This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/1-kvVTAhrEOyteDMbQ1PRTmS7VII.roa File: 1-kvVTAhrEOyteDMbQ1PRTmS7VII.roa (raw, json) Hash identifier: 52wBCJcICQSnfXTj3sxR2Dw1bHQobSFBJQdmwW3ItOc= Subject key identifier: FA:4B:D5:4C:08:6B:10:EC:AD:78:33:1B:43:53:D1:4E:64:BB:54:82 Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5 Certificate serial: 019A966D50B00E5736056ED8B02473AB2627 Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/1-kvVTAhrEOyteDMbQ1PRTmS7VII.roa Signing time: Tue 18 Nov 2025 10:05:37 +0000 ROA not before: Tue 18 Nov 2025 10:05:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 83.143.180.0/22 maxlen: 22 185.1.230.0/25 maxlen: 25 185.1.230.128/25 maxlen: 25 194.153.157.0/26 maxlen: 26 194.153.157.64/26 maxlen: 26 195.69.116.0/24 maxlen: 24 195.69.117.0/24 maxlen: 24 195.69.118.0/24 maxlen: 24 195.69.119.0/24 maxlen: 24 195.245.240.0/24 maxlen: 24 212.237.192.0/24 maxlen: 24 212.237.193.0/24 maxlen: 24 2001:7f8:d::/48 maxlen: 64 2001:7f8:122::/49 maxlen: 49 2001:7f8:122:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:6d:50:b0:0e:57:36:05:6e:d8:b0:24:73:ab:26:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5 Validity Not Before: Nov 18 10:05:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa4bd54c086b10ecad78331b4353d14e64bb5482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:33:61:7a:d7:a5:7d:b3:e6:f0:d8:0d:f7: 51:15:3f:5f:27:92:95:5f:4a:e6:72:f5:e3:f7:f6: 71:10:31:d1:18:3b:a3:2e:70:70:f0:61:ca:ce:c1: 5b:01:14:3e:8f:16:09:35:a8:dd:ed:92:1b:d5:8b: b0:20:f4:80:1d:36:b5:56:5a:fe:77:bf:45:e1:b5: 50:97:87:93:f8:3e:6d:6b:86:c9:2d:80:0d:9d:6e: 4d:9f:fe:56:54:95:c1:39:80:1f:a2:17:87:8e:6d: 90:d7:b6:83:48:20:a2:22:79:2b:b1:44:6c:6d:7d: 10:b3:a0:8b:60:46:a3:b9:8b:e0:4d:ab:3a:41:9c: 6c:80:58:66:11:1d:25:4f:2d:ca:ca:8c:a7:c7:28: d7:7b:52:8c:1a:23:cb:f2:b4:6d:66:84:77:6e:4e: 88:85:07:28:50:1f:c9:59:15:ac:4b:7a:88:8a:2b: 89:28:85:95:47:d9:a9:73:25:77:79:62:2e:2e:cd: 95:1b:01:b0:6a:d6:15:02:a4:dd:97:d9:66:cf:8d: 53:24:51:bd:7a:53:7e:88:e6:db:6a:9a:de:af:a4: 96:d9:1b:9e:65:79:02:41:49:a5:8b:4d:b0:02:3b: 4a:40:18:fb:f7:00:4e:ce:64:bb:8e:60:f2:ff:bf: 42:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4B:D5:4C:08:6B:10:EC:AD:78:33:1B:43:53:D1:4E:64:BB:54:82 X509v3 Authority Key Identifier: keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/1-kvVTAhrEOyteDMbQ1PRTmS7VII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.180.0/22 185.1.230.0/24 194.153.157.0/25 195.69.116.0/22 195.245.240.0/24 212.237.192.0/23 