 18:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203771 IP address blocks: 95.170.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:41:26:af:52:d4:6c:8e:d0:db:9e:7c:45:32:16:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Nov 18 18:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54cecd07396373ec2d4eba8fe7a33de77f656e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:9a:90:95:99:3f:ac:fa:47:77:49:98:95: e2:c9:6b:8f:d9:ba:f9:3c:ca:4a:67:39:35:d5:cd: b3:42:b7:a1:b3:67:21:b8:89:3e:57:68:06:73:82: 18:17:a2:92:45:75:78:33:04:6a:a0:8b:62:ac:02: 8c:10:c4:37:16:f4:91:a5:3b:6e:b7:87:30:1d:7d: a2:58:7d:2c:16:2b:75:54:74:d3:a1:1d:bf:d9:27: 81:36:6e:c6:68:0d:84:76:ec:6d:bb:13:34:98:27: 75:07:34:b4:b8:9b:0e:e8:9b:66:b1:f0:94:ec:1e: 1c:1d:f5:7e:6f:36:e8:f4:26:c3:2e:09:39:1f:5f: d8:26:d8:e3:e8:20:b0:fa:bf:ff:b5:2a:d0:0a:74: ab:66:97:24:b0:04:52:4e:e8:31:0a:a8:bc:3c:47: 83:c7:f2:bd:48:1b:9c:01:7f:d7:c9:98:f6:6b:77: d3:73:7c:23:b4:fa:0a:2f:2f:2d:2d:0f:d9:45:68: be:66:9a:53:c8:fd:53:7a:56:f3:6c:9e:fd:f8:e9: 72:14:2b:bc:7a:41:9e:8d:a5:24:19:50:2c:e1:ba: d2:4e:c5:39:1c:db:fc:17:e8:55:2d:9c:8e:e5:c3: 76:cb:11:44:21:56:66:18:61:78:a2:59:d2:de:fa: d9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CE:CD:07:39:63:73:EC:2D:4E:BA:8F:E7:A3:3D:E7:7F:65:6E:07 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/VM7NBzljc-wtTrqP56M9539lbgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.25.0/24 Signature Algorithm: sha256WithRSAEncryption 55:89:ad:08:d2:1c:df:c6:dc:3c:54:d0:92:32:b1:9f:ba:3b: 08:ae:8b:f2:18:4a:d3:60:76:28:db:e7:23:26:cf:8c:60:d4: b8:de:f4:18:2b:c7:fb:ca:18:f4:d9:73:b7:ee:10:d7:93:a0: 28:54:e1:b1:cb:f5:98:6b:08:cd:2e:41:1a:69:ed:f9:b9:dc: 49:64:e7:c1:41:d9:64:98:c4:3b:f7:80:e4:83:bc:53:d2:83: 1a:0e:fc:43:cd:64:c8:f3:7b:09:cb:a7:17:ff:f0:44:5d:8d: da:8f:34:37:1b:fd:df:03:65:95:12:34:b4:51:f0:9f:8e:d0: e7:51:71:96:e6:00:fa:71:d1:54:c9:0e:b8:5a:de:2d:9e:8e: 21:72:74:d5:66:1c:dd:13:de:c4:e9:fa:41:53:aa:d8:e4:3a: 10:ba:e5:07:de:4c:4b:1c:c9:56:40:3a:8e:53:2f:c5:85:d5: 4b:b8:5c:b2:6b:56:cd:da:2f:ec:31:a4:ad:c8:88:60:c6:d0: a7:3b:14:e6:10:78:a3:f0:9b:f5:8f:f6:46:df:52:e7:7e:c9: e8:22:ae:45:80:0f:95:00:91:5a:70:d4:01:e6:37:d0:6c:0e: aa:3e:90:9e:b8:ff:aa:51:21:0c:38:dd:c6:1c:46:6e:f8:68: c4:71:4f:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqYQSavUtRsjtDbnnxFMhYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMTE4MTgzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGNlY2QwNzM5NjM3M2VjMmQ0ZWJhOGZlN2EzM2RlNzdmNjU2ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8KakJWZP6z6R3dJmJXiyWuP2br5 PMpKZzk11c2zQrehs2chuIk+V2gGc4IYF6KSRXV4MwRqoItirAKMEMQ3FvSRpTtu t4cwHX2iWH0sFit1VHTToR2/2SeBNm7GaA2EduxtuxM0mCd1BzS0uJsO6JtmsfCU 7B4cHfV+bzbo9CbDLgk5H1/YJtjj6CCw+r//tSrQCnSrZpcksARSTugxCqi8PEeD x/K9SBucAX/XyZj2a3fTc3wjtPoKLy8tLQ/ZRWi+ZppTyP1TelbzbJ79+OlyFCu8 ekGejaUkGVAs4brSTsU5HNv8F+hVLZyO5cN2yxFEIVZmGGF4olnS3vrZtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTOzQc5Y3PsLU66j+ejPed/ZW4HMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvVk03TkJ6bGpjLXd0VHJxUDU2TTk1MzlsYmdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oZMA0G CSqGSIb3DQEBCwUAA4IBAQBVia0I0hzfxtw8VNCSMrGfujsIrovyGErTYHYo2+cj Js+MYNS43vQYK8f7yhj02XO37hDXk6AoVOGxy/WYawjNLkEaae35udxJZOfBQdlk mMQ794Dkg7xT0oMaDvxDzWTI83sJy6cX//BEXY3ajzQ3G/3fA2WVEjS0UfCfjtDn UXGW5gD6cdFUyQ64Wt4tno4hcnTVZhzdE97E6fpBU6rY5DoQuuUH3kxLHMlWQDqO Uy/FhdVLuFyya1bN2i/sMaStyIhgxtCnOxTmEHij8Jv1j/ZG31LnfsnoIq5FgA+V AJFacNQB5jfQbA6qPpCeuP+qUSEMON3GHEZu+GjEcU+x -----END CERTIFICATE-----Generated at Fri Nov 21 18:23:13 2025 by rpki-client