This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/VZ4jrofh3uonKUViKtt7ZzFGmc0.roa File: VZ4jrofh3uonKUViKtt7ZzFGmc0.roa (raw, json) Hash identifier: CuX+ND3nTrW+vQEYTj0sY/gEXKM5CqPhm4gFIH6h75s= Subject key identifier: 55:9E:23:AE:87:E1:DE:EA:27:29:45:62:2A:DB:7B:67:31:46:99:CD Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f Certificate serial: 019A7D2064DF508C6DDFC6F4E7D3E56BBC51 Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/VZ4jrofh3uonKUViKtt7ZzFGmc0.roa Signing time: Thu 13 Nov 2025 12:11:06 +0000 ROA not before: Thu 13 Nov 2025 12:11:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 157.167.134.0/24 maxlen: 24 157.167.135.0/24 maxlen: 24 157.167.136.0/21 maxlen: 21 157.167.144.0/21 maxlen: 21 157.167.152.0/24 maxlen: 24 157.167.153.0/24 maxlen: 24 157.167.155.0/24 maxlen: 24 157.167.156.0/24 maxlen: 24 157.167.184.0/21 maxlen: 21 157.167.224.0/24 maxlen: 24 157.167.225.0/24 maxlen: 24 157.167.226.0/24 maxlen: 24 157.167.227.0/24 maxlen: 24 157.167.228.0/24 maxlen: 24 157.167.229.0/24 maxlen: 24 157.167.230.0/24 maxlen: 24 157.167.231.0/24 maxlen: 24 157.167.232.0/24 maxlen: 24 157.167.233.0/24 maxlen: 24 157.167.234.0/24 maxlen: 24 157.167.235.0/24 maxlen: 24 157.167.236.0/24 maxlen: 24 157.167.237.0/24 maxlen: 24 157.167.238.0/24 maxlen: 24 157.167.239.0/24 maxlen: 24 157.167.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:20:64:df:50:8c:6d:df:c6:f4:e7:d3:e5:6b:bc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f Validity Not Before: Nov 13 12:11:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=559e23ae87e1deea272945622adb7b67314699cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:d6:fd:b6:dc:1a:e7:04:1c:69:a2:ba:23: ea:be:27:63:f9:6f:11:bb:71:70:72:4b:45:e5:28: d6:76:8e:74:aa:3f:da:31:cc:47:ce:5a:7c:1f:14: ce:a8:3a:f3:39:65:8e:09:09:e1:69:81:89:c5:6f: ad:f2:11:8a:4f:9d:6c:54:9e:dc:17:bd:07:3b:d3: 3b:70:9b:d8:11:1b:16:68:82:61:da:35:b5:68:f2: cd:85:db:0c:28:cf:47:45:92:48:2c:83:7b:69:84: 0a:af:dd:95:e1:8d:aa:18:05:c6:71:09:e8:90:1e: 6f:4c:b7:b9:36:5d:12:4a:bb:62:ef:fb:32:7a:6b: d2:9c:ca:ec:4d:91:21:cc:a7:d4:36:fa:56:d6:d1: 58:df:a0:d4:8a:ac:17:63:d0:0e:45:07:78:08:8d: f2:46:9f:a6:45:c7:98:bc:c8:5a:26:60:fa:ca:c2: b9:f8:1c:18:f1:83:8a:f2:be:e9:e3:1a:ae:5f:8a: 32:a8:89:d5:bf:c4:00:56:9c:2a:6a:95:3a:c6:f4: 37:4b:c4:68:a9:26:d4:8c:3a:99:41:fe:75:f0:0d: ea:17:24:c4:08:bb:ee:09:30:91:76:5c:7f:fd:85: f3:69:f7:8a:33:b1:59:9e:fc:8d:a6:85:28:64:0c: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9E:23:AE:87:E1:DE:EA:27:29:45:62:2A:DB:7B:67:31:46:99:CD X509v3 Authority Key Identifier: keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/VZ4jrofh3uonKUViKtt7ZzFGmc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.167.134.0-157.167.153.255 157.167.155.0-157.167.156.255 157.167.184.0/21 157.167.224.0-157.167.240.255 Signature Algorithm: sha256WithRSAEncryption 42:68:09:dd:8d:9f:e2:da:8a:64:0b:48:54:19:52:29:1b:80: 77:82:4e:c6:3e:26:c5:f8:c9:2f:d7:f3:75:b0:55:0a:ff:22: 38:77:ff:ff:b7:ab:7a:ea:bb:de:10:aa:93:a7:36:97:c3:a5: 55:71:67:ac:02:9e:18:70:e6:f7:3e:79:64:95:16:9d:c2:1e: 36:30:08:3d:ca:c4:66:d9:9c:ff:74:89:d9:26:8a:bf:ba:a4: 1c:0d:51:ef:e9:7e:91:40:06:f3:17:09:4a:26:59:91:d4:40: 5e:26:f6:b1:d9:56:69:54:46:03:c7:08:1f:a6:2d:8f:ca:98: 24:f2:a3:d9:c1:5c:2f:0e:99:c7:52:d5:25:f1:f0:0f:d3:ca: df:55:3e:e1:a9:91:01:4f:04:3d:ca:cc:28:91:60:83:60:0f: 9e:94:cb:f9:6d:e7:e5:bd:40:c2:55:bb:ed:c3:2a:16:55:d9: e3:04:db:dc:eb:95:41:06:89:63:e9:34:70:44:69:e4:7e:79: 1d:fb:5c:2f:2e:69:a7:6a:64:03:55:ba:ef:12:90:67:89:e0: 20:da:3d:f3:8d:94:64:aa:84:2d:4b:7b:e3:af:11:2e:e7:09: 9d:00:a5:d2:ad:e0:7d:f9:f5:53:a8:7c:d9:a5:b3:8a:24:11: 79:bd:07:38 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZp9IGTfUIxt38b059Pla7xRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZGQ5YzIzYWY2OWVjMmNkYjZmZTJiOTkzNmViNDk0Y2Zk MTYyMWYwHhcNMjUxMTEzMTIxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTllMjNhZTg3ZTFkZWVhMjcyOTQ1NjIyYWRiN2I2NzMxNDY5OWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbrW/bbcGucEHGmiuiPqvidj+W8R u3FwcktF5SjWdo50qj/aMcxHzlp8HxTOqDrzOWWOCQnhaYGJxW+t8hGKT51sVJ7c F70HO9M7cJvYERsWaIJh2jW1aPLNhdsMKM9HRZJILIN7aYQKr92V4Y2qGAXGcQno kB5vTLe5Nl0SSrti7/syemvSnMrsTZEhzKfUNvpW1tFY36DUiqwXY9AORQd4CI3y Rp+mRceYvMhaJmD6ysK5+BwY8YOK8r7p4xquX4oyqInVv8QAVpwqapU6xvQ3S8Ro qSbUjDqZQf518A3qFyTECLvuCTCRdlx//YXzafeKM7FZnvyNpoUoZAwhjQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFFWeI66H4d7qJylFYirbe2cxRpnNMB8GA1UdIwQY MBaAFBfdnCOvaews22/iuZNutJTP0WIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYt OGZhN2I0YzUzMDczLzEvVlo0anJvZmgzdW9uS1VWaUt0dDdaekZHbWMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYtOGZhN2I0YzUzMDcz LzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAGdp4YD BAGdp5gwDAMEAJ2nmwMEAJ2nnAMEA52nuDAMAwQFnafgAwQAnafwMA0GCSqGSIb3 DQEBCwUAA4IBAQBCaAndjZ/i2opkC0hUGVIpG4B3gk7GPibF+Mkv1/N1sFUK/yI4 d///t6t66rveEKqTpzaXw6VVcWesAp4YcOb3PnlklRadwh42MAg9ysRm2Zz/dInZ Joq/uqQcDVHv6X6RQAbzFwlKJlmR1EBeJvax2VZpVEYDxwgfpi2Pypgk8qPZwVwv DpnHUtUl8fAP08rfVT7hqZEBTwQ9yswokWCDYA+elMv5beflvUDCVbvtwyoWVdnj BNvc65VBBolj6TRwRGnkfnkd+1wvLmmnamQDVbrvEpBnieAg2j3zjZRkqoQtS3vj rxEu5wmdAKXSreB9+fVTqHzZpbOKJBF5vQc4 -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:39 2025 by rpki-client