This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/vASMvqMKdVuVur6UMRXjyqvAGfY.roa File: vASMvqMKdVuVur6UMRXjyqvAGfY.roa (raw, json) Hash identifier: St4xX/JO+ugq63vpxfwsQqa1EocjW1D79lqVObSNu1E= Subject key identifier: BC:04:8C:BE:A3:0A:75:5B:95:BA:BE:94:31:15:E3:CA:AB:C0:19:F6 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019AFA4222CDB8CE711A248DEE7E3D65FD0C Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/vASMvqMKdVuVur6UMRXjyqvAGfY.roa Signing time: Sun 07 Dec 2025 19:20:29 +0000 ROA not before: Sun 07 Dec 2025 19:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212910 IP address blocks: 77.221.58.0/23 maxlen: 23 77.221.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:42:22:cd:b8:ce:71:1a:24:8d:ee:7e:3d:65:fd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Dec 7 19:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bc048cbea30a755b95babe943115e3caabc019f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cc:ae:98:db:a0:5f:87:a0:b9:6d:85:86:4b: 63:28:20:60:1e:aa:8c:62:d0:c8:3b:d5:18:ea:9b: 1a:e9:93:a9:13:36:d2:c1:56:a0:ed:19:55:11:e4: 25:77:6f:c2:14:63:8f:3c:39:67:a8:02:57:fa:c7: 6b:7a:53:5c:52:72:04:1d:31:4a:fb:29:36:1e:f6: 8c:8f:3c:70:1f:61:c6:64:36:cd:cb:f0:e9:41:8a: 5e:07:43:23:96:5a:ea:a9:9a:4c:c2:c5:d0:db:0d: af:5f:97:4f:12:f0:69:84:93:e8:d4:f3:c7:6c:00: c0:b7:b9:f5:79:2a:d8:31:c9:8d:6a:da:10:14:90: 0c:b8:97:2f:cf:d2:ed:17:a9:71:8d:55:59:52:a6: c5:0c:2f:7a:7c:9a:2b:57:50:32:dd:00:71:2d:ba: 1d:fb:17:13:70:a6:7d:ca:82:24:0a:57:6a:58:62: 8c:bb:5f:f1:24:4c:7e:43:ba:af:ff:93:78:52:4a: 92:d7:1c:c4:f2:a8:16:de:59:bd:5c:8a:80:69:0f: aa:9f:91:9b:62:e2:54:37:26:88:3d:0c:fa:35:a1: 4c:cf:d2:cf:66:21:91:14:99:1e:30:f8:c1:61:64: d0:fa:5a:ed:93:0b:75:e4:c8:91:a0:cf:3d:f7:f0: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:8C:BE:A3:0A:75:5B:95:BA:BE:94:31:15:E3:CA:AB:C0:19:F6 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/vASMvqMKdVuVur6UMRXjyqvAGfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.58.0-77.221.61.255 Signature Algorithm: sha256WithRSAEncryption 19:65:37:a9:7b:88:04:21:68:bf:4e:26:b2:09:ea:a0:3e:19: 84:cb:15:83:88:57:74:e4:cb:aa:90:8f:55:44:b2:10:69:ec: 16:4f:81:77:77:c1:0d:b0:7a:d1:a8:91:56:9b:91:5a:9b:4f: 57:88:a9:dd:9a:0d:b6:28:ae:4f:f7:26:b6:86:1f:70:e7:6f: 21:0f:0b:42:e1:4f:e5:e9:a6:c4:4e:56:42:65:5e:0d:f8:09: 2b:d2:ee:47:ef:f5:18:1e:28:7f:6a:e4:d5:0a:0b:68:12:af: 9b:52:52:56:dd:ac:ad:41:bd:b0:30:fd:31:05:c6:11:87:fe: 89:59:af:7e:d9:0e:67:2b:39:a8:d4:b8:55:d9:b1:86:cf:9e: 0d:da:a2:0b:37:fd:52:10:68:dd:5b:c8:79:0f:de:f6:57:be: ca:c4:7d:df:1b:cb:3d:f3:b3:60:de:79:3a:ea:18:3d:d9:e9: 67:11:60:7e:9e:1a:fd:e4:17:f5:03:34:d9:43:46:b5:96:e1: 25:32:8c:05:3a:36:12:aa:df:42:cd:ee:a9:81:fb:08:96:85: b0:ac:80:9e:19:67:91:63:88:47:27:b7:4c:95:15:6a:15:a8: cd:f8:39:82:a6:2e:45:04:58:1f:13:6a:d8:2a:f5:df:9b:c6: 65:4e:ee:6b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZr6QiLNuM5xGiSN7n49Zf0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUxMjA3MTkyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzA0OGNiZWEzMGE3NTViOTViYWJlOTQzMTE1ZTNjYWFiYzAxOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48yumNugX4eguW2FhktjKCBgHqqM YtDIO9UY6psa6ZOpEzbSwVag7RlVEeQld2/CFGOPPDlnqAJX+sdrelNcUnIEHTFK +yk2HvaMjzxwH2HGZDbNy/DpQYpeB0MjllrqqZpMwsXQ2w2vX5dPEvBphJPo1PPH bADAt7n1eSrYMcmNatoQFJAMuJcvz9LtF6lxjVVZUqbFDC96fJorV1Ay3QBxLbod +xcTcKZ9yoIkCldqWGKMu1/xJEx+Q7qv/5N4UkqS1xzE8qgW3lm9XIqAaQ+qn5Gb YuJUNyaIPQz6NaFMz9LPZiGRFJkeMPjBYWTQ+lrtkwt15MiRoM899/BV/wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLwEjL6jCnVblbq+lDEV48qrwBn2MB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvdkFTTXZxTUtkVnVWdXI2VU1SWGp5cXZBR2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFN3ToD BAFN3TwwDQYJKoZIhvcNAQELBQADggEBABllN6l7iAQhaL9OJrIJ6qA+GYTLFYOI V3Tky6qQj1VEshBp7BZPgXd3wQ2wetGokVabkVqbT1eIqd2aDbYork/3JraGH3Dn byEPC0LhT+XppsROVkJlXg34CSvS7kfv9RgeKH9q5NUKC2gSr5tSUlbdrK1BvbAw /TEFxhGH/olZr37ZDmcrOajUuFXZsYbPng3aogs3/VIQaN1byHkP3vZXvsrEfd8b yz3zs2DeeTrqGD3Z6WcRYH6eGv3kF/UDNNlDRrWW4SUyjAU6NhKq30LN7qmB+wiW hbCsgJ4ZZ5FjiEcnt0yVFWoVqM34OYKmLkUEWB8Tatgq9d+bxmVO7ms= -----END CERTIFICATE-----Generated at Fri Dec 12 11:45:56 2025 by rpki-client