This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/fvviGbPo5npX-vV1hPhwUf_r-7c.roa File: fvviGbPo5npX-vV1hPhwUf_r-7c.roa (raw, json) Hash identifier: eyQCmGj4TKUSZ0ZE/WxMauOAdv4sV1qLHbkHR2/Z3eY= Subject key identifier: 7E:FB:E2:19:B3:E8:E6:7A:57:FA:F5:75:84:F8:70:51:FF:EB:FB:B7 Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b Certificate serial: 019B324B88F3291F977D4AA96FE96B04FDBD Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/fvviGbPo5npX-vV1hPhwUf_r-7c.roa Signing time: Thu 18 Dec 2025 16:29:29 +0000 ROA not before: Thu 18 Dec 2025 16:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41653 IP address blocks: 45.141.172.0/22 maxlen: 22 91.199.0.0/24 maxlen: 24 95.128.40.0/21 maxlen: 24 176.121.248.0/22 maxlen: 22 178.212.228.0/24 maxlen: 24 185.66.232.0/22 maxlen: 24 194.105.152.0/23 maxlen: 23 195.14.22.0/24 maxlen: 24 2a02:ec0::/32 maxlen: 48 2a0e:cec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:4b:88:f3:29:1f:97:7d:4a:a9:6f:e9:6b:04:fd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b Validity Not Before: Dec 18 16:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7efbe219b3e8e67a57faf57584f87051ffebfbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:64:4f:a6:1f:36:97:b4:dd:a0:7f:f3:7f: be:c9:e2:ae:fe:1e:96:72:06:75:54:e4:50:9f:d6: 99:a4:30:c8:ed:ba:a6:51:40:e8:a3:70:d7:bf:ba: c5:e5:ca:92:55:64:81:66:af:e3:76:7c:ab:07:d9: 29:50:ca:d7:71:3f:2c:6f:37:78:ba:3a:a1:75:66: f9:45:0a:6e:17:15:82:f9:e2:79:b7:26:5b:eb:93: e7:33:ab:24:5e:95:af:b2:15:26:12:16:a4:6e:a5: 03:31:83:23:2d:ab:15:e5:fd:bb:ac:70:05:7f:73: 7f:fc:56:7a:06:8b:dd:06:e7:fd:e5:f7:f3:4e:6a: e7:93:7c:a1:8a:98:f0:70:62:80:9e:51:12:05:ba: 36:43:be:cf:e5:c4:cf:e9:41:32:62:1f:ad:0a:07: fb:ad:a3:ba:59:52:51:8b:2c:7b:b0:ac:c4:6a:9d: ab:32:2e:b1:87:6b:0f:ac:3a:68:63:45:7d:7a:67: 77:aa:61:49:ed:24:ed:62:95:be:c9:1b:50:bc:05: 6c:75:d5:10:17:e5:d9:16:8a:3f:d7:e5:97:94:30: d7:6f:2e:5e:50:cf:fc:82:a8:17:85:70:37:b8:b5: dd:60:3c:52:b4:5c:ce:cd:7b:ce:30:b3:f9:18:54: 0f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FB:E2:19:B3:E8:E6:7A:57:FA:F5:75:84:F8:70:51:FF:EB:FB:B7 X509v3 Authority Key Identifier: keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/fvviGbPo5npX-vV1hPhwUf_r-7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.172.0/22 91.199.0.0/24 95.128.40.0/21 176.121.248.0/22 178.212.228.0/24 185.66.232.0/22 194.105.152.0/23 195.14.22.0/24 IPv6: 2a02:ec0::/32 2a0e:cec0::/29 Signature Algorithm: sha256WithRSAEncryption 05:66:f1:9b:fa:4a:13:69:b3:20:00:ce:71:e7:14:c3:4b:7c: 6d:f1:d0:de:fd:8d:0a:47:20:2c:e1:6e:5b:75:71:42:22:26: 18:8d:ba:b2:21:23:3f:83:b7:04:73:9a:0c:53:27:bf:7e:dc: 91:cd:6c:92:25:89:03:84:0c:1e:5e:44:97:ee:23:f3:25:2e: 49:94:fe:b4:72:61:8f:ee:eb:3c:39:a2:40:6e:38:44:5c:9c: 5c:87:4a:bd:af:bc:cb:d5:0d:80:e7:c0:19:1b:a3:3a:87:1a: 69:8c:4b:ed:62:88:95:59:66:b9:4f:60:03:7f:2c:05:ff:d3: dd:b5:3b:55:25:6b:7d:06:b5:45:03:f8:fb:0d:5a:f7:11:1a: c7:75:e1:dc:8d:e8:44:a1:5a:e6:5c:3d:29:0a:d7:73:66:07: a8:68:47:cb:f3:2e:28:a7:54:da:b2:f7:6b:7d:9b:82:a2:67: 74:27:50:3a:89:01:37:cc:f7:5d:d7:b2:b1:ae:ae:bf:a2:b8: 90:e0:90:95:50:21:47:67:ad:76:31:e1:fb:8b:66:a2:5a:0a: df:74:44:c6:37:8d:9a:d0:82:0b:3b:ad:08:6f:ca:a9:74:b9: 77:c1:2a:2b:fb:ce:f8:ba:93:a1:a8:53:62:55:0d:aa:1f:37: 0d:d2:11:d8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZsyS4jzKR+XfUqpb+lrBP29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1 NWY2NGIwHhcNMjUxMjE4MTYyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWZiZTIxOWIzZThlNjdhNTdmYWY1NzU4NGY4NzA1MWZmZWJmYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaRkT6YfNpe03aB/83++yeKu/h6W cgZ1VORQn9aZpDDI7bqmUUDoo3DXv7rF5cqSVWSBZq/jdnyrB9kpUMrXcT8sbzd4 ujqhdWb5RQpuFxWC+eJ5tyZb65PnM6skXpWvshUmEhakbqUDMYMjLasV5f27rHAF f3N//FZ6BovdBuf95ffzTmrnk3yhipjwcGKAnlESBbo2Q77P5cTP6UEyYh+tCgf7 raO6WVJRiyx7sKzEap2rMi6xh2sPrDpoY0V9emd3qmFJ7STtYpW+yRtQvAVsddUQ F+XZFoo/1+WXlDDXby5eUM/8gqgXhXA3uLXdYDxStFzOzXvOMLP5GFQPVwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFH774hmz6OZ6V/r1dYT4cFH/6/u3MB8GA1UdIwQY MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt M2E2YTA2ZTE4OGMzLzEvZnZ2aUdiUG81bnBYLXZWMWhQaHdVZl9yLTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQCLY2sAwQA W8cAAwQDX4AoAwQCsHn4AwQAstTkAwQCuULoAwQBwmmYAwQAww4WMBQEAgACMA4D BQAqAg7AAwUDKg7OwDANBgkqhkiG9w0BAQsFAAOCAQEABWbxm/pKE2mzIADOcecU w0t8bfHQ3v2NCkcgLOFuW3VxQiImGI26siEjP4O3BHOaDFMnv37ckc1skiWJA4QM Hl5El+4j8yUuSZT+tHJhj+7rPDmiQG44RFycXIdKva+8y9UNgOfAGRujOocaaYxL 7WKIlVlmuU9gA38sBf/T3bU7VSVrfQa1RQP4+w1a9xEax3Xh3I3oRKFa5lw9KQrX c2YHqGhHy/MuKKdU2rL3a32bgqJndCdQOokBN8z3Xdeysa6uv6K4kOCQlVAhR2et djHh+4tmoloK33RExjeNmtCCCzutCG/KqXS5d8EqK/vO+LqToahTYlUNqh83DdIR 2A== -----END CERTIFICATE-----Generated at Mon Dec 22 12:20:50 2025 by rpki-client