This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VNn34cOshPRxZVjaSsPfZy_s1Vk.roa File: VNn34cOshPRxZVjaSsPfZy_s1Vk.roa (raw, json) Hash identifier: dD4DF8t5oXtPGMdDXRvMDCvshFIDRv2neZjcWdLi+oE= Subject key identifier: 54:D9:F7:E1:C3:AC:84:F4:71:65:58:DA:4A:C3:DF:67:2F:EC:D5:59 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019AC54F8BEDC9647E211843800165794282 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VNn34cOshPRxZVjaSsPfZy_s1Vk.roa Signing time: Thu 27 Nov 2025 12:35:16 +0000 ROA not before: Thu 27 Nov 2025 12:35:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19211 IP address blocks: 195.172.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:4f:8b:ed:c9:64:7e:21:18:43:80:01:65:79:42:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 27 12:35:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54d9f7e1c3ac84f4716558da4ac3df672fecd559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8f:fa:04:3b:ab:04:0d:a3:a5:99:7b:26:be: a2:e8:41:a8:cd:f0:fe:af:ce:da:16:80:2c:ed:13: 4d:24:de:bd:65:ff:b1:61:38:c9:52:9b:f2:95:5c: 83:11:a4:b2:39:fd:b3:3c:1e:57:81:72:30:26:19: 0f:06:5e:07:ee:fb:8d:52:d8:c8:aa:c7:a0:47:0d: 2e:ec:fe:27:a3:92:2a:2e:eb:9a:24:59:5b:40:c9: a4:50:c8:51:4c:3c:ec:1f:61:56:a8:3d:00:39:83: f3:04:ad:82:9e:2f:29:ca:6a:55:8f:ba:bf:0c:61: e4:69:a7:a8:f4:9b:56:eb:23:5c:89:51:0c:b0:23: 34:c6:e1:9c:1b:5e:4d:af:7b:26:8e:64:01:40:09: 39:5c:e1:fc:ee:d3:84:96:aa:c4:5c:4b:97:5c:fc: a8:e9:ec:a7:a3:3d:6e:a2:d8:a9:00:ec:28:af:81: 47:0e:61:04:e8:f6:8e:a7:00:5e:f9:fe:ad:07:ac: f6:10:f1:cd:e7:06:ef:aa:2d:77:2f:f2:64:c8:0f: 30:c4:b6:2d:4b:e3:93:57:8d:2b:f3:1d:3a:e8:17: fc:04:f1:de:dd:6f:21:72:21:50:fe:0f:7a:b8:be: c9:16:3f:c4:85:0c:a5:85:62:55:bf:65:79:15:43: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D9:F7:E1:C3:AC:84:F4:71:65:58:DA:4A:C3:DF:67:2F:EC:D5:59 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VNn34cOshPRxZVjaSsPfZy_s1Vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.172.152.0/21 Signature Algorithm: sha256WithRSAEncryption a0:c9:08:32:0d:36:7c:23:b1:31:21:07:8c:be:48:ab:a1:d5: 1d:3a:7c:84:52:24:fc:3f:57:e9:fc:46:bd:cc:d0:0f:3b:60: 4c:51:9d:3e:a5:d3:19:23:ed:d9:ae:e6:11:9e:81:9e:06:c1: 59:0e:08:99:c1:10:a3:66:64:cd:0a:d9:39:09:0c:70:c4:27: e5:26:44:d9:1c:e4:4a:f2:4a:a5:7f:be:74:09:4c:07:ee:e6: 0c:ba:ca:79:b0:11:fb:96:ae:60:3b:d6:40:e2:87:6b:bf:56: 78:ad:a5:22:91:ab:02:dc:31:e4:fd:79:38:f8:85:c9:43:a0: 27:19:b1:e7:1e:e5:c8:38:67:86:53:7a:1c:dd:16:fb:78:b3: 22:df:aa:a9:e0:75:25:56:ca:d6:14:40:2b:2f:84:fe:74:08: 2d:16:b4:fe:a6:0d:ed:7a:e7:9a:f5:fb:74:10:67:98:ad:fd: 05:d8:c0:8d:59:95:c1:54:61:62:1d:b1:09:4c:cf:bc:00:cd: ba:60:12:6c:22:6b:2d:86:d4:86:83:0b:fd:df:e6:7c:cc:86: 71:3c:43:c0:c5:01:e9:2b:90:fc:49:83:fa:82:3b:a3:b8:83: 3d:a9:01:13:a3:cb:b9:12:af:cb:fb:e9:28:29:21:a8:bf:61: ac:99:2b:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrFT4vtyWR+IRhDgAFleUKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTI3MTIzNTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGQ5ZjdlMWMzYWM4NGY0NzE2NTU4ZGE0YWMzZGY2NzJmZWNkNTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Y/6BDurBA2jpZl7Jr6i6EGozfD+ r87aFoAs7RNNJN69Zf+xYTjJUpvylVyDEaSyOf2zPB5XgXIwJhkPBl4H7vuNUtjI qsegRw0u7P4no5IqLuuaJFlbQMmkUMhRTDzsH2FWqD0AOYPzBK2Cni8pympVj7q/ DGHkaaeo9JtW6yNciVEMsCM0xuGcG15Nr3smjmQBQAk5XOH87tOElqrEXEuXXPyo 6eynoz1uotipAOwor4FHDmEE6PaOpwBe+f6tB6z2EPHN5wbvqi13L/JkyA8wxLYt S+OTV40r8x066Bf8BPHe3W8hciFQ/g96uL7JFj/EhQylhWJVv2V5FUM9uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFTZ9+HDrIT0cWVY2krD32cv7NVZMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvVk5uMzRjT3NoUFJ4WlZqYVNzUGZaeV9zMVZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDw6yYMA0G CSqGSIb3DQEBCwUAA4IBAQCgyQgyDTZ8I7ExIQeMvkirodUdOnyEUiT8P1fp/Ea9 zNAPO2BMUZ0+pdMZI+3ZruYRnoGeBsFZDgiZwRCjZmTNCtk5CQxwxCflJkTZHORK 8kqlf750CUwH7uYMusp5sBH7lq5gO9ZA4odrv1Z4raUikasC3DHk/Xk4+IXJQ6An GbHnHuXIOGeGU3oc3Rb7eLMi36qp4HUlVsrWFEArL4T+dAgtFrT+pg3teuea9ft0 EGeYrf0F2MCNWZXBVGFiHbEJTM+8AM26YBJsImsthtSGgwv93+Z8zIZxPEPAxQHp K5D8SYP6gjujuIM9qQETo8u5Eq/L++koKSGov2GsmSvo -----END CERTIFICATE-----Generated at Fri Nov 28 08:29:02 2025 by rpki-client