This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Vx_Snc9x1R1U0XKckfXXw-DwjFE.roa File: Vx_Snc9x1R1U0XKckfXXw-DwjFE.roa (raw, json) Hash identifier: T0kwhIiNZYkVxBw2QswCOFW7V7W6Gta0YSa8IQUbwxU= Subject key identifier: 57:1F:D2:9D:CF:71:D5:1D:54:D1:72:9C:91:F5:D7:C3:E0:F0:8C:51 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B21F0D514D615971572D397AD6B7BAC31 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Vx_Snc9x1R1U0XKckfXXw-DwjFE.roa Signing time: Mon 15 Dec 2025 12:16:29 +0000 ROA not before: Mon 15 Dec 2025 12:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 62.93.164.0/22 maxlen: 24 62.93.176.0/22 maxlen: 24 84.20.4.0/22 maxlen: 24 84.20.16.0/22 maxlen: 24 84.20.24.0/22 maxlen: 24 92.71.34.0/23 maxlen: 24 92.71.40.0/22 maxlen: 24 92.71.44.0/23 maxlen: 24 92.71.66.0/23 maxlen: 24 92.71.98.0/23 maxlen: 24 92.71.124.0/23 maxlen: 24 135.196.185.0/24 maxlen: 24 195.86.208.0/24 maxlen: 24 213.139.8.0/22 maxlen: 24 213.169.206.0/23 maxlen: 23 213.201.134.0/24 maxlen: 24 213.201.242.0/23 maxlen: 24 213.201.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:f0:d5:14:d6:15:97:15:72:d3:97:ad:6b:7b:ac:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 15 12:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=571fd29dcf71d51d54d1729c91f5d7c3e0f08c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:db:bd:13:05:b3:e8:8c:33:1d:cd:77:e2: af:35:45:e2:02:24:7c:92:48:a0:36:c0:7d:2c:7e: 11:d4:37:d7:1e:3f:aa:8b:08:bc:60:c0:53:d4:0e: 66:1f:a6:39:f5:d1:b0:45:de:8d:2c:bd:ac:f5:c8: 17:9c:9f:a2:67:26:eb:c1:38:6b:c1:e2:25:2a:d0: 84:22:4c:9f:cf:55:8e:8c:b9:80:0a:83:1c:3a:1c: 0a:f9:cb:17:36:ec:df:2d:e1:35:bf:87:43:2d:76: 19:e1:ea:07:ec:d0:be:8d:31:2f:08:dd:6a:99:4a: 86:4e:89:a7:4a:ea:ad:af:3f:1a:a2:20:37:1e:af: 86:75:2c:9c:b6:7c:77:4b:76:ae:f5:be:30:a8:2d: f6:2c:54:3f:7a:24:44:1a:9a:89:6a:dd:9c:d8:4b: 2b:c7:30:59:10:dd:c1:d7:b0:a1:2e:7c:10:10:ac: 04:8a:6a:14:c9:10:a6:89:9c:47:82:53:3e:f8:50: a9:0e:5d:2b:f3:85:ff:e3:8f:6b:64:26:21:8a:c4: d6:7f:5e:dc:2f:da:a9:10:9f:64:e9:f7:bc:24:7b: a3:ba:cc:cd:6e:0e:bf:4a:7d:39:2a:56:97:c9:e8: 5a:a9:bc:92:56:91:6b:52:c6:9a:16:47:23:9f:94: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1F:D2:9D:CF:71:D5:1D:54:D1:72:9C:91:F5:D7:C3:E0:F0:8C:51 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Vx_Snc9x1R1U0XKckfXXw-DwjFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.164.0/22 62.93.176.0/22 84.20.4.0/22 84.20.16.0/22 84.20.24.0/22 92.71.34.0/23 92.71.40.0-92.71.45.255 