This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/vRgl5aaB7WLnSBVnT9hT0A-Qc-M.roa File: vRgl5aaB7WLnSBVnT9hT0A-Qc-M.roa (raw, json) Hash identifier: /TpUEH64vG4Rf0+hWMzI+LqO4MX4umAzDK7Dis8muic= Subject key identifier: BD:18:25:E5:A6:81:ED:62:E7:48:15:67:4F:D8:53:D0:0F:90:73:E3 Certificate issuer: /CN=d045cd00736e5a0ec23b908265870d560d551b02 Certificate serial: 019A81FC285C2815DDF0CCD82D553A025D49 Authority key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/vRgl5aaB7WLnSBVnT9hT0A-Qc-M.roa Signing time: Fri 14 Nov 2025 10:49:37 +0000 ROA not before: Fri 14 Nov 2025 10:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8956 IP address blocks: 193.188.197.0/24 maxlen: 24 2001:678:bac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:fc:28:5c:28:15:dd:f0:cc:d8:2d:55:3a:02:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d045cd00736e5a0ec23b908265870d560d551b02 Validity Not Before: Nov 14 10:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd1825e5a681ed62e74815674fd853d00f9073e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:66:97:21:bc:53:26:45:1d:00:e1:2d:c8: 31:b8:0c:bd:43:9e:90:f8:40:1c:bb:7b:e7:b2:90: 4d:f4:d8:b5:4b:ab:a4:4d:59:1a:32:2f:2d:a4:93: 44:f2:ed:41:ed:35:36:12:4a:da:4e:66:05:1c:99: 5b:6f:43:29:19:a3:56:cb:11:de:67:20:40:18:d7: c8:62:56:30:fd:08:9d:93:69:1e:c0:31:b7:32:d1: ef:1d:ad:e2:36:04:6b:fc:da:07:da:23:e9:a7:24: 5d:be:3e:d1:53:5e:41:0f:0e:e3:3e:4e:e4:34:15: 8c:b9:1a:05:76:4c:b5:56:3e:af:7b:b9:b7:86:84: cd:9c:ff:8b:2e:7f:70:56:ab:66:d4:70:58:58:c9: 5b:d2:8a:51:b1:38:f6:4b:8e:ef:10:d4:78:36:e5: c9:33:77:aa:70:0d:53:ce:e2:ee:42:d9:6d:3f:ac: 57:c3:6e:f0:42:41:84:e8:e2:bb:ba:7b:8a:bb:91: 44:fa:44:15:04:61:e2:1c:fd:77:6c:44:8d:b4:81: 5b:fd:ac:4a:78:18:7b:2d:ad:02:a5:38:90:25:4d: 58:93:8e:34:82:6a:bd:6d:e1:a5:6b:a7:65:b0:4b: c8:0d:c1:8e:fb:71:ca:46:a3:d7:f1:89:32:5c:46: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:18:25:E5:A6:81:ED:62:E7:48:15:67:4F:D8:53:D0:0F:90:73:E3 X509v3 Authority Key Identifier: keyid:D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/vRgl5aaB7WLnSBVnT9hT0A-Qc-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.197.0/24 IPv6: 2001:678:bac::/48 Signature Algorithm: sha256WithRSAEncryption 54:1a:ba:e5:6d:a9:b3:d9:52:a8:93:32:0e:40:29:bc:88:c0: 8d:df:84:b0:48:6e:66:e3:f3:a6:b9:6c:fb:f6:43:8a:b2:7a: 40:6f:6b:55:0e:ba:c3:8a:e4:21:e1:e6:dd:f5:ea:fe:57:82: 