This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/fvcHgV19URw_qXsKSI3SPqXWue0.roa File: fvcHgV19URw_qXsKSI3SPqXWue0.roa (raw, json) Hash identifier: 4axbRO9N7p3dJC6tfvYxi3mzAA/0mcYJDqph0BXh++Y= Subject key identifier: 7E:F7:07:81:5D:7D:51:1C:3F:A9:7B:0A:48:8D:D2:3E:A5:D6:B9:ED Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Certificate serial: 019A82B49BD1B56BD1936C93228B746113DF Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/fvcHgV19URw_qXsKSI3SPqXWue0.roa Signing time: Fri 14 Nov 2025 14:11:05 +0000 ROA not before: Fri 14 Nov 2025 14:11:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25441 IP address blocks: 62.231.32.0/19 maxlen: 19 78.135.128.0/17 maxlen: 17 78.135.208.0/21 maxlen: 21 78.135.216.0/21 maxlen: 21 78.135.224.0/21 maxlen: 21 78.135.232.0/21 maxlen: 21 78.135.240.0/21 maxlen: 21 78.135.248.0/21 maxlen: 21 83.141.64.0/18 maxlen: 18 85.134.128.0/17 maxlen: 17 85.134.128.0/21 maxlen: 21 85.134.136.0/21 maxlen: 21 85.134.144.0/21 maxlen: 21 85.134.152.0/21 maxlen: 21 85.134.160.0/21 maxlen: 21 85.134.168.0/21 maxlen: 21 85.134.176.0/21 maxlen: 21 85.134.184.0/21 maxlen: 21 85.134.192.0/21 maxlen: 21 85.134.200.0/21 maxlen: 21 85.134.208.0/21 maxlen: 21 85.134.216.0/21 maxlen: 21 85.134.224.0/21 maxlen: 21 85.134.232.0/21 maxlen: 21 85.134.240.0/21 maxlen: 21 85.134.248.0/21 maxlen: 21 87.192.0.0/18 maxlen: 18 87.192.64.0/20 maxlen: 20 87.192.82.0/23 maxlen: 23 87.192.84.0/22 maxlen: 22 87.192.192.0/20 maxlen: 20 87.192.216.0/22 maxlen: 22 87.192.222.0/23 maxlen: 23 87.232.0.0/19 maxlen: 19 87.232.192.0/24 maxlen: 24 87.232.194.0/23 maxlen: 23 87.232.196.0/22 maxlen: 22 87.232.225.0/24 maxlen: 24 87.232.228.0/22 maxlen: 22 89.124.0.0/24 maxlen: 24 89.124.128.0/18 maxlen: 18 89.124.192.0/19 maxlen: 19 89.124.224.0/20 maxlen: 20 89.124.245.0/24 maxlen: 24 89.126.0.0/22 maxlen: 22 89.126.4.0/22 maxlen: 22 89.126.8.0/22 maxlen: 22 89.126.12.0/22 maxlen: 22 89.126.16.0/22 maxlen: 22 89.126.20.0/22 maxlen: 22 89.126.24.0/22 maxlen: 22 89.126.28.0/22 maxlen: 22 89.127.0.0/17 maxlen: 17 89.127.128.0/18 maxlen: 18 89.127.192.0/19 maxlen: 19 89.127.240.0/21 maxlen: 21 89.127.248.0/22 maxlen: 22 89.127.254.0/23 maxlen: 23 185.247.52.0/22 maxlen: 22 2001:4d68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:b4:9b:d1:b5:6b:d1:93:6c:93:22:8b:74:61:13:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Validity Not Before: Nov 14 14:11:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ef707815d7d511c3fa97b0a488dd23ea5d6b9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0c:5a:66:39:8a:26:31:dc:aa:42:0d:c9:b7: b8:b1:1f:53:82:2c:58:f4:df:82:02:47:b6:4b:cc: c9:0f:31:35:be:a6:9d:18:df:53:0d:6d:7d:87:40: a7:ce:c8:ee:85:50:fb:f7:95:22:00:8f:98:26:c6: 33:00:90:b4:55:17:5a:2b:39:40:f6:f2:62:94:c1: 80:59:62:6b:3d:00:0e:0d:b1:3e:5d:6f:de:d0:37: d4:51:a3:78:79:ad:1a:c8:bd:a3:18:2f:6e:e8:80: 7a:8e:0c:98:fd:ad:df:db:4a:2c:bd:03:eb:55:56: 20:16:76:6b:d9:25:5d:d3:a9:a4:a1:7a:e0:c8:69: b7:b5:15:ec:89:a5:cf:af:93:0b:05:27:c0:4a:92: 37:6e:fa:3f:e0:6f:e2:d6:35:c2:9a:62:0f:97:df: 26:0a:f5:f0:71:64:4c:4f:c7:d4:40:8f:1a:87:8d: 11:a0:0a:35:86:da:fa:28:7f:e7:ea:2d:06:ae:e1: d5:da:44:52:a4:5f:d2:6e:4c:7e:21:a9:12:a9:bf: fe:52:ab:15:a7:49:c3:92:6e:a6:49:f6:81:78:f4: 