IPv6: 2001:7f8:d::/48 2001:7f8:122::/48 Signature Algorithm: sha256WithRSAEncryption 04:df:52:df:8d:0a:3b:78:95:39:2b:2d:f4:67:7c:a0:13:e1: 64:d0:a1:5a:9c:42:f6:90:76:38:61:74:c9:69:d3:f2:19:50: f8:65:be:03:bb:d2:6f:42:cf:cf:9d:27:ea:23:53:61:21:4e: ee:a4:6e:63:54:38:45:c5:05:6d:35:d4:e1:64:cf:72:2e:e3: 01:9e:dc:62:9c:ea:67:90:c6:31:d7:fd:40:f9:78:5c:46:63: e9:43:7c:59:9c:25:d5:a2:38:1d:a9:68:21:b4:04:d2:0a:d7: 4c:25:6c:2c:f2:9f:63:9c:98:21:5e:d7:d9:dd:b7:27:50:fe: 29:15:f5:82:aa:27:92:2a:12:c6:86:d3:55:ef:05:39:ea:44: 33:b5:3c:2e:d7:61:7a:eb:d1:67:c9:d1:e3:95:51:77:77:76: a9:1f:8c:7e:31:b7:f5:09:f9:0b:95:c4:56:ed:1e:a0:30:9a: ea:2e:83:48:eb:79:ab:d0:a6:2b:7a:33:c7:48:85:67:a7:49: 4e:b3:6b:9c:3e:93:ed:e4:36:cb:7e:26:d3:66:b0:9f:30:56: 57:e5:75:c7:73:68:80:b6:37:72:45:c1:d8:55:cc:12:c6:f4: 73:bc:05:0c:9d:31:e0:9c:01:a6:3d:4c:07:13:9a:43:2c:85: 1e:bf:ef:82 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZqWbVCwDlc2BW7YsCRzqyYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0 MzBkYTUwHhcNMjUxMTE4MTAwNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTRiZDU0YzA4NmIxMGVjYWQ3ODMzMWI0MzUzZDE0ZTY0YmI1NDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LMzYXrXpX2z5vDYDfdRFT9fJ5KV X0rmcvXj9/ZxEDHRGDujLnBw8GHKzsFbARQ+jxYJNajd7ZIb1YuwIPSAHTa1Vlr+ d79F4bVQl4eT+D5ta4bJLYANnW5Nn/5WVJXBOYAfoheHjm2Q17aDSCCiInkrsURs bX0Qs6CLYEajuYvgTas6QZxsgFhmER0lTy3KyoynxyjXe1KMGiPL8rRtZoR3bk6I hQcoUB/JWRWsS3qIiiuJKIWVR9mpcyV3eWIuLs2VGwGwatYVAqTdl9lmz41TJFG9 elN+iObbaprer6SW2RueZXkCQUmli02wAjtKQBj79wBOzmS7jmDy/79C4QIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFPpL1UwIaxDsrXgzG0NT0U5ku1SCMB8GA1UdIwQY MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt NDNmNjRiY2VhOTlkLzEvMS1rdlZUQWhyRU95dGVETWJRMVBSVG1TN1ZJSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWEvYTcyODkxLWRlMmYtNDE1Ni1hMDExLTQzZjY0YmNlYTk5 ZC8xL0M2eUNnRWNBclRaVGlfaHZOTUJ6NlhGRERhVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBYBggrBgEFBQcBBwEB/wRJMEcwKwQCAAEwJQMEAlOPtAME ALkB5gMFB8KZnQADBALDRXQDBADD9fADBAHU7cAwGAQCAAIwEgMHACABB/gADQMH ACABB/gBIjANBgkqhkiG9w0BAQsFAAOCAQEABN9S340KO3iVOSst9Gd8oBPhZNCh WpxC9pB2OGF0yWnT8hlQ+GW+A7vSb0LPz50n6iNTYSFO7qRuY1Q4RcUFbTXU4WTP ci7jAZ7cYpzqZ5DGMdf9QPl4XEZj6UN8WZwl1aI4HaloIbQE0grXTCVsLPKfY5yY IV7X2d23J1D+KRX1gqonkioSxobTVe8FOepEM7U8LtdheuvRZ8nR45VRd3d2qR+M fjG39Qn5C5XEVu0eoDCa6i6DSOt5q9CmK3ozx0iFZ6dJTrNrnD6T7eQ2y34m02aw nzBWV+V1x3NogLY3ckXB2FXMEsb0c7wFDJ0x4JwBpj1MBxOaQyyFHr/vgg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:52 2025 by rpki-client