This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/vMm4FVPVdLv-D-lL17N1Am09G_8.roa File: vMm4FVPVdLv-D-lL17N1Am09G_8.roa (raw, json) Hash identifier: /zMuON3m9VqJT9Tvl4GQhmfLyHwwcX8ez8M/3XuNpqY= Subject key identifier: BC:C9:B8:15:53:D5:74:BB:FE:0F:E9:4B:D7:B3:75:02:6D:3D:1B:FF Certificate issuer: /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Certificate serial: 019AEAFCD55D430C405BE603D630E3209E9D Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/vMm4FVPVdLv-D-lL17N1Am09G_8.roa Signing time: Thu 04 Dec 2025 20:10:29 +0000 ROA not before: Thu 04 Dec 2025 20:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60781 IP address blocks: 45.131.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:fc:d5:5d:43:0c:40:5b:e6:03:d6:30:e3:20:9e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Validity Not Before: Dec 4 20:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bcc9b81553d574bbfe0fe94bd7b375026d3d1bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f9:17:68:fc:66:6e:6c:68:7d:1f:cb:07:ce: c6:bd:99:80:2a:09:15:94:05:71:22:00:5c:80:ac: 45:84:91:17:53:47:5b:f1:e7:ef:cf:48:2c:4c:da: 0f:d2:86:49:0c:be:65:f8:60:93:7e:f2:66:d1:ca: ca:db:3e:72:de:50:b3:fe:b7:67:6d:0f:41:19:3f: f2:55:e2:3c:7b:82:9b:70:ee:e0:04:dd:a9:63:a9: 55:cb:0e:69:4e:47:f8:02:f1:a0:83:b4:34:47:a1: 97:a6:47:e3:c9:9d:ba:3f:e6:dd:cc:a2:13:1d:12: b0:b4:e3:ca:a0:e5:ab:d4:b7:e1:a0:42:12:c5:e1: 26:c5:13:82:ae:3b:0b:30:66:f9:ad:b5:53:04:31: 22:3a:8f:2a:4d:f5:8c:28:7f:fa:a0:1b:3e:d4:e1: 1a:96:ab:8a:13:b2:aa:b6:b1:8e:f4:4f:40:0e:14: da:24:cf:5c:46:8c:0b:ca:b0:fd:88:fb:22:30:2f: 05:da:c3:18:5c:40:e2:06:70:1c:ac:94:5f:d6:76: c6:92:31:60:02:fa:81:9f:31:bb:c1:1c:61:06:e8: a8:e6:cb:bf:3e:0d:9c:5a:04:21:cf:83:26:88:00: b8:cc:53:c8:78:4c:10:8d:cf:6d:18:b5:7a:8c:f6: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C9:B8:15:53:D5:74:BB:FE:0F:E9:4B:D7:B3:75:02:6D:3D:1B:FF X509v3 Authority Key Identifier: keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/vMm4FVPVdLv-D-lL17N1Am09G_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.181.0/24 Signature Algorithm: sha256WithRSAEncryption 57:a0:c6:00:25:d5:39:c0:47:c0:00:01:52:b4:2a:43:d6:e5: 9f:d0:8e:42:a0:d4:28:21:71:1c:93:1a:5f:23:f5:5b:56:fe: 60:b7:ff:0c:c5:5e:da:49:07:23:86:fa:e8:e4:07:42:55:f1: 79:8e:cc:8f:77:22:de:ee:0e:2f:16:bc:46:bd:9b:68:5a:43: 79:34:f5:9b:3d:ed:14:4e:35:32:22:54:d1:a6:d9:a9:61:f7: 44:d1:93:6b:c5:6a:3d:a6:2f:0a:6c:66:37:c2:80:c0:fd:cc: 28:0c:ff:8e:85:9c:18:bd:5a:b8:e0:b0:43:52:a0:f1:aa:48: 4b:c9:f6:bc:38:a3:96:d0:e4:81:56:4d:dd:aa:98:80:bc:aa: 7a:d5:2f:f5:3b:34:01:4b:d4:1a:68:af:5c:a9:0a:66:95:cf: c9:27:76:72:c3:0d:51:4e:0d:ce:98:61:65:ea:05:08:fc:ba: f5:fe:65:08:fc:3d:5f:0a:13:ac:08:ec:6b:8e:83:25:59:89: ca:16:83:e4:e7:29:15:84:25:6c:03:f9:66:a2:8f:32:de:7d: 02:33:20:92:02:d8:d2:4b:dc:7a:ea:b6:a0:08:a8:29:cd:fc: 7a:06:41:a8:98:3e:38:1c:5d:b8:91:c8:a7:0f:f9:e9:cf:7d: 7d:f8:c8:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrq/NVdQwxAW+YD1jDjIJ6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzgwMTU3YjU2NDI2Y2UzYTVmNDNjODlmZWIxZDQzN2M3 N2NiY2UwHhcNMjUxMjA0MjAxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2M5YjgxNTUzZDU3NGJiZmUwZmU5NGJkN2IzNzUwMjZkM2QxYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PkXaPxmbmxofR/LB87GvZmAKgkV lAVxIgBcgKxFhJEXU0db8efvz0gsTNoP0oZJDL5l+GCTfvJm0crK2z5y3lCz/rdn bQ9BGT/yVeI8e4KbcO7gBN2pY6lVyw5pTkf4AvGgg7Q0R6GXpkfjyZ26P+bdzKIT HRKwtOPKoOWr1LfhoEISxeEmxROCrjsLMGb5rbVTBDEiOo8qTfWMKH/6oBs+1OEa lquKE7KqtrGO9E9ADhTaJM9cRowLyrD9iPsiMC8F2sMYXEDiBnAcrJRf1nbGkjFg AvqBnzG7wRxhBuio5su/Pg2cWgQhz4MmiAC4zFPIeEwQjc9tGLV6jPYc+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzJuBVT1XS7/g/pS9ezdQJtPRv/MB8GA1UdIwQY MBaAFAPIAVe1ZCbOOl9DyJ/rHUN8d8vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEt ZjAxNGY4MTc3OTZhLzEvdk1tNEZWUFZkTHYtRC1sTDE3TjFBbTA5R184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEtZjAxNGY4MTc3OTZh LzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYO1MA0G CSqGSIb3DQEBCwUAA4IBAQBXoMYAJdU5wEfAAAFStCpD1uWf0I5CoNQoIXEckxpf I/VbVv5gt/8MxV7aSQcjhvro5AdCVfF5jsyPdyLe7g4vFrxGvZtoWkN5NPWbPe0U TjUyIlTRptmpYfdE0ZNrxWo9pi8KbGY3woDA/cwoDP+OhZwYvVq44LBDUqDxqkhL yfa8OKOW0OSBVk3dqpiAvKp61S/1OzQBS9QaaK9cqQpmlc/JJ3Zyww1RTg3OmGFl 6gUI/Lr1/mUI/D1fChOsCOxrjoMlWYnKFoPk5ykVhCVsA/lmoo8y3n0CMyCSAtjS S9x66ragCKgpzfx6BkGomD44HF24kcinD/npz319+Mjo -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:43 2025 by rpki-client