23:70:9b:0d:0a:2b:93:61:89:9c:f1:2c:5a:67:52: 65:dc:8e:b0:6d:d4:dd:87:a2:70:0e:18:8e:10:f5: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F7:07:81:5D:7D:51:1C:3F:A9:7B:0A:48:8D:D2:3E:A5:D6:B9:ED X509v3 Authority Key Identifier: keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/fvcHgV19URw_qXsKSI3SPqXWue0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.231.32.0/19 78.135.128.0/17 83.141.64.0/18 85.134.128.0/17 87.192.0.0-87.192.79.255 87.192.82.0-87.192.87.255 87.192.192.0/20 87.192.216.0/22 87.192.222.0/23 87.232.0.0/19 87.232.192.0/24 87.232.194.0-87.232.199.255 87.232.225.0/24 87.232.228.0/22 89.124.0.0/24 89.124.128.0-89.124.239.255 89.124.245.0/24 89.126.0.0/19 89.127.0.0-89.127.223.255 89.127.240.0-89.127.251.255 89.127.254.0/23 185.247.52.0/22 IPv6: 2001:4d68::/32 Signature Algorithm: sha256WithRSAEncryption 7b:ef:c5:27:14:89:f4:36:a5:77:3a:d7:a8:c2:6e:78:58:d5: 09:2a:d0:91:73:58:fa:c4:e0:ca:f2:6c:4b:12:a1:ff:f5:7a: ee:ec:ac:38:c7:7b:04:f7:69:8a:dd:b7:b7:9d:5e:1d:f1:93: 4e:50:1d:87:a2:f2:50:da:70:d6:13:fd:4f:7f:20:31:fc:66: d1:88:53:09:67:82:4d:ce:22:b0:ea:a0:a4:77:0e:b1:b7:9d: a7:80:ea:2a:46:e7:85:44:3e:14:38:ad:46:67:bb:cb:23:26: 87:9b:da:31:36:73:3e:14:4f:60:d6:12:0c:8e:03:98:2c:77: d6:33:ea:2b:55:83:e6:b0:3d:36:79:31:54:7b:a4:64:cd:e9: 0e:06:f2:f8:ec:7c:c2:98:aa:c4:a8:eb:28:a9:82:58:0b:49: 35:8c:e0:eb:6a:cb:e0:47:d8:a1:a4:e8:49:71:c3:b3:92:e7: 63:8b:be:cc:01:d8:8a:73:fa:a0:c0:69:2a:7a:b0:9c:d7:15: 04:9a:e9:cc:87:bc:2c:0e:fe:82:51:c0:3b:b1:be:31:82:fb: 43:be:9d:59:0a:76:66:ac:b4:48:22:8a:77:e9:d4:56:4b:59: cc:07:ac:d0:89:df:89:d2:f0:1c:62:85:15:0d:51:30:ff:69: 10:78:39:1d -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZqCtJvRtWvRk2yTIot0YRPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2 YmU2NDIwHhcNMjUxMTE0MTQxMTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWY3MDc4MTVkN2Q1MTFjM2ZhOTdiMGE0ODhkZDIzZWE1ZDZiOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QxaZjmKJjHcqkINybe4sR9TgixY 9N+CAke2S8zJDzE1vqadGN9TDW19h0CnzsjuhVD795UiAI+YJsYzAJC0VRdaKzlA 9vJilMGAWWJrPQAODbE+XW/e0DfUUaN4ea0ayL2jGC9u6IB6jgyY/a3f20osvQPr VVYgFnZr2SVd06mkoXrgyGm3tRXsiaXPr5MLBSfASpI3bvo/4G/i1jXCmmIPl98m CvXwcWRMT8fUQI8ah40RoAo1htr6KH/n6i0GruHV2kRSpF/Sbkx+IakSqb/+UqsV p0nDkm6mSfaBePQjcJsNCiuTYYmc8SxaZ1Jl3I6wbdTdh6JwDhiOEPWp8QIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFH73B4FdfVEcP6l7CkiN0j6l1rntMB8GA1UdIwQY MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt NTc4OWRlNDI0YTQyLzEvZnZjSGdWMTlVUndfcVhzS1NJM1NQcVhXdWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCBuQQCAAEwgbIDBAU+ 5yADBAdOh4ADBAZTjUADBAdVhoAwCwMDBlfAAwQEV8BAMAwDBAFXwFIDBANXwFAD BARXwMADBAJXwNgDBAFXwN4DBAVX6AADBABX6MAwDAMEAVfowgMEA1fowAMEAFfo 4QMEAlfo5AMEAFl8ADAMAwQHWXyAAwQEWXzgAwQAWXz1AwQFWX4AMAsDAwBZfwME BVl/wDAMAwQEWX/wAwQCWX/4AwQBWX/+AwQCufc0MA0EAgACMAcDBQAgAU1oMA0G CSqGSIb3DQEBCwUAA4IBAQB778UnFIn0NqV3Oteowm54WNUJKtCRc1j6xODK8mxL EqH/9Xru7Kw4x3sE92mK3be3nV4d8ZNOUB2HovJQ2nDWE/1PfyAx/GbRiFMJZ4JN ziKw6qCkdw6xt52ngOoqRueFRD4UOK1GZ7vLIyaHm9oxNnM+FE9g1hIMjgOYLHfW M+orVYPmsD02eTFUe6RkzekOBvL47HzCmKrEqOsoqYJYC0k1jODrasvgR9ihpOhJ ccOzkudji77MAdiKc/qgwGkqerCc1xUEmunMh7wsDv6CUcA7sb4xgvtDvp1ZCnZm rLRIIop36dRWS1nMB6zQid+J0vAcYoUVDVEw/2kQeDkd -----END CERTIFICATE-----Generated at Thu Dec 4 12:16:21 2025 by rpki-client