This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vV8jeJHTrweSuxWcjvx4-T2pQGw.roa File: vV8jeJHTrweSuxWcjvx4-T2pQGw.roa (raw, json) Hash identifier: U2ooj3VDbRcurrAC4dG9tMVM2bVk3w29if3egslFpS0= Subject key identifier: BD:5F:23:78:91:D3:AF:07:92:BB:15:9C:8E:FC:78:F9:3D:A9:40:6C Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Certificate serial: 019B0DC7166D7AD1C4768EDDBAE21F646BB9 Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vV8jeJHTrweSuxWcjvx4-T2pQGw.roa Signing time: Thu 11 Dec 2025 14:18:29 +0000 ROA not before: Thu 11 Dec 2025 14:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42346 IP address blocks: 185.253.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:c7:16:6d:7a:d1:c4:76:8e:dd:ba:e2:1f:64:6b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Validity Not Before: Dec 11 14:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd5f237891d3af0792bb159c8efc78f93da9406c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:29:f0:a0:e9:07:2c:f8:0f:69:51:27:70: fa:07:ec:57:fd:af:b4:21:82:36:2c:77:c1:e7:6f: 72:99:69:33:d1:48:c2:a5:44:f7:25:74:57:9f:9b: d3:58:dc:c2:25:62:16:a7:3e:69:8e:af:91:04:a0: 45:ce:61:ec:2b:5f:4a:5c:84:24:94:94:7d:da:e9: 10:87:ce:fa:12:47:4e:4f:72:6a:79:00:77:cf:e0: 60:16:5d:61:5a:c4:c5:0a:a5:f0:ba:b5:7e:66:82: 6f:e6:76:d5:0e:3e:8c:7c:8b:4e:48:64:60:54:9c: 74:46:b4:cc:53:d4:0b:86:1d:50:ac:c6:8b:dd:97: d2:16:e9:6f:63:9a:53:75:c1:a1:f7:b2:4d:d7:4a: 79:4a:f5:47:a5:a9:2a:37:18:7c:35:bf:30:36:6c: de:8e:5c:c8:0f:be:95:c9:c6:a9:cd:00:06:ac:e5: b3:d3:fb:c4:05:d5:e6:e7:3f:72:1f:77:44:1d:7c: c2:3b:5f:d1:a2:b4:6b:72:7e:f7:b6:e5:e7:63:e9: 91:b3:11:c3:81:44:2e:36:37:0c:c4:a1:65:e4:bd: 33:32:6e:cb:5e:67:7d:95:7c:2c:88:79:0d:d6:f5: 5b:6d:1f:83:88:1d:a7:90:84:56:7f:72:38:2a:57: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5F:23:78:91:D3:AF:07:92:BB:15:9C:8E:FC:78:F9:3D:A9:40:6C X509v3 Authority Key Identifier: keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vV8jeJHTrweSuxWcjvx4-T2pQGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.195.0/24 Signature Algorithm: sha256WithRSAEncryption 90:80:ba:40:00:f2:4c:12:4f:25:a0:64:0a:5f:82:29:06:0a: ab:de:28:71:ad:88:a8:9d:13:8f:07:59:64:ee:d3:e6:56:c9: c5:8c:57:23:68:19:43:98:6a:f8:04:9e:f8:d2:c9:28:a3:0e: 17:71:c7:78:d7:21:63:26:fb:7b:22:20:fd:04:aa:32:94:30: 27:f4:27:b0:78:13:7a:2d:b6:73:97:e1:b2:9c:07:4d:95:63: 07:6c:2d:e0:a4:0c:36:b5:5d:7a:60:84:6a:74:5a:7c:27:2d: 31:84:89:33:5a:1a:6a:bb:c1:ac:83:91:f8:cb:f8:9f:78:83: dc:1c:07:e5:a4:96:56:23:43:b5:02:fe:8e:7e:7b:76:0f:08: df:07:a1:79:a4:f9:e0:f7:cb:b4:3f:36:6b:c1:fa:e4:b9:bb: a5:67:83:fc:e4:66:27:fa:25:c5:b2:95:45:d7:a9:4d:72:dc: 61:73:da:e0:fd:6d:7b:80:21:64:26:73:80:21:ff:f4:cb:8c: 74:da:c2:0f:80:aa:aa:96:bc:a8:8d:52:0e:d3:80:b6:8f:78: 11:5c:32:93:f3:34:44:a7:c1:73:c8:c3:5a:3d:28:30:db:37: ad:5c:5b:c8:c3:f9:d4:81:9b:36:e5:f4:8d:09:99:3d:82:aa: fd:20:36:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsNxxZtetHEdo7duuIfZGu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjY2NTA1ODJjMDBkYmIyNTkxY2VkYzI5OGMwY2QzYzU5 NjhhYjAwHhcNMjUxMjExMTQxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDVmMjM3ODkxZDNhZjA3OTJiYjE1OWM4ZWZjNzhmOTNkYTk0MDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHMp8KDpByz4D2lRJ3D6B+xX/a+0 IYI2LHfB529ymWkz0UjCpUT3JXRXn5vTWNzCJWIWpz5pjq+RBKBFzmHsK19KXIQk lJR92ukQh876EkdOT3JqeQB3z+BgFl1hWsTFCqXwurV+ZoJv5nbVDj6MfItOSGRg VJx0RrTMU9QLhh1QrMaL3ZfSFulvY5pTdcGh97JN10p5SvVHpakqNxh8Nb8wNmze jlzID76VycapzQAGrOWz0/vEBdXm5z9yH3dEHXzCO1/RorRrcn73tuXnY+mRsxHD gUQuNjcMxKFl5L0zMm7LXmd9lXwsiHkN1vVbbR+DiB2nkIRWf3I4KlcgnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL1fI3iR068HkrsVnI78ePk9qUBsMB8GA1UdIwQY MBaAFL72ZQWCwA27JZHO3CmMDNPFloqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYt ZjlhMzNmZjAxMWNiLzEvdlY4amVKSFRyd2VTdXhXY2p2eDQtVDJwUUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYtZjlhMzNmZjAxMWNi LzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf3DMA0G CSqGSIb3DQEBCwUAA4IBAQCQgLpAAPJMEk8loGQKX4IpBgqr3ihxrYionROPB1lk 7tPmVsnFjFcjaBlDmGr4BJ740skoow4Xccd41yFjJvt7IiD9BKoylDAn9CeweBN6 LbZzl+GynAdNlWMHbC3gpAw2tV16YIRqdFp8Jy0xhIkzWhpqu8Gsg5H4y/ifeIPc HAflpJZWI0O1Av6Ofnt2DwjfB6F5pPng98u0PzZrwfrkubulZ4P85GYn+iXFspVF 16lNctxhc9rg/W17gCFkJnOAIf/0y4x02sIPgKqqlryojVIO04C2j3gRXDKT8zRE p8FzyMNaPSgw2zetXFvIw/nUgZs25fSNCZk9gqr9IDZa -----END CERTIFICATE-----Generated at Thu Dec 11 22:32:58 2025 by rpki-client