This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/VsMfaSNU6El8JPxhBpkXhVwnLJA.roa File: VsMfaSNU6El8JPxhBpkXhVwnLJA.roa (raw, json) Hash identifier: IR2/IgYNGn6z1kJFqLwwyQdlxJTc6K5zoOikMt2zGgM= Subject key identifier: 56:C3:1F:69:23:54:E8:49:7C:24:FC:61:06:99:17:85:5C:27:2C:90 Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24 Certificate serial: 019B07621FCF36E39D3A605DD5888F4ED1CC Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/VsMfaSNU6El8JPxhBpkXhVwnLJA.roa Signing time: Wed 10 Dec 2025 08:30:29 +0000 ROA not before: Wed 10 Dec 2025 08:30:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12902 IP address blocks: 79.98.168.0/21 maxlen: 24 79.98.170.0/24 maxlen: 24 185.32.232.0/22 maxlen: 24 185.45.116.0/22 maxlen: 24 185.47.20.0/22 maxlen: 24 185.50.92.0/22 maxlen: 24 185.50.93.0/24 maxlen: 24 185.50.95.0/24 maxlen: 24 185.225.220.0/24 maxlen: 24 185.240.112.0/22 maxlen: 24 194.180.219.0/24 maxlen: 24 217.77.128.0/19 maxlen: 24 217.77.144.0/24 maxlen: 24 2001:9c0::/32 maxlen: 32 2a00:c660::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:62:1f:cf:36:e3:9d:3a:60:5d:d5:88:8f:4e:d1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24 Validity Not Before: Dec 10 08:30:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=56c31f692354e8497c24fc61069917855c272c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:5b:6e:90:ac:39:7c:d0:e2:f4:8d:0b:d2: 79:20:01:07:c7:59:6b:2c:a7:61:ef:77:57:28:5a: 4d:01:eb:a8:fa:3f:5e:14:a4:6d:9e:ae:66:15:a2: 0e:8d:6a:a7:bb:e8:bb:00:d3:de:f3:a5:56:fe:9e: 58:ae:3b:f6:c6:8a:0a:46:dc:7d:6e:68:cf:eb:5c: 90:85:3e:51:36:f3:60:ec:7f:f7:ab:56:e1:51:91: a4:63:25:b7:4b:5d:11:7c:14:92:7e:8d:ba:f2:67: 02:ef:e8:12:d8:3e:fb:56:a3:87:de:ab:61:6b:7d: 2d:71:77:f3:4e:76:22:32:03:4a:0c:55:81:a9:a6: 7c:4c:ba:c4:ca:cc:b0:8a:7a:1d:d8:f6:49:8b:48: fb:4e:76:db:94:cb:71:3f:d6:3a:9c:bd:25:6b:ba: 45:5a:61:ea:a9:01:a3:62:48:0d:5d:92:4e:f7:8e: 6d:ea:f4:fd:21:50:06:fa:31:f9:ac:98:ea:90:f1: 95:a3:a0:a2:3c:5d:5b:4a:9b:ef:5b:d8:17:18:2f: 04:24:37:e4:e4:82:a7:0e:08:92:d1:cc:64:f1:95: 07:37:9d:24:44:6c:17:4f:f8:f7:78:c3:ee:ab:c3: 24:cb:4a:9a:df:97:86:82:45:21:e1:60:2e:6d:66: ba:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C3:1F:69:23:54:E8:49:7C:24:FC:61:06:99:17:85:5C:27:2C:90 X509v3 Authority Key Identifier: keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/VsMfaSNU6El8JPxhBpkXhVwnLJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.168.0/21 185.32.232.0/22 185.45.116.0/22 185.47.20.0/22 185.50.92.0/22 185.225.220.0/24 185.240.112.0/22 