This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/_vpABpH1G0K1MkWppXgkduvknzo.roa File: _vpABpH1G0K1MkWppXgkduvknzo.roa (raw, json) Hash identifier: vpV6s9o/VZ8yHVBA8qgPNDiqKNndzHDCOpFszNMOBTw= Subject key identifier: FE:FA:40:06:91:F5:1B:42:B5:32:45:A9:A5:78:24:76:EB:E4:9F:3A Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4 Certificate serial: 019AC4F054DFE2CCD88AB6DFD03CE0BD56EE Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/_vpABpH1G0K1MkWppXgkduvknzo.roa Signing time: Thu 27 Nov 2025 10:51:15 +0000 ROA not before: Thu 27 Nov 2025 10:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62206 IP address blocks: 31.133.80.0/22 maxlen: 24 176.103.224.0/22 maxlen: 22 176.103.232.0/22 maxlen: 22 176.103.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:f0:54:df:e2:cc:d8:8a:b6:df:d0:3c:e0:bd:56:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4 Validity Not Before: Nov 27 10:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fefa400691f51b42b53245a9a5782476ebe49f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:7d:21:9c:b7:f3:47:05:e3:28:21:fe:20: 7d:ea:46:2f:99:ac:98:3a:77:f5:4f:d9:07:ac:18: 53:1a:d0:61:28:87:c4:2f:58:37:bc:69:38:73:99: d9:7c:56:bd:a3:67:20:f1:ce:3a:9e:98:f1:74:f5: cd:1f:eb:4a:ec:07:82:e1:6b:6f:c9:73:1a:05:97: 58:0f:8d:d1:ba:c6:f7:2a:b5:41:fc:9b:47:6e:18: f3:30:4a:22:c1:77:8f:47:f9:99:ed:59:ed:f9:fe: 28:e2:a1:fc:e4:5c:d5:e0:a6:4a:c9:fb:dc:f8:7f: c4:71:31:01:41:a5:10:e2:14:e7:54:3a:4d:7f:06: 5e:f9:d8:81:95:50:00:bb:7e:f0:2c:a2:6c:0b:96: f8:c7:56:a4:67:ed:0d:f7:11:7c:9f:5d:fb:ba:81: c0:36:40:d2:a3:d8:54:91:92:01:91:76:f1:4f:7e: d0:04:9b:e8:0e:a0:0d:69:d8:b0:28:70:06:6a:20: 14:36:23:91:40:17:35:38:89:4b:dd:4a:b5:20:5b: e4:bb:ab:e5:f3:f3:fe:61:30:f5:9b:de:6b:b4:9b: ba:5d:b7:f6:d0:5d:87:ad:cf:bb:63:ef:65:e5:c2: a7:7c:24:99:cd:85:5a:c9:26:e5:0d:a7:32:b8:a6: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FA:40:06:91:F5:1B:42:B5:32:45:A9:A5:78:24:76:EB:E4:9F:3A X509v3 Authority Key Identifier: keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/_vpABpH1G0K1MkWppXgkduvknzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.80.0/22 176.103.224.0/22 176.103.232.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:9c:a5:5a:a3:14:58:8d:3c:f9:86:39:44:94:02:5c:dc:ff: 17:2e:37:fd:e7:0d:02:f0:d0:88:ff:44:aa:ad:b9:66:2a:ec: 31:ca:4b:f9:b1:aa:98:1b:09:84:c6:60:c4:96:15:56:ae:9b: 87:5b:33:c9:6b:e7:11:a9:b0:db:39:29:a9:43:11:78:64:03: b5:9a:2e:2a:b4:2a:b7:35:46:e4:92:7c:65:77:80:8b:2c:3c: 0b:fe:98:7a:83:ff:d3:b8:4f:58:3d:06:57:95:67:c7:ba:ff: 80:5b:d8:bc:b8:d3:70:8a:52:0d:14:ab:b8:44:36:0a:a9:f7: 15:94:34:49:ce:63:a9:50:08:21:e3:c0:f5:fc:2f:e5:f9:c7: 6b:2f:fb:ca:79:82:54:47:1b:db:37:c0:a1:04:ce:c2:8e:e2: 24:83:4d:d5:9a:9b:cb:ef:45:0b:57:0d:f1:56:b5:d7:5e:af: f4:55:7a:23:91:93:63:14:1a:0b:26:23:bb:73:78:44:25:54: 86:a0:34:1f:8b:8a:b5:af:ff:a1:ef:96:60:c1:f0:74:24:14: ac:06:10:f9:d2:9d:3a:9a:14:69:8b:f1:5a:3a:ee:6f:9e:4d: a7:fe:44:f6:3f:d0:d1:a0:2b:a7:9a:da:55:90:94:f3:bc:64: da:a2:1d:32 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrE8FTf4szYirbf0DzgvVbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz ODllZDQwHhcNMjUxMTI3MTA1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWZhNDAwNjkxZjUxYjQyYjUzMjQ1YTlhNTc4MjQ3NmViZTQ5ZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Z9IZy380cF4ygh/iB96kYvmayY Onf1T9kHrBhTGtBhKIfEL1g3vGk4c5nZfFa9o2cg8c46npjxdPXNH+tK7AeC4Wtv yXMaBZdYD43Rusb3KrVB/JtHbhjzMEoiwXePR/mZ7Vnt+f4o4qH85FzV4KZKyfvc +H/EcTEBQaUQ4hTnVDpNfwZe+diBlVAAu37wLKJsC5b4x1akZ+0N9xF8n137uoHA NkDSo9hUkZIBkXbxT37QBJvoDqANadiwKHAGaiAUNiORQBc1OIlL3Uq1IFvku6vl 8/P+YTD1m95rtJu6Xbf20F2Hrc+7Y+9l5cKnfCSZzYVaySblDacyuKYOoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP76QAaR9RtCtTJFqaV4JHbr5J86MB8GA1UdIwQY MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt MDgxY2IyYjE3YWI1LzEvX3ZwQUJwSDFHMEsxTWtXcHBYZ2tkdXZrbnpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1 LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH4VQAwQC sGfgAwQDsGfoMA0GCSqGSIb3DQEBCwUAA4IBAQA6nKVaoxRYjTz5hjlElAJc3P8X Ljf95w0C8NCI/0SqrblmKuwxykv5saqYGwmExmDElhVWrpuHWzPJa+cRqbDbOSmp QxF4ZAO1mi4qtCq3NUbkknxld4CLLDwL/ph6g//TuE9YPQZXlWfHuv+AW9i8uNNw ilINFKu4RDYKqfcVlDRJzmOpUAgh48D1/C/l+cdrL/vKeYJURxvbN8ChBM7CjuIk g03VmpvL70ULVw3xVrXXXq/0VXojkZNjFBoLJiO7c3hEJVSGoDQfi4q1r/+h75Zg wfB0JBSsBhD50p06mhRpi/FaOu5vnk2n/kT2P9DRoCunmtpVkJTzvGTaoh0y -----END CERTIFICATE-----Generated at Fri Dec 19 09:25:20 2025 by rpki-client