38:52:27:d2:83:d0:d9:e3:db:26:ff:ce:08:4a:3a:86:10:b6: 4e:8f:bc:6e:41:41:f7:31:e6:18:1c:b9:2c:69:d3:fa:f4:6c: 3f:95:11:8f:7d:78:28:d1:c5:fc:4a:b9:8c:e3:c9:b0:58:b0: 6d:82:c3:cd:f5:cc:b6:e9:71:f4:f8:b8:fb:06:df:f6:82:04: 81:72:89:4c:79:65:be:80:61:72:91:09:72:2f:f7:cb:98:fb: a7:fe:af:e3:95:0a:e4:da:a3:f1:04:57:ae:a0:4e:0d:c1:e7: 31:47:af:69:31:62:ee:73:d0:af:47:8c:15:c7:ff:ae:a5:d7: 3d:6a:9f:d1:29:0a:9b:40:36:a1:23:e7:9b:c2:d2:86:80:e8: 7f:3f:df:d1:a1:04:1d:a5:83:04:d9:02:85:ba:f4:59:56:40: 37:21:dd:da:c8:b3:94:29:59:c0:6d:cf:05:2e:b9:0e:f3:e3: 2e:7f:fa:5a:56:a4:29:1c:ad:91:cb:d5:cc:db:6f:1f:a6:32: f2:b0:47:08 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqB/ChcKBXd8MzYLVU6Al1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDVjZDAwNzM2ZTVhMGVjMjNiOTA4MjY1ODcwZDU2MGQ1 NTFiMDIwHhcNMjUxMTE0MTA0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDE4MjVlNWE2ODFlZDYyZTc0ODE1Njc0ZmQ4NTNkMDBmOTA3M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryBmlyG8UyZFHQDhLcgxuAy9Q56Q +EAcu3vnspBN9Ni1S6ukTVkaMi8tpJNE8u1B7TU2EkraTmYFHJlbb0MpGaNWyxHe ZyBAGNfIYlYw/Qidk2kewDG3MtHvHa3iNgRr/NoH2iPppyRdvj7RU15BDw7jPk7k NBWMuRoFdky1Vj6ve7m3hoTNnP+LLn9wVqtm1HBYWMlb0opRsTj2S47vENR4NuXJ M3eqcA1TzuLuQtltP6xXw27wQkGE6OK7unuKu5FE+kQVBGHiHP13bESNtIFb/axK eBh7La0CpTiQJU1Yk440gmq9beGla6dlsEvIDcGO+3HKRqPX8YkyXEZW0wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL0YJeWmge1i50gVZ0/YU9APkHPjMB8GA1UdIwQY MBaAFNBFzQBzbloOwjuQgmWHDVYNVRsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVYTkFITnVXZzdDTzVDQ1pZY05WZzFWR3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NjI1ZGEtYTk4Mi00NTQ4LWJlZTEt OGUzZWYzOWVjYzEyLzEvdlJnbDVhYUI3V0xuU0JWblQ5aFQwQS1RYy1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80NjI1ZGEtYTk4Mi00NTQ4LWJlZTEtOGUzZWYzOWVjYzEy LzEvMEVYTkFITnVXZzdDTzVDQ1pZY05WZzFWR3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwbzFMA8E AgACMAkDBwAgAQZ4C6wwDQYJKoZIhvcNAQELBQADggEBAFQauuVtqbPZUqiTMg5A KbyIwI3fhLBIbmbj86a5bPv2Q4qyekBva1UOusOK5CHh5t316v5XgjhSJ9KD0Nnj 2yb/zghKOoYQtk6PvG5BQfcx5hgcuSxp0/r0bD+VEY99eCjRxfxKuYzjybBYsG2C w831zLbpcfT4uPsG3/aCBIFyiUx5Zb6AYXKRCXIv98uY+6f+r+OVCuTao/EEV66g Tg3B5zFHr2kxYu5z0K9HjBXH/66l1z1qn9EpCptANqEj55vC0oaA6H8/39GhBB2l gwTZAoW69FlWQDch3drIs5QpWcBtzwUuuQ7z4y5/+lpWpCkcrZHL1czbbx+mMvKw Rwg= -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:53 2025 by rpki-client