92.71.66.0/23 92.71.98.0/23 92.71.124.0/23 135.196.185.0/24 195.86.208.0/24 213.139.8.0/22 213.169.206.0/23 213.201.134.0/24 213.201.242.0/23 213.201.252.0/23 Signature Algorithm: sha256WithRSAEncryption 36:30:87:86:15:0b:cb:7b:2d:23:19:0c:ac:03:a7:fa:61:b4: 74:4e:35:ac:9e:71:16:8a:92:37:25:80:b7:3b:af:d3:2c:aa: fd:47:7c:bd:ff:bd:7c:ab:e0:f0:79:6d:a1:26:a3:7f:fc:02: 7e:01:45:04:4e:0d:e2:cb:a6:03:04:ee:09:28:8e:c1:5b:88: d9:9e:46:66:60:ea:1f:62:39:8c:77:45:16:c1:21:0d:4a:d9: ec:63:41:74:d6:d8:89:40:68:ec:0a:13:7b:02:13:89:0a:36: ad:1c:73:85:d6:ef:9f:d6:9d:ba:58:a7:e8:ab:fe:be:f3:38: 44:b2:bb:70:cb:00:05:da:0b:4d:15:c1:39:8d:ae:8c:af:c3: f2:06:e5:0f:bd:98:f5:18:90:ad:03:c0:ff:bb:61:fc:ed:33: fd:17:08:3c:61:28:79:7a:61:18:f8:1c:b2:1d:67:55:a3:0f: 8c:7c:39:fe:b1:62:4f:ff:b4:89:28:1d:d9:15:b2:48:fa:c2: c5:df:4a:20:8c:06:bc:e8:d5:25:52:99:4f:2f:e2:52:f2:7d: d1:2d:f0:8a:da:b6:df:ad:a3:b1:e6:61:07:bf:b2:b4:a0:56: b9:07:3a:46:6e:67:3d:be:27:92:2a:09:e0:8f:bd:95:55:bd: af:f8:31:ca -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZsh8NUU1hWXFXLTl61re6wxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjE1MTIxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzFmZDI5ZGNmNzFkNTFkNTRkMTcyOWM5MWY1ZDdjM2UwZjA4YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR7bvRMFs+iMMx3Nd+KvNUXiAiR8 kkigNsB9LH4R1DfXHj+qiwi8YMBT1A5mH6Y59dGwRd6NLL2s9cgXnJ+iZybrwThr weIlKtCEIkyfz1WOjLmACoMcOhwK+csXNuzfLeE1v4dDLXYZ4eoH7NC+jTEvCN1q mUqGTomnSuqtrz8aoiA3Hq+GdSyctnx3S3au9b4wqC32LFQ/eiREGpqJat2c2Esr xzBZEN3B17ChLnwQEKwEimoUyRCmiZxHglM++FCpDl0r84X/449rZCYhisTWf17c L9qpEJ9k6fe8JHujuszNbg6/Sn05KlaXyehaqbySVpFrUsaaFkcjn5SqWwIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFFcf0p3PcdUdVNFynJH118Pg8IxRMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvVnhfU25jOXgxUjFVMFhLY2tmWFh3LUR3akZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAj5dpAME Aj5dsAMEAlQUBAMEAlQUEAMEAlQUGAMEAVxHIjAMAwQDXEcoAwQBXEcsAwQBXEdC AwQBXEdiAwQBXEd8AwQAh8S5AwQAw1bQAwQC1YsIAwQB1anOAwQA1cmGAwQB1cny AwQB1cn8MA0GCSqGSIb3DQEBCwUAA4IBAQA2MIeGFQvLey0jGQysA6f6YbR0TjWs nnEWipI3JYC3O6/TLKr9R3y9/718q+DweW2hJqN//AJ+AUUETg3iy6YDBO4JKI7B W4jZnkZmYOofYjmMd0UWwSENStnsY0F01tiJQGjsChN7AhOJCjatHHOF1u+f1p26 WKfoq/6+8zhEsrtwywAF2gtNFcE5ja6Mr8PyBuUPvZj1GJCtA8D/u2H87TP9Fwg8 YSh5emEY+ByyHWdVow+MfDn+sWJP/7SJKB3ZFbJI+sLF30ogjAa86NUlUplPL+JS 8n3RLfCK2rbfraOx5mEHv7K0oFa5BzpGbmc9vieSKgngj72VVb2v+DHK -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:04 2025 by rpki-client