This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vnI_cAc_T8wGO7atE9DVgu9iOWE.roa File: vnI_cAc_T8wGO7atE9DVgu9iOWE.roa (raw, json) Hash identifier: gQCkt4IuY4XTOtMxf4mIrmm/hZ/F2my0iuKORMiWAcw= Subject key identifier: BE:72:3F:70:07:3F:4F:CC:06:3B:B6:AD:13:D0:D5:82:EF:62:39:61 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AA5B41D01EC1A6E0ED08DF9D353A6747E Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vnI_cAc_T8wGO7atE9DVgu9iOWE.roa Signing time: Fri 21 Nov 2025 09:17:15 +0000 ROA not before: Fri 21 Nov 2025 09:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 178.253.226.0/24 maxlen: 24 188.255.196.0/24 maxlen: 24 212.69.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:b4:1d:01:ec:1a:6e:0e:d0:8d:f9:d3:53:a6:74:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 21 09:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be723f70073f4fcc063bb6ad13d0d582ef623961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:7b:24:e9:3b:d9:d7:4a:78:a2:c0:6b:94: 5e:e6:a2:dd:f9:b3:d5:a3:66:05:c5:15:f1:0b:d2: 17:fe:b4:38:30:b3:43:57:a2:58:c6:15:02:4f:60: 43:4e:49:8d:99:bf:06:20:7d:13:e3:ff:44:6e:e5: 04:58:2d:d9:e8:ac:eb:56:ba:48:11:02:66:14:c3: cd:e2:33:b7:35:ab:73:37:e5:eb:fe:c7:ab:5c:02: ca:de:aa:72:fd:07:19:3e:25:02:c3:8e:6e:ae:25: de:55:cf:60:54:a7:bd:00:a5:71:6d:5b:8e:35:bc: 5a:46:13:69:42:85:f7:fe:f1:06:91:47:f5:3a:9b: ea:be:6a:11:d5:90:56:02:a7:5e:6f:49:61:5e:1b: 4f:ee:7c:f3:00:84:5f:cc:72:0c:80:93:f5:f3:da: c8:64:6f:88:c1:f0:a3:13:32:4c:3c:da:d3:a4:be: a6:68:81:df:f8:b6:a2:ae:ae:ac:96:76:b7:79:fb: ac:5b:6c:9e:cd:14:c8:b5:8d:3a:ac:9b:08:4a:34: 32:bd:71:7c:c9:d3:d3:98:c1:01:95:83:1b:19:21: 20:77:da:d8:e6:9d:51:37:fc:24:b4:9d:88:cc:4a: b5:33:38:6c:0c:29:c0:8a:2d:7b:7f:9d:98:16:ff: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:3F:70:07:3F:4F:CC:06:3B:B6:AD:13:D0:D5:82:EF:62:39:61 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/vnI_cAc_T8wGO7atE9DVgu9iOWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.253.226.0/24 188.255.196.0/24 212.69.9.0/24 Signature Algorithm: sha256WithRSAEncryption 82:a3:10:6c:3c:90:17:72:95:26:18:9e:da:75:72:14:01:39: 74:07:db:cd:24:b0:b6:b7:c1:5e:1b:d1:df:a7:c4:3a:7f:2e: 14:a5:1b:b5:06:59:d0:4f:14:d5:a4:39:4b:25:d0:d7:46:81: c8:0f:25:2d:9c:0d:58:0d:00:92:c8:7d:34:2f:a4:04:ed:e6: 79:d4:ed:c6:b0:8f:9f:0d:2f:6a:f7:59:0f:9e:b6:0b:d0:85: 6d:8b:18:4f:1d:27:f2:d2:0b:70:d0:69:f9:25:c6:a0:db:4b: bf:ae:58:9f:ea:57:07:3e:1a:f8:9e:e7:5b:b9:fa:5f:f1:b9: 21:95:27:b2:dc:82:ec:59:2e:81:fe:18:12:41:93:b6:42:8f: 1f:53:af:5f:88:2e:84:49:9e:cb:74:f6:0a:6a:82:ad:85:fc: ca:13:1d:e7:0f:32:66:80:1a:f8:0a:54:a6:ec:6c:01:44:e7: 72:3b:bb:36:f1:47:0d:ac:c7:fe:23:29:15:8a:f4:85:25:7b: 58:18:b5:e5:a7:02:97:42:65:a0:6d:2f:4f:f7:e7:15:7b:90: 17:c2:d5:64:6c:3e:51:2b:38:86:e6:61:bc:1b:a7:a4:f9:5b: 25:69:d6:9b:3b:9f:f8:ca:5d:0a:ff:87:79:0b:11:e4:d6:35: c0:81:bf:82 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqltB0B7BpuDtCN+dNTpnR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTIxMDkxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTcyM2Y3MDA3M2Y0ZmNjMDYzYmI2YWQxM2QwZDU4MmVmNjIzOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX17JOk72ddKeKLAa5Re5qLd+bPV o2YFxRXxC9IX/rQ4MLNDV6JYxhUCT2BDTkmNmb8GIH0T4/9EbuUEWC3Z6KzrVrpI EQJmFMPN4jO3NatzN+Xr/serXALK3qpy/QcZPiUCw45uriXeVc9gVKe9AKVxbVuO NbxaRhNpQoX3/vEGkUf1OpvqvmoR1ZBWAqdeb0lhXhtP7nzzAIRfzHIMgJP189rI ZG+IwfCjEzJMPNrTpL6maIHf+Lairq6slna3efusW2yezRTItY06rJsISjQyvXF8 ydPTmMEBlYMbGSEgd9rY5p1RN/wktJ2IzEq1MzhsDCnAii17f52YFv+TiQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL5yP3AHP0/MBju2rRPQ1YLvYjlhMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvdm5JX2NBY19UOHdHTzdhdEU5RFZndTlpT1dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsv3iAwQA vP/EAwQA1EUJMA0GCSqGSIb3DQEBCwUAA4IBAQCCoxBsPJAXcpUmGJ7adXIUATl0 B9vNJLC2t8FeG9Hfp8Q6fy4UpRu1BlnQTxTVpDlLJdDXRoHIDyUtnA1YDQCSyH00 L6QE7eZ51O3GsI+fDS9q91kPnrYL0IVtixhPHSfy0gtw0Gn5Jcag20u/rlif6lcH Phr4nudbufpf8bkhlSey3ILsWS6B/hgSQZO2Qo8fU69fiC6ESZ7LdPYKaoKthfzK Ex3nDzJmgBr4ClSm7GwBROdyO7s28UcNrMf+IykVivSFJXtYGLXlpwKXQmWgbS9P 9+cVe5AXwtVkbD5RKziG5mG8G6ek+VsladabO5/4yl0K/4d5CxHk1jXAgb+C -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:54 2025 by rpki-client