This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/VHARbjmRGA2iFnJKjKjZy-WzcPs.roa File: VHARbjmRGA2iFnJKjKjZy-WzcPs.roa (raw, json) Hash identifier: OjH/Rh5sSPUY3jwuvNkEft7qNA+738Oz4tbphGiFxzc= Subject key identifier: 54:70:11:6E:39:91:18:0D:A2:16:72:4A:8C:A8:D9:CB:E5:B3:70:FB Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019A784DD4731FC3336FEC478AB653E838AC Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/VHARbjmRGA2iFnJKjKjZy-WzcPs.roa Signing time: Wed 12 Nov 2025 13:42:37 +0000 ROA not before: Wed 12 Nov 2025 13:42:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 5.182.184.0/24 maxlen: 24 5.182.196.0/24 maxlen: 24 5.182.197.0/24 maxlen: 24 92.249.30.0/24 maxlen: 24 103.130.179.0/24 maxlen: 24 103.210.13.0/24 maxlen: 24 147.78.207.0/24 maxlen: 24 185.52.138.0/24 maxlen: 24 185.187.213.0/24 maxlen: 24 185.187.214.0/24 maxlen: 24 185.187.215.0/24 maxlen: 24 185.205.207.0/24 maxlen: 24 185.208.153.0/24 maxlen: 24 185.208.154.0/24 maxlen: 24 185.230.120.0/24 maxlen: 24 185.230.121.0/24 maxlen: 24 185.230.123.0/24 maxlen: 24 192.145.69.0/24 maxlen: 24 212.60.13.0/24 maxlen: 24 2a0a:8f40:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:4d:d4:73:1f:c3:33:6f:ec:47:8a:b6:53:e8:38:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Nov 12 13:42:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5470116e3991180da216724a8ca8d9cbe5b370fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:3f:a0:d5:b8:9c:71:60:77:ad:d8:a3:2b: 69:a2:1a:09:ac:7a:ab:96:3e:97:bc:08:e4:9c:22: 4a:10:6e:6f:85:a7:e7:6e:1c:97:29:38:83:d9:28: 72:fc:9c:98:82:6c:cd:5a:c8:dd:39:2a:a2:4c:d3: 55:5d:4b:85:9a:c0:b7:cf:2c:e9:7e:d6:7b:c3:e5: 54:07:ea:fc:3f:ff:20:84:3e:33:bf:7a:ed:da:f5: a6:6f:f8:59:25:6a:8d:35:9d:1b:08:76:b6:75:fb: fd:35:7f:7a:a2:8f:7e:78:c2:f7:c4:78:d9:9a:6b: 60:49:3d:3c:af:60:c7:0b:04:2c:e3:1e:31:cc:27: b3:1c:e7:0d:82:ed:b9:53:f0:24:e4:60:46:ab:a7: 5d:24:0c:2b:00:8a:fb:29:5e:23:c8:a2:69:2b:bb: 78:95:12:96:4b:0b:18:03:63:d5:d8:34:32:8b:eb: f2:1c:9e:06:6b:c8:1d:6a:75:ea:8b:27:34:a4:49: e4:91:26:c1:1f:12:d7:3c:96:7d:6e:28:58:9f:95: 2b:3d:cc:1f:0f:5d:ea:e8:c4:29:98:d9:d4:12:70: db:9e:db:89:86:d0:e3:48:1b:90:bf:ef:c7:bf:70: 00:87:a7:b3:4c:75:42:2e:b0:d1:a2:46:74:f6:1a: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:70:11:6E:39:91:18:0D:A2:16:72:4A:8C:A8:D9:CB:E5:B3:70:FB X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/VHARbjmRGA2iFnJKjKjZy-WzcPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.184.0/24 5.182.196.0/23 92.249.30.0/24 103.130.179.0/24 103.210.13.0/24 