This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/vALQrFLzmQ9gR7444eJDUe8p3-s.roa File: vALQrFLzmQ9gR7444eJDUe8p3-s.roa (raw, json) Hash identifier: dsgrUgBij2LrHHDbh/hbKc9/jOogaHIIxPw9xdtp6OY= Subject key identifier: BC:02:D0:AC:52:F3:99:0F:60:47:BE:38:E1:E2:43:51:EF:29:DF:EB Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7 Certificate serial: 019B45B8792278287890EDC52A9FBD64D4D5 Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/vALQrFLzmQ9gR7444eJDUe8p3-s.roa Signing time: Mon 22 Dec 2025 11:01:16 +0000 ROA not before: Mon 22 Dec 2025 11:01:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36680 IP address blocks: 176.117.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:79:22:78:28:78:90:ed:c5:2a:9f:bd:64:d4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7 Validity Not Before: Dec 22 11:01:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bc02d0ac52f3990f6047be38e1e24351ef29dfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:50:c0:da:6e:4c:67:d0:04:6f:e0:11:79:68: 52:86:b1:85:2d:39:e7:09:cf:fd:eb:f9:3d:4d:9c: 71:38:85:73:1d:00:58:bc:92:ea:d5:63:52:b9:16: 15:fe:58:2d:19:83:85:70:93:fb:f4:8d:cd:23:42: 60:ff:f7:37:a1:0c:06:a7:2f:63:bf:9f:54:27:4b: 13:86:75:3a:ec:a2:9d:5a:85:e1:e0:22:58:2f:d3: e0:37:16:35:f9:2f:97:fa:7c:01:ce:7b:a3:74:cb: 31:13:c6:01:0e:c9:e5:e7:30:2d:76:c4:92:4b:b5: 04:91:30:6d:59:5b:20:fc:28:2a:69:46:02:5b:d5: e7:7d:d6:48:39:cc:a9:4c:ff:72:16:62:12:34:3d: 60:09:21:2c:c7:2f:d8:d2:15:3c:d1:ff:14:41:40: db:a6:79:c5:06:90:66:17:a1:7c:92:4b:19:18:df: d8:16:bf:51:2b:34:41:14:46:ef:5e:2a:cb:10:62: 79:dc:59:93:f8:99:bd:a9:3a:bb:ab:7a:e6:ac:f9: f1:c1:ef:95:53:fd:5f:2c:7d:1d:2e:94:3f:17:59: 8e:f8:38:d3:2a:0d:53:4e:bd:43:4f:a6:d2:5b:b5: b9:29:e6:62:88:2b:1e:1e:39:fb:3d:ed:1f:bf:4d: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:02:D0:AC:52:F3:99:0F:60:47:BE:38:E1:E2:43:51:EF:29:DF:EB X509v3 Authority Key Identifier: keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/vALQrFLzmQ9gR7444eJDUe8p3-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.107.0/24 Signature Algorithm: sha256WithRSAEncryption 77:a3:ca:08:3b:6b:34:3f:f3:85:75:3c:bd:67:c3:2e:fc:65: 01:79:b1:6a:10:9a:a9:c6:02:81:d9:89:15:ff:3b:4a:63:f9: 35:e4:e4:2d:92:5f:a2:5a:df:86:58:d1:32:30:78:1f:fb:1e: 91:33:22:2f:24:44:09:3d:16:45:ca:4a:55:53:71:45:83:bf: f6:58:cc:ea:13:c9:13:6c:04:54:b1:a1:5c:e5:fc:23:bd:6e: 0d:1f:2e:30:09:33:da:f7:22:a3:41:5d:b3:3f:73:b4:e8:40: db:72:d4:16:0b:e0:3b:5f:21:2e:a0:5d:7c:39:7e:0f:ac:8a: 92:bd:d3:36:23:09:a8:82:79:8b:83:4c:3f:fe:f8:c2:93:c3: a8:d6:dd:1a:60:8f:a6:aa:c7:31:75:42:0c:4b:e0:a0:b5:e1: 4a:f5:c0:61:fa:57:14:eb:f3:3c:0d:99:3f:14:a7:59:e1:fb: a3:de:e2:f7:a4:88:30:d3:9f:54:b4:af:c9:b2:95:a0:bd:08: d5:c8:96:07:67:98:1b:e0:41:da:50:56:3d:d7:c9:88:fe:87: 9e:1f:b9:de:00:b1:41:6e:d6:90:2e:c2:44:99:37:62:a4:64: d9:fd:d2:3b:08:71:98:35:1c:c7:f9:11:f3:cb:7f:5d:9a:54: 7a:46:fe:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtFuHkieCh4kO3FKp+9ZNTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjE0NzhlNGQ2NTliZWNlODIwM2M1ZThiYThlOGY4MmYw NDcwZDcwHhcNMjUxMjIyMTEwMTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzAyZDBhYzUyZjM5OTBmNjA0N2JlMzhlMWUyNDM1MWVmMjlkZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFDA2m5MZ9AEb+AReWhShrGFLTnn Cc/96/k9TZxxOIVzHQBYvJLq1WNSuRYV/lgtGYOFcJP79I3NI0Jg//c3oQwGpy9j v59UJ0sThnU67KKdWoXh4CJYL9PgNxY1+S+X+nwBznujdMsxE8YBDsnl5zAtdsSS S7UEkTBtWVsg/CgqaUYCW9XnfdZIOcypTP9yFmISND1gCSEsxy/Y0hU80f8UQUDb pnnFBpBmF6F8kksZGN/YFr9RKzRBFEbvXirLEGJ53FmT+Jm9qTq7q3rmrPnxwe+V U/1fLH0dLpQ/F1mO+DjTKg1TTr1DT6bSW7W5KeZiiCseHjn7Pe0fv00BLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwC0KxS85kPYEe+OOHiQ1HvKd/rMB8GA1UdIwQY MBaAFMphR45NZZvs6CA8Xouo6PgvBHDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTIt OTQ2ZGE1ZjVlZmJiLzEvdkFMUXJGTHptUTlnUjc0NDRlSkRVZThwMy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTItOTQ2ZGE1ZjVlZmJi LzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHVrMA0G CSqGSIb3DQEBCwUAA4IBAQB3o8oIO2s0P/OFdTy9Z8Mu/GUBebFqEJqpxgKB2YkV /ztKY/k15OQtkl+iWt+GWNEyMHgf+x6RMyIvJEQJPRZFykpVU3FFg7/2WMzqE8kT bARUsaFc5fwjvW4NHy4wCTPa9yKjQV2zP3O06EDbctQWC+A7XyEuoF18OX4PrIqS vdM2IwmognmLg0w//vjCk8Oo1t0aYI+mqscxdUIMS+CgteFK9cBh+lcU6/M8DZk/ FKdZ4fuj3uL3pIgw059UtK/JspWgvQjVyJYHZ5gb4EHaUFY918mI/oeeH7neALFB btaQLsJEmTdipGTZ/dI7CHGYNRzH+RHzy39dmlR6Rv5k -----END CERTIFICATE-----Generated at Mon Dec 29 08:43:17 2025 by rpki-client