This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rvlHC3OHyhbTLbA-OjhydjU1T1E.roa File: rvlHC3OHyhbTLbA-OjhydjU1T1E.roa (raw, json) Hash identifier: HWLFVnUNRTDNH4xRcs+kYzdMj4FOv73Z0CqLAhUdXrk= Subject key identifier: AE:F9:47:0B:73:87:CA:16:D3:2D:B0:3E:3A:38:72:76:35:35:4F:51 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019AFA63195F66B0EF062051B6847DF21BC4 Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rvlHC3OHyhbTLbA-OjhydjU1T1E.roa Signing time: Sun 07 Dec 2025 19:56:29 +0000 ROA not before: Sun 07 Dec 2025 19:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207483 IP address blocks: 178.211.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:63:19:5f:66:b0:ef:06:20:51:b6:84:7d:f2:1b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Dec 7 19:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aef9470b7387ca16d32db03e3a38727635354f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:09:05:1b:0e:8f:4e:36:2d:ca:b3:54:3b:6b: 37:a7:3d:1f:2a:1a:8c:42:d1:ca:68:f9:ea:e8:f0: 42:02:32:46:5b:bd:98:98:a3:a7:8e:9b:5c:ee:5e: 2d:b6:3b:b7:d8:6c:69:24:a5:8c:f8:35:0d:d1:4f: 95:ee:f4:27:25:15:eb:58:04:4e:46:b7:a9:f5:05: 71:7d:7e:f7:fb:91:36:4d:c2:33:fe:be:94:b5:d8: 59:ea:14:14:65:ea:e8:c7:da:7b:1f:b2:3d:dc:85: e1:e7:4c:85:5c:ed:2c:3f:a9:e6:d4:f0:97:d2:99: 28:ba:a4:da:b8:09:d6:6f:cb:c2:e2:72:c1:29:0e: 44:1e:4e:30:c3:1d:d1:34:c8:6d:af:be:35:0a:b0: 31:72:ce:bb:8a:45:40:53:fe:b7:ec:a6:84:94:19: 84:38:d6:60:ee:d4:71:7e:71:7a:dd:d0:d7:68:07: a4:ff:8f:9f:5c:22:b2:ad:a1:e3:34:69:3c:b7:ac: 3a:84:d3:f9:83:05:b9:20:20:d2:62:c1:8d:64:23: 9d:b4:fc:33:f7:af:bb:d0:65:ab:59:f8:7b:ef:35: 6c:7d:4d:47:4d:b4:e7:68:82:51:91:8c:3b:89:a6: c4:2c:83:5b:89:31:f3:7f:78:c2:43:63:fb:0e:ef: 0c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F9:47:0B:73:87:CA:16:D3:2D:B0:3E:3A:38:72:76:35:35:4F:51 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/rvlHC3OHyhbTLbA-OjhydjU1T1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.159.0/24 Signature Algorithm: sha256WithRSAEncryption a2:37:19:ba:95:64:56:50:7f:46:eb:8c:2d:7b:75:88:3c:a9: 97:3a:09:d2:60:c7:f4:f1:09:5b:ae:2c:86:5f:e4:a2:1a:91: 71:9c:84:4f:00:cb:85:92:3b:7b:aa:9a:84:d5:10:a9:48:45: 92:4d:24:59:48:fb:75:53:82:2d:3e:99:88:22:92:c9:ec:3c: a1:41:d0:6c:e3:a3:6f:58:f6:75:6b:c3:8b:3c:34:05:85:c0: 55:c5:7c:9c:32:80:64:15:ee:07:4d:2c:b1:f7:a0:d8:3f:35: c9:00:ed:f7:08:c6:d9:3e:cb:f7:95:88:ee:74:f2:c0:86:58: 86:f9:83:8d:db:7d:02:c7:f2:99:0d:2b:6c:d7:a6:2b:a9:1a: d9:79:16:d4:84:70:2e:33:95:ab:90:c5:64:46:4c:3b:f9:c4: 31:5a:80:4f:82:e6:b2:03:16:ed:f9:4f:94:e9:8f:bd:e4:0a: d6:2f:0f:e7:6e:e7:47:95:17:31:a8:cf:38:2e:58:8d:63:50: 79:5e:0e:3e:f5:53:8d:59:ba:e9:bf:ab:f2:2e:76:b7:99:56: f1:20:92:be:79:d3:f1:96:da:92:6b:45:58:e5:95:22:06:7c: 76:b1:43:e4:43:a3:52:74:60:6f:b6:78:27:f7:74:8f:9d:bf: 07:99:d6:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr6YxlfZrDvBiBRtoR98hvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjUxMjA3MTk1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWY5NDcwYjczODdjYTE2ZDMyZGIwM2UzYTM4NzI3NjM1MzU0ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgkFGw6PTjYtyrNUO2s3pz0fKhqM QtHKaPnq6PBCAjJGW72YmKOnjptc7l4ttju32GxpJKWM+DUN0U+V7vQnJRXrWARO Rrep9QVxfX73+5E2TcIz/r6UtdhZ6hQUZerox9p7H7I93IXh50yFXO0sP6nm1PCX 0pkouqTauAnWb8vC4nLBKQ5EHk4wwx3RNMhtr741CrAxcs67ikVAU/637KaElBmE ONZg7tRxfnF63dDXaAek/4+fXCKyraHjNGk8t6w6hNP5gwW5ICDSYsGNZCOdtPwz 96+70GWrWfh77zVsfU1HTbTnaIJRkYw7iabELINbiTHzf3jCQ2P7Du8MJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK75Rwtzh8oW0y2wPjo4cnY1NU9RMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvcnZsSEMzT0h5aGJUTGJBLU9qaHlkalUxVDFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstOfMA0G CSqGSIb3DQEBCwUAA4IBAQCiNxm6lWRWUH9G64wte3WIPKmXOgnSYMf08QlbriyG X+SiGpFxnIRPAMuFkjt7qpqE1RCpSEWSTSRZSPt1U4ItPpmIIpLJ7DyhQdBs46Nv WPZ1a8OLPDQFhcBVxXycMoBkFe4HTSyx96DYPzXJAO33CMbZPsv3lYjudPLAhliG +YON230Cx/KZDSts16YrqRrZeRbUhHAuM5WrkMVkRkw7+cQxWoBPguayAxbt+U+U 6Y+95ArWLw/nbudHlRcxqM84LliNY1B5Xg4+9VONWbrpv6vyLna3mVbxIJK+edPx ltqSa0VY5ZUiBnx2sUPkQ6NSdGBvtngn93SPnb8HmdaK -----END CERTIFICATE-----Generated at Mon Dec 15 23:43:26 2025 by rpki-client