147.78.207.0/24 185.52.138.0/24 185.187.213.0-185.187.215.255 185.205.207.0/24 185.208.153.0-185.208.154.255 185.230.120.0/23 185.230.123.0/24 192.145.69.0/24 212.60.13.0/24 IPv6: 2a0a:8f40:1c::/48 Signature Algorithm: sha256WithRSAEncryption 36:9d:b4:dc:40:eb:ed:6a:c7:9a:c6:e8:9c:bc:e8:20:5d:1b: cc:03:f9:c4:ba:c4:04:ac:26:fd:35:35:93:1e:39:dd:27:51: 68:cd:ba:d3:3c:ec:07:5f:69:89:8c:46:e5:c5:fb:13:95:09: 01:a0:15:8c:33:2a:42:31:5e:fb:8a:85:5b:18:80:be:ad:3f: b8:92:26:55:74:05:89:cb:da:dc:ee:a9:e7:cd:a9:ee:59:0c: 05:c0:3a:b4:43:09:f7:a3:19:63:2d:d2:64:47:93:05:cd:e7: 20:9d:a7:1c:94:44:be:c5:35:ae:e1:b3:77:c1:53:c3:12:fe: d3:e9:d6:8a:32:4d:42:eb:a7:f0:45:78:00:6b:2a:b6:2f:70: ea:87:3b:eb:88:76:36:4d:a0:47:bf:55:5f:10:f6:f7:3a:ab: 45:3b:9d:70:59:13:a7:19:45:b2:57:15:b2:81:e2:60:14:6b: 85:fe:a0:24:9c:98:4f:e4:b7:d9:bc:39:49:57:3b:a6:5a:32: af:fc:30:ea:c5:c7:73:8d:19:58:8c:c8:eb:46:8f:0b:d8:7a: 55:46:70:84:b2:ce:10:f3:4e:71:96:04:25:18:96:68:7e:89: e2:d3:8f:de:75:51:af:08:01:8a:09:41:5d:09:a7:72:99:11: 78:a9:45:42 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZp4TdRzH8Mzb+xHirZT6DisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUxMTEyMTM0MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDcwMTE2ZTM5OTExODBkYTIxNjcyNGE4Y2E4ZDljYmU1YjM3MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEQ/oNW4nHFgd63YoytpohoJrHqr lj6XvAjknCJKEG5vhafnbhyXKTiD2Shy/JyYgmzNWsjdOSqiTNNVXUuFmsC3zyzp ftZ7w+VUB+r8P/8ghD4zv3rt2vWmb/hZJWqNNZ0bCHa2dfv9NX96oo9+eML3xHjZ mmtgST08r2DHCwQs4x4xzCezHOcNgu25U/Ak5GBGq6ddJAwrAIr7KV4jyKJpK7t4 lRKWSwsYA2PV2DQyi+vyHJ4Ga8gdanXqiyc0pEnkkSbBHxLXPJZ9bihYn5UrPcwf D13q6MQpmNnUEnDbntuJhtDjSBuQv+/Hv3AAh6ezTHVCLrDRokZ09hpiaQIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFFRwEW45kRgNohZySoyo2cvls3D7MB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvVkhBUmJqbVJHQTJpRm5KS2pLalp5LVd6Y1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wagQCAAEwZAMEAAW2uAME AQW2xAMEAFz5HgMEAGeCswMEAGfSDQMEAJNOzwMEALk0ijAMAwQAubvVAwQDubvQ AwQAuc3PMAwDBAC50JkDBAC50JoDBAG55ngDBAC55nsDBADAkUUDBADUPA0wDwQC AAIwCQMHACoKj0AAHDANBgkqhkiG9w0BAQsFAAOCAQEANp203EDr7WrHmsbonLzo IF0bzAP5xLrEBKwm/TU1kx453SdRaM260zzsB19piYxG5cX7E5UJAaAVjDMqQjFe +4qFWxiAvq0/uJImVXQFicva3O6p582p7lkMBcA6tEMJ96MZYy3SZEeTBc3nIJ2n HJREvsU1ruGzd8FTwxL+0+nWijJNQuun8EV4AGsqti9w6oc764h2Nk2gR79VXxD2 9zqrRTudcFkTpxlFslcVsoHiYBRrhf6gJJyYT+S32bw5SVc7ployr/ww6sXHc40Z WIzI60aPC9h6VUZwhLLOEPNOcZYEJRiWaH6J4tOP3nVRrwgBiglBXQmncpkReKlF Qg== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:06 2025 by rpki-client