194.180.219.0/24 217.77.128.0/19 IPv6: 2001:9c0::/32 2a00:c660::/29 Signature Algorithm: sha256WithRSAEncryption 4c:26:65:fd:a0:c8:01:69:b8:e1:ab:d9:ec:11:99:ec:7d:74: 31:6d:c6:15:d5:18:90:81:1a:ac:ff:c8:8b:29:d0:85:31:12: f3:b7:22:7a:6d:5f:60:3c:80:dd:60:bf:2a:f6:94:79:b8:2c: 6b:b4:c3:b8:0f:76:89:3c:bb:f5:10:85:29:70:f2:79:5a:9a: f2:23:48:a5:ec:20:ce:2e:49:b7:93:67:68:d1:e5:9a:96:ac: 2b:9d:78:39:76:3c:70:7c:dc:1d:26:de:5f:52:9b:48:ca:8d: 6e:94:71:83:38:b3:34:6d:33:eb:03:f9:12:5d:68:91:95:57: 84:a3:7a:1b:5d:c1:09:31:78:da:e6:77:65:19:52:6f:32:7e: a9:10:86:d8:e2:19:d3:5b:90:16:ce:01:4a:6a:3d:cd:fe:28: 66:9f:ce:f3:db:02:67:e6:e8:e3:41:c8:02:f6:aa:74:3e:de: 8c:a1:31:2a:d2:03:8e:c0:78:52:17:e0:bb:4a:89:49:0b:36: 1e:ed:94:e2:05:56:10:b7:a1:51:87:cd:35:fa:88:a0:aa:77: 87:16:81:ac:0e:f2:4b:73:05:5e:54:b2:ca:67:9d:f5:8e:b4: 53:24:8d:d8:7e:55:61:27:19:ad:1e:6c:60:0c:a9:ba:a2:ba: 05:2a:a4:10 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZsHYh/PNuOdOmBd1YiPTtHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTFmNDcxMzAyNDgwNGM0NDU0MDNhZjYzZmE2NDRiMmE5 MzVkMjQwHhcNMjUxMjEwMDgzMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmMzMWY2OTIzNTRlODQ5N2MyNGZjNjEwNjk5MTc4NTVjMjcyYzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg5bbpCsOXzQ4vSNC9J5IAEHx1lr LKdh73dXKFpNAeuo+j9eFKRtnq5mFaIOjWqnu+i7ANPe86VW/p5Yrjv2xooKRtx9 bmjP61yQhT5RNvNg7H/3q1bhUZGkYyW3S10RfBSSfo268mcC7+gS2D77VqOH3qth a30tcXfzTnYiMgNKDFWBqaZ8TLrEysywinod2PZJi0j7TnbblMtxP9Y6nL0la7pF WmHqqQGjYkgNXZJO945t6vT9IVAG+jH5rJjqkPGVo6CiPF1bSpvvW9gXGC8EJDfk 5IKnDgiS0cxk8ZUHN50kRGwXT/j3eMPuq8Mky0qa35eGgkUh4WAubWa6RwIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFFbDH2kjVOhJfCT8YQaZF4VcJyyQMB8GA1UdIwQY MBaAFKyh9HEwJIBMRFQDr2P6ZEsqk10kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgt NWNhMDE2YTEwMDU0LzEvVnNNZmFTTlU2RWw4SlB4aEJwa1hoVnduTEpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgtNWNhMDE2YTEwMDU0 LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQDT2KoAwQC uSDoAwQCuS10AwQCuS8UAwQCuTJcAwQAueHcAwQCufBwAwQAwrTbAwQF2U2AMBQE AgACMA4DBQAgAQnAAwUDKgDGYDANBgkqhkiG9w0BAQsFAAOCAQEATCZl/aDIAWm4 4avZ7BGZ7H10MW3GFdUYkIEarP/IiynQhTES87ciem1fYDyA3WC/KvaUebgsa7TD uA92iTy79RCFKXDyeVqa8iNIpewgzi5Jt5NnaNHlmpasK514OXY8cHzcHSbeX1Kb SMqNbpRxgzizNG0z6wP5El1okZVXhKN6G13BCTF42uZ3ZRlSbzJ+qRCG2OIZ01uQ Fs4BSmo9zf4oZp/O89sCZ+bo40HIAvaqdD7ejKExKtIDjsB4Uhfgu0qJSQs2Hu2U 4gVWELehUYfNNfqIoKp3hxaBrA7yS3MFXlSyymed9Y60UySN2H5VYScZrR5sYAyp uqK6BSqkEA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:39 2025 by rpki-client