This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vb98uGEZIdwidaym1sCyUxWchPM.roa File: Vb98uGEZIdwidaym1sCyUxWchPM.roa (raw, json) Hash identifier: GZ5ubADuynY0imbkFONj+Y9q2FhXN3nzPdCXCVbEvhI= Subject key identifier: 55:BF:7C:B8:61:19:21:DC:22:75:AC:A6:D6:C0:B2:53:15:9C:84:F3 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B447582E4C8597F4F56640BA4DD2A793D Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vb98uGEZIdwidaym1sCyUxWchPM.roa Signing time: Mon 22 Dec 2025 05:08:30 +0000 ROA not before: Mon 22 Dec 2025 05:08:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213622 IP address blocks: 185.13.156.0/24 maxlen: 24 185.121.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:75:82:e4:c8:59:7f:4f:56:64:0b:a4:dd:2a:79:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Dec 22 05:08:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=55bf7cb8611921dc2275aca6d6c0b253159c84f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:38:75:87:98:81:56:46:6f:9b:80:1d:a9: 07:3d:fd:89:14:47:91:e5:bf:de:66:11:e5:cd:81: 9c:92:b4:c5:4c:d2:da:ea:4c:7d:04:c4:dc:95:77: eb:a6:e7:92:f5:f9:3f:07:3b:d3:44:91:9b:c9:47: bd:74:4f:f0:72:f5:b9:f2:e3:b6:05:99:14:64:26: 93:ee:4a:35:d4:28:c2:f5:aa:0b:de:48:ad:f8:81: dd:7a:31:d9:af:84:95:20:9d:b7:bb:c5:74:5c:b9: 27:dd:f7:d1:33:f4:a4:df:5f:55:f9:3b:db:3e:3b: 77:a7:5d:ed:5e:13:95:b4:63:91:26:15:cc:02:69: 17:4c:79:e6:58:7f:c0:a3:be:84:0d:40:46:95:6b: d1:a3:66:62:04:71:66:a7:5a:de:3f:b3:c2:a6:07: 1f:a9:30:dd:83:3c:a8:c7:23:d0:7f:8e:89:67:1b: 1f:37:5d:67:a6:e8:1e:38:b6:fd:22:ba:f4:43:6d: 16:9e:89:d0:35:e3:38:01:20:ca:a8:d9:1d:67:81: 4e:a1:b8:c8:07:94:60:d6:da:34:ff:e2:f1:2e:f0: e2:8d:8f:83:eb:2f:c1:d9:13:cf:45:73:52:bc:c6: 73:65:73:f0:48:70:bf:fa:bd:ef:67:80:fc:34:a1: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BF:7C:B8:61:19:21:DC:22:75:AC:A6:D6:C0:B2:53:15:9C:84:F3 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vb98uGEZIdwidaym1sCyUxWchPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.156.0/24 185.121.69.0/24 Signature Algorithm: sha256WithRSAEncryption 21:60:b0:7b:73:5f:42:f4:e4:b8:32:6a:de:62:42:de:7f:f7: 52:1d:99:97:0e:20:d6:1f:03:75:63:d7:de:e1:cd:0c:ca:39: 2f:40:25:0c:6d:a3:c3:61:ce:27:2d:15:30:08:b6:09:5f:2e: 7e:19:93:6d:a0:42:08:fc:c2:2a:58:e5:a2:30:2c:50:77:b5: db:c6:86:49:bb:a8:73:12:47:36:32:18:06:a5:58:cb:b9:12: 34:b5:56:99:10:34:77:0d:6e:a7:9a:a6:6b:3f:ae:00:5c:7c: 81:ab:bb:7c:d2:69:42:5c:79:f0:48:00:df:c9:75:d1:f7:73: 9c:01:3e:44:6c:92:0d:25:38:77:5c:cf:21:b8:c4:8c:19:a9: 4f:28:58:ad:6d:da:50:e3:b2:3d:fd:29:b8:1b:e5:96:15:4f: a1:d9:df:4d:93:84:3c:82:2b:e5:aa:36:46:b3:40:22:84:57: 22:35:66:a9:52:d0:4a:a2:ca:47:8a:e3:ef:54:8a:c9:f8:2e: 94:e1:87:ab:96:89:32:a3:5f:e3:34:7d:82:e5:dd:95:87:e5: d8:10:6f:28:b2:84:02:ad:ba:f1:3e:b4:78:4a:05:99:7f:02: e8:8b:09:cb:66:ae:78:f5:e3:2d:2a:7c:93:c5:17:90:ea:ac: a8:d1:81:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtEdYLkyFl/T1ZkC6TdKnk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMjIyMDUwODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWJmN2NiODYxMTkyMWRjMjI3NWFjYTZkNmMwYjI1MzE1OWM4NGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6E4dYeYgVZGb5uAHakHPf2JFEeR 5b/eZhHlzYGckrTFTNLa6kx9BMTclXfrpueS9fk/BzvTRJGbyUe9dE/wcvW58uO2 BZkUZCaT7ko11CjC9aoL3kit+IHdejHZr4SVIJ23u8V0XLkn3ffRM/Sk319V+Tvb Pjt3p13tXhOVtGORJhXMAmkXTHnmWH/Ao76EDUBGlWvRo2ZiBHFmp1reP7PCpgcf qTDdgzyoxyPQf46JZxsfN11npugeOLb9Irr0Q20WnonQNeM4ASDKqNkdZ4FOobjI B5Rg1to0/+LxLvDijY+D6y/B2RPPRXNSvMZzZXPwSHC/+r3vZ4D8NKGeiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFW/fLhhGSHcInWsptbAslMVnITzMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVmI5OHVHRVpJZHdpZGF5bTFzQ3lVeFdjaFBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQ2cAwQA uXlFMA0GCSqGSIb3DQEBCwUAA4IBAQAhYLB7c19C9OS4MmreYkLef/dSHZmXDiDW HwN1Y9fe4c0MyjkvQCUMbaPDYc4nLRUwCLYJXy5+GZNtoEII/MIqWOWiMCxQd7Xb xoZJu6hzEkc2MhgGpVjLuRI0tVaZEDR3DW6nmqZrP64AXHyBