This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/VfDN-59FccxOvqATmPxAuatKHT0.roa File: VfDN-59FccxOvqATmPxAuatKHT0.roa (raw, json) Hash identifier: nf9NPBl15MZ7mxxQFnZKJvDsjqw0S5Ttoo609OQKOSw= Subject key identifier: 55:F0:CD:FB:9F:45:71:CC:4E:BE:A0:13:98:FC:40:B9:AB:4A:1D:3D Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Certificate serial: 019B02B008755E0D73EC3EB06371B36729B8 Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/VfDN-59FccxOvqATmPxAuatKHT0.roa Signing time: Tue 09 Dec 2025 10:37:29 +0000 ROA not before: Tue 09 Dec 2025 10:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51878 IP address blocks: 185.136.13.0/24 maxlen: 24 185.136.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 15:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:b0:08:75:5e:0d:73:ec:3e:b0:63:71:b3:67:29:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Validity Not Before: Dec 9 10:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=55f0cdfb9f4571cc4ebea01398fc40b9ab4a1d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:0b:a9:29:b8:3d:58:35:e7:a3:6a:bc:36: be:97:e5:f6:e7:48:ae:a9:1e:f1:52:72:14:18:68: bc:2b:b7:a4:8c:8a:ee:53:bc:81:b0:8b:fc:a3:49: ae:6f:3d:3d:56:1c:7d:ae:d1:4a:f6:e2:e8:c6:2f: 61:ff:2b:63:90:8f:90:2c:c3:60:f1:a0:76:0d:a4: 0b:d1:df:81:7e:56:fc:1e:b7:52:62:fa:e0:65:42: ad:63:2f:c0:ca:dc:94:fa:b3:ae:ff:0e:e9:32:73: 8a:e0:78:90:72:be:e9:e9:e9:b8:fb:a8:a6:29:d5: b6:13:a4:36:0c:b9:86:0c:9a:92:52:f4:d4:31:2b: ed:e1:f4:c6:58:5a:b8:6a:14:03:66:22:42:3f:77: 42:95:b8:22:22:97:ae:0c:2d:32:36:16:69:f4:9a: f0:6a:2d:b5:3c:b0:c1:d4:99:8e:bf:3f:11:a4:ce: d4:b3:fb:01:04:19:d0:3f:f9:f0:39:9e:da:d7:92: 8f:b8:14:9b:fd:9d:68:ee:a5:7a:4a:a6:8f:f1:b4: b2:0d:a5:91:f5:20:24:99:63:15:7c:be:4c:eb:2c: 03:c7:29:b8:99:ad:c1:8b:69:94:92:bf:20:88:4d: 00:21:8c:58:91:75:fb:a7:7b:b7:b8:a6:14:21:8e: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F0:CD:FB:9F:45:71:CC:4E:BE:A0:13:98:FC:40:B9:AB:4A:1D:3D X509v3 Authority Key Identifier: keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/VfDN-59FccxOvqATmPxAuatKHT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.13.0-185.136.14.255 Signature Algorithm: sha256WithRSAEncryption 07:2d:57:f7:22:dc:c0:90:50:e6:9d:9f:bf:c1:da:05:4f:1b: 02:6c:66:d6:bb:8b:ae:2c:25:35:e4:84:82:06:22:9e:99:07: 8b:35:00:5c:15:6c:94:e8:57:19:43:24:21:46:39:b3:42:64: 59:16:34:cb:32:24:84:05:71:20:08:d8:bb:a5:22:0d:59:e9: 33:dc:8d:00:97:9b:c5:0f:e5:8b:22:96:7f:3f:11:f8:30:74: 47:df:aa:9b:6d:82:db:e0:98:4e:0a:83:2a:e9:34:cc:a7:1c: 7e:b6:61:22:e0:08:b8:eb:04:d2:b9:f3:88:3b:4d:6c:8e:36: 32:39:04:9a:3d:e0:a5:40:2a:8d:b3:04:cf:02:cd:9e:bb:9f: ef:2d:c7:b4:cf:27:5e:f4:3e:b7:cd:ae:01:0d:9f:99:df:c3: 94:3c:84:83:6f:57:2d:84:21:22:73:43:89:a3:3f:4a:27:b2: 1e:31:58:f9:ae:e1:58:ec:fb:54:c4:5a:94:b9:c3:74:f4:67: 76:ce:5f:50:bc:a9:c5:3d:e4:88:89:72:15:8e:42:0b:85:03: 0e:e6:3f:70:83:d7:9b:1f:f4:d5:6b:c0:35:b9:02:7f:bf:c4: e4:6e:70:e9:b3:73:8b:5c:5d:cf:a3:3a:56:1f:ab:d5:e2:7b: d2:34:e9:6d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsCsAh1Xg1z7D6wY3GzZym4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2Y3MDI1MDA4MmMzZTA1NmYzZmU1MjhiZDc3YjA2ZTIw ZTQwN2MwHhcNMjUxMjA5MTAzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWYwY2RmYjlmNDU3MWNjNGViZWEwMTM5OGZjNDBiOWFiNGExZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uALqSm4PVg156NqvDa+l+X250iu qR7xUnIUGGi8K7ekjIruU7yBsIv8o0mubz09Vhx9rtFK9uLoxi9h/ytjkI+QLMNg 8aB2DaQL0d+Bflb8HrdSYvrgZUKtYy/AytyU+rOu/w7pMnOK4HiQcr7p6em4+6im KdW2E6Q2DLmGDJqSUvTUMSvt4fTGWFq4ahQDZiJCP3dClbgiIpeuDC0yNhZp9Jrw ai21PLDB1JmOvz8RpM7Us/sBBBnQP/nwOZ7a15KPuBSb/Z1o7qV6SqaP8bSyDaWR 9SAkmWMVfL5M6ywDxym4ma3Bi2mUkr8giE0AIYxYkXX7p3u3uKYUIY4sEQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFXwzfufRXHMTr6gE5j8QLmrSh09MB8GA1UdIwQY MBaAFF9/cCUAgsPgVvP+UovXewbiDkB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEt MjNmMGMwNGQyYzE3LzEvVmZETi01OUZjY3hPdnFBVG1QeEF1YXRLSFQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEtMjNmMGMwNGQyYzE3 LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5iA0D BAC5iA4wDQYJKoZIhvcNAQELBQADggEBAActV/ci3MCQUOadn7/B2gVPGwJsZta7 i64sJTXkhIIGIp6ZB4s1AFwVbJToVxlDJCFGObNCZFkWNMsyJIQFcSAI2LulIg1Z 6TPcjQCXm8UP5Ysiln8/EfgwdEffqpttgtvgmE4KgyrpNMynHH62YSLgCLjrBNK5 84g7TWyONjI5BJo94KVAKo2zBM8CzZ67n+8tx7TPJ170PrfNrgENn5nfw5Q8hINv Vy2EISJzQ4mjP0onsh4xWPmu4Vjs+1TEWpS5w3T0Z3bOX1C8qcU95IiJchWOQguF Aw7mP3CD15sf9NVrwDW5An+/xORucOmzc4tcXc+jOlYfq9Xie9I06W0= -----END CERTIFICATE-----Generated at Fri Dec 12 01:31:55 2025 by rpki-client