This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VnLOhqcPSSyy7Q3BomQKHPlOjKY.roa File: VnLOhqcPSSyy7Q3BomQKHPlOjKY.roa (raw, json) Hash identifier: cKwe7vi3MHpfdEptIxZDOc/4bQhAYANjA2jYGqyipb0= Subject key identifier: 56:72:CE:86:A7:0F:49:2C:B2:ED:0D:C1:A2:64:0A:1C:F9:4E:8C:A6 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B0CEC480D61E413D837E2AA982D005E02 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VnLOhqcPSSyy7Q3BomQKHPlOjKY.roa Signing time: Thu 11 Dec 2025 10:19:30 +0000 ROA not before: Thu 11 Dec 2025 10:19:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216138 IP address blocks: 194.5.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:ec:48:0d:61:e4:13:d8:37:e2:aa:98:2d:00:5e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 11 10:19:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5672ce86a70f492cb2ed0dc1a2640a1cf94e8ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:56:f0:53:89:a2:8f:6c:79:c8:c5:1b:1e:d4: 4f:8d:fc:31:f1:69:94:6f:12:5a:ef:6c:33:b7:5e: cc:8f:f9:43:cb:f8:85:af:51:1c:46:9c:92:0b:d7: d0:80:b3:4b:fb:55:a7:21:a3:07:61:7c:b7:96:ce: ba:29:8b:f2:ed:f2:6d:91:23:ed:53:6b:19:17:41: f3:41:4d:47:ce:c5:5b:da:1e:8b:dc:0c:4a:c4:36: b7:31:00:96:f1:52:a3:9b:fa:a6:52:86:dc:02:55: 1f:55:8c:fe:06:8a:41:af:92:99:3f:38:dd:46:ba: c6:4f:b5:22:9d:7e:ff:b2:31:66:48:18:d7:e4:c9: 9b:04:b9:08:8d:56:ff:23:18:d5:c7:f1:2b:e9:95: 63:05:37:6e:56:e7:e6:77:38:18:a3:19:d5:6d:e3: ce:d6:89:1c:52:97:ad:ef:62:2a:71:ae:c7:7c:37: d0:e9:7c:88:52:3a:5f:a5:bf:bc:b3:4e:9b:2e:e0: a5:2d:fe:b5:3e:15:ab:59:94:5b:15:2b:8e:b8:1e: f2:6a:ca:59:d6:d4:14:7d:b6:36:d3:14:a5:2a:09: 4a:53:19:ad:71:f1:c5:7d:5b:7a:48:1c:47:56:28: 5f:3f:cb:ed:ff:29:04:a0:e3:ca:1e:21:01:c6:ec: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:72:CE:86:A7:0F:49:2C:B2:ED:0D:C1:A2:64:0A:1C:F9:4E:8C:A6 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VnLOhqcPSSyy7Q3BomQKHPlOjKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.64.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:16:c4:c8:3e:9b:b6:6c:5a:6d:ef:68:6c:cd:6e:94:0d:e2: 8e:a4:68:1f:e9:22:62:4b:22:f0:b4:13:a4:8e:13:f9:65:7f: 24:4f:f0:35:ba:44:fa:08:a1:e9:a6:d6:a1:e6:d1:13:1e:9b: 97:25:a8:ac:d9:a9:ef:09:aa:43:e9:5f:33:8b:f9:78:11:21: 96:e6:1e:75:03:13:7f:70:49:c7:13:18:21:39:37:15:65:4b: c2:df:eb:2d:e6:a7:c1:56:6c:a8:a8:cf:bb:7e:e7:c5:47:e6: 30:9b:c5:aa:8d:14:c2:b0:ca:fe:af:b9:80:17:1d:7e:74:e0: 73:5c:05:18:a8:d7:48:15:12:8e:ae:4b:26:99:97:42:ad:ca: e2:84:9e:57:94:5e:cd:ad:53:6f:4a:9b:43:f7:e9:0c:0b:d3: 13:35:58:d0:95:25:4f:76:4b:b6:29:49:bc:bc:9a:3e:88:5a: e1:9c:bf:a2:4e:33:3f:af:eb:ee:47:1a:82:44:d4:83:12:ac: e8:f8:2f:fc:81:53:37:95:70:c2:d9:ae:c5:c1:50:8b:b7:d2: d2:e3:99:ed:9c:12:1b:91:e4:52:5c:84:82:fc:a1:5c:16:d5: c4:2f:c6:39:89:69:e4:ff:4e:95:69:b2:c7:3d:c5:bb:91:7b: 0a:07:6d:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsM7EgNYeQT2DfiqpgtAF4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjExMTAxOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjcyY2U4NmE3MGY0OTJjYjJlZDBkYzFhMjY0MGExY2Y5NGU4Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VbwU4mij2x5yMUbHtRPjfwx8WmU bxJa72wzt17Mj/lDy/iFr1EcRpySC9fQgLNL+1WnIaMHYXy3ls66KYvy7fJtkSPt U2sZF0HzQU1HzsVb2h6L3AxKxDa3MQCW8VKjm/qmUobcAlUfVYz+BopBr5KZPzjd RrrGT7UinX7/sjFmSBjX5MmbBLkIjVb/IxjVx/Er6ZVjBTduVufmdzgYoxnVbePO 1okcUpet72Iqca7HfDfQ6XyIUjpfpb+8s06bLuClLf61PhWrWZRbFSuOuB7yaspZ 1tQUfbY20xSlKglKUxmtcfHFfVt6SBxHVihfP8vt/ykEoOPKHiEBxuyVwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFZyzoanD0kssu0NwaJkChz5ToymMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVm5MT2hxY1BTU3l5N1EzQm9tUUtIUGxPaktZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgVAMA0G CSqGSIb3DQEBCwUAA4IBAQB+FsTIPpu2bFpt72hszW6UDeKOpGgf6SJiSyLwtBOk jhP5ZX8kT/A1ukT6CKHpptah5tETHpuXJais2anvCapD6V8zi/l4ESGW5h51AxN/ cEnHExghOTcVZUvC3+st5qfBVmyoqM+7fufFR+Ywm8WqjRTCsMr+r7mAFx1+dOBz XAUYqNdIFRKOrksmmZdCrcrihJ5XlF7NrVNvSptD9+kMC9MTNVjQlSVPdku2KUm8 vJo+iFrhnL+iTjM/r+vuRxqCRNSDEqzo+C/8gVM3lXDC2a7FwVCLt9LS45ntnBIb keRSXISC/KFcFtXEL8Y5iWnk/06VabLHPcW7kXsKB23P -----END CERTIFICATE-----Generated at Fri Dec 12 09:46:19 2025 by rpki-client