This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/SAvCkF1UmWMdtha5m0lVpEVBFdI.roa File: SAvCkF1UmWMdtha5m0lVpEVBFdI.roa (raw, json) Hash identifier: xAEKO61un89fgImPY22+xon4+GfWl/AvMnbrFaSVFTw= Subject key identifier: 48:0B:C2:90:5D:54:99:63:1D:B6:16:B9:9B:49:55:A4:45:41:15:D2 Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530 Certificate serial: 019B12034D64326E4296DBFD1403791E734C Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/SAvCkF1UmWMdtha5m0lVpEVBFdI.roa Signing time: Fri 12 Dec 2025 10:02:44 +0000 ROA not before: Fri 12 Dec 2025 10:02:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198584 IP address blocks: 194.117.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:4d:64:32:6e:42:96:db:fd:14:03:79:1e:73:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530 Validity Not Before: Dec 12 10:02:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=480bc2905d5499631db616b99b4955a4454115d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:86:f4:69:77:bf:fe:fe:0d:12:11:13:77: d6:02:a8:e4:19:47:2b:0c:fe:e1:fc:c2:f2:2e:d0: b8:53:d1:15:9b:22:17:10:f1:c2:d1:56:17:05:77: 4c:64:d5:a5:f6:a7:a2:05:f9:4b:d5:25:07:e2:78: 82:45:a3:82:4e:85:31:22:15:7e:0e:a0:95:3e:3d: fc:80:9b:13:38:3b:92:d0:aa:15:56:c1:a2:2a:b4: 9e:34:89:18:49:d7:35:88:18:17:cc:92:eb:e8:84: 4b:7b:d0:af:4a:ea:68:60:32:ef:94:93:bd:7d:9e: 54:41:53:c5:67:ac:2c:93:b0:6f:cf:8c:2e:90:20: 48:cd:d2:47:12:f1:38:06:2b:2a:4c:a9:aa:a2:d8: 05:1b:ea:6f:06:53:7a:04:2a:45:af:5b:ae:19:c8: d8:20:72:c5:0f:1a:5f:0d:20:ea:68:a7:f7:8d:b1: 20:09:d5:a7:7c:c1:0a:c5:c8:a9:d6:1c:8f:54:3c: 12:3e:08:e7:e8:2c:6f:e0:a8:eb:f0:78:46:3b:b3: c7:14:1f:da:10:8a:b0:c6:f4:49:b9:3f:a6:c7:14: f0:14:b8:3c:32:d2:6f:72:47:64:84:ba:71:7e:b8: 7b:3d:81:88:ba:e8:14:a2:2b:06:8f:88:d7:3f:2d: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:C2:90:5D:54:99:63:1D:B6:16:B9:9B:49:55:A4:45:41:15:D2 X509v3 Authority Key Identifier: keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/SAvCkF1UmWMdtha5m0lVpEVBFdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.64.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a8:55:0e:2b:86:6d:31:0e:c9:33:ff:ef:c4:b1:ca:fd:8a: 46:d0:8c:b1:c0:30:04:20:2f:b6:3b:a2:f1:eb:0f:5a:63:30: aa:6a:da:64:f6:3d:5e:64:9c:c2:41:15:b3:63:ba:87:de:90: cc:a5:c7:e3:83:20:61:5d:58:3c:79:14:66:52:aa:42:f0:7e: f6:65:9a:fd:1b:81:ee:6e:2e:7d:f2:c2:01:fa:22:87:f4:2e: 50:7b:6b:7a:36:c1:fd:4c:8a:d1:28:d7:af:f7:2a:d7:98:ab: 1c:1f:a3:01:36:60:2a:45:d2:1d:1b:e2:42:93:92:7b:de:fa: 52:ad:22:56:a7:f0:88:4f:ff:1b:da:77:8d:df:ff:6c:27:06: e7:f9:84:b4:b2:62:7f:6d:c0:34:97:20:1c:ec:1d:77:14:5e: 13:dd:1e:1b:cc:e9:d3:3b:b9:72:b1:ec:ee:ce:79:89:7d:62: 47:04:d1:cb:b7:7b:49:30:3b:2d:ab:6d:6d:51:35:ea:4c:5c: a6:79:d7:64:7a:f6:24:c2:b1:fe:f1:a3:fc:57:65:2c:d5:ca: 29:54:9a:87:8e:cc:f6:12:8a:a1:81:4d:95:60:77:be:14:c2: fb:56:1c:63:74:4d:27:2f:d3:98:97:65:df:43:ae:3d:03:93: d7:24:49:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSA01kMm5Cltv9FAN5HnNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2NlYzkwNjNhODg3NDE4NDE5MDhiMGM1Mjk3ZmNkYmI0 Mzk1MzAwHhcNMjUxMjEyMTAwMjQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODBiYzI5MDVkNTQ5OTYzMWRiNjE2Yjk5YjQ5NTVhNDQ1NDExNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP6G9Gl3v/7+DRIRE3fWAqjkGUcr DP7h/MLyLtC4U9EVmyIXEPHC0VYXBXdMZNWl9qeiBflL1SUH4niCRaOCToUxIhV+ DqCVPj38gJsTODuS0KoVVsGiKrSeNIkYSdc1iBgXzJLr6IRLe9CvSupoYDLvlJO9 fZ5UQVPFZ6wsk7Bvz4wukCBIzdJHEvE4BisqTKmqotgFG+pvBlN6BCpFr1uuGcjY IHLFDxpfDSDqaKf3jbEgCdWnfMEKxcip1hyPVDwSPgjn6Cxv4Kjr8HhGO7PHFB/a EIqwxvRJuT+mxxTwFLg8MtJvckdkhLpxfrh7PYGIuugUoisGj4jXPy1BGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgLwpBdVJljHbYWuZtJVaRFQRXSMB8GA1UdIwQY MBaAFFc87JBjqIdBhBkIsMUpf827Q5UwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEt NTQ1NGU1YTE2ZjQyLzEvU0F2Q2tGMVVtV01kdGhhNW0wbFZwRVZCRmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEtNTQ1NGU1YTE2ZjQy LzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnVAMA0G CSqGSIb3DQEBCwUAA4IBAQA9qFUOK4ZtMQ7JM//vxLHK/YpG0IyxwDAEIC+2O6Lx 6w9aYzCqatpk9j1eZJzCQRWzY7qH3pDMpcfjgyBhXVg8eRRmUqpC8H72ZZr9G4Hu bi598sIB+iKH9C5Qe2t6NsH9TIrRKNev9yrXmKscH6MBNmAqRdIdG+JCk5J73vpS rSJWp/CIT/8b2neN3/9sJwbn+YS0smJ/bcA0lyAc7B13FF4T3R4bzOnTO7lysezu znmJfWJHBNHLt3tJMDstq21tUTXqTFymeddkevYkwrH+8aP8V2Us1copVJqHjsz2 EoqhgU2VYHe+FML7VhxjdE0nL9OYl2XfQ649A5PXJEkM -----END CERTIFICATE-----Generated at Thu Dec 18 18:50:07 2025 by rpki-client