This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_vozDUINXrvOaVke4CaqDaFVmyM.roa File: _vozDUINXrvOaVke4CaqDaFVmyM.roa (raw, json) Hash identifier: 8l/PBAaTGZ+qK/mUPfhebbJ/vR8KFQoU74X97Yxz6Io= Subject key identifier: FE:FA:33:0D:42:0D:5E:BB:CE:69:59:1E:E0:26:AA:0D:A1:55:9B:23 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A907EA06F99977ECDC701C4D3626B5091 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_vozDUINXrvOaVke4CaqDaFVmyM.roa Signing time: Mon 17 Nov 2025 06:26:48 +0000 ROA not before: Mon 17 Nov 2025 06:26:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42831 IP address blocks: 37.202.193.0/24 maxlen: 24 37.202.213.0/24 maxlen: 24 151.240.158.0/24 maxlen: 24 151.242.40.0/24 maxlen: 24 151.242.99.0/24 maxlen: 24 151.243.175.0/24 maxlen: 24 151.244.164.0/24 maxlen: 24 151.244.249.0/24 maxlen: 24 151.245.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:7e:a0:6f:99:97:7e:cd:c7:01:c4:d3:62:6b:50:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 17 06:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fefa330d420d5ebbce69591ee026aa0da1559b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:fe:d6:47:73:a0:ef:d6:70:72:50:29:f0: b3:ef:8f:ba:55:2e:08:87:5f:4a:d0:69:2c:71:47: be:9a:83:86:6e:0c:48:f1:8a:56:b2:a8:fc:64:ed: f1:c5:7e:8f:99:49:6a:24:a1:a3:a2:68:36:8c:4f: 17:93:1c:a7:9b:df:38:81:f9:5a:a8:9f:57:0b:2a: 93:90:78:22:79:5a:16:e8:c8:26:16:8c:f0:41:ba: 8e:e9:0f:e7:04:4d:c5:04:95:d9:68:fe:b1:03:6f: 3b:4f:c3:1c:3b:f2:5f:ea:63:57:6b:8b:95:d9:51: 70:cd:63:48:a4:f7:54:14:eb:ba:84:99:07:24:2f: cf:69:0a:5c:a9:ce:0e:48:03:8a:22:c1:6f:f0:a6: 64:9f:69:b8:51:70:f0:54:fb:e2:65:12:f3:7d:70: 44:4f:8c:33:a0:05:76:40:7f:51:e4:9d:1f:0d:1c: 09:53:48:db:f3:01:4d:dd:32:cd:04:eb:7c:e6:98: ce:10:d3:9c:20:37:e4:b9:01:de:3a:a6:2e:8a:91: 90:ba:a6:77:64:2a:6c:dd:e6:ca:a7:46:3f:90:1b: 22:9a:1a:ce:32:47:b3:8a:f0:5d:28:b2:8b:32:7a: 3f:44:20:cd:e1:dd:7a:53:1b:5e:22:af:c3:78:dc: 66:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FA:33:0D:42:0D:5E:BB:CE:69:59:1E:E0:26:AA:0D:A1:55:9B:23 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_vozDUINXrvOaVke4CaqDaFVmyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.193.0/24 37.202.213.0/24 151.240.158.0/24 151.242.40.0/24 151.242.99.0/24 151.243.175.0/24 151.244.164.0/24 151.244.249.0/24 151.245.26.0/24 Signature Algorithm: sha256WithRSAEncryption 87:8e:ab:5e:9e:d5:82:7f:83:7b:7e:4c:37:c7:48:a2:f5:d2: 3b:df:cb:98:f2:45:6b:18:66:8d:69:ad:12:13:3f:08:19:42: 3b:25:35:dc:3d:06:2c:02:8f:d0:30:1e:ad:7f:fa:8d:05:c6: ca:82:4f:45:77:1a:ef:7a:3b:fa:69:61:63:79:65:2b:e5:6c: 10:18:dc:81:aa:98:b7:9b:55:1f:d0:2a:64:cd:3f:5b:08:bf: ed:00:5e:47:d3:55:a2:70:b1:04:65:5b:d9:fa:ba:c4:7e:e0: 7a:89:71:ba:20:f1:d6:d6:0b:a6:79:2a:68:12:34:ed:4a:cd: c3:5c:22:c0:41:bb:22:99:a9:f6:9c:37:a2:ab:2c:15:94:b7: 7a:27:f3:0d:cc:cb:0a:ae:69:80:b3:e4:1c:61:84:8a:c0:31: 61:f4:58:b2:21:e7:2f:d4:ca:7a:a8:45:91:44:db:af:7f:e6: 05:d3:06:af:02:08:09:1f:f0:29:97:a8:07:70:40:de:12:1b: 50:18:5e:a5:a7:d2:c4:0a:f6:a9:24:34:11:27:42:2c:8d:19: 61:b2:df:d7:04:f3:9a:f3:56:75:06:88:c3:84:19:d2:11:27: 12:93:01:88:54:83:96:4b:6d:19:ff:d0:9a:6e:70:e8:27:0f: 98:76:76:57 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZqQfqBvmZd+zccBxNNia1CRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE3MDYyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWZhMzMwZDQyMGQ1ZWJiY2U2OTU5MWVlMDI2YWEwZGExNTU5YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dn+1kdzoO/WcHJQKfCz74+6VS4I h19K0GkscUe+moOGbgxI8YpWsqj8ZO3xxX6PmUlqJKGjomg2jE8Xkxynm984gfla qJ9XCyqTkHgieVoW6MgmFozwQbqO6Q/nBE3FBJXZaP6xA287T8McO/Jf6mNXa4uV 2VFwzWNIpPdUFOu6hJkHJC/PaQpcqc4OSAOKIsFv8KZkn2m4UXDwVPviZRLzfXBE T4wzoAV2QH9R5J0fDRwJU0jb8wFN3TLNBOt85pjOENOcIDfkuQHeOqYuipGQuqZ3 ZCps3ebKp0Y/kBsimhrOMkezivBdKLKLMno/RCDN4d16UxteIq/DeNxmOwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFP76Mw1CDV67zmlZHuAmqg2hVZsjMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvX3ZvekRVSU5YcnZPYVZrZTRDYXFEYUZWbXlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAJcrBAwQA JcrVAwQAl/CeAwQAl/IoAwQAl/JjAwQAl/OvAwQAl/SkAwQAl/T5AwQAl/UaMA0G CSqGSIb3DQEBCwUAA4IBAQCHjqtentWCf4N7fkw3x0ii9dI738uY8kVrGGaNaa0S Ez8IGUI7JTXcPQYsAo/QMB6tf/qNBcbKgk9Fdxrvejv6aWFjeWUr5WwQGNyBqpi3 m1Uf0CpkzT9bCL/tAF5H01WicLEEZVvZ+rrEfuB6iXG6IPHW1gumeSpoEjTtSs3D XCLAQbsiman2nDeiqywVlLd6J/MNzMsKrmmAs+QcYYSKwDFh9FiyIecv1Mp6qEWR RNuvf+YF0wavAggJH/Apl6gHcEDeEhtQGF6lp9LECvapJDQRJ0IsjRlhst/XBPOa 81Z1BojDhBnSEScSkwGIVIOWS20Z/9CabnDoJw+YdnZX -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:37 2025 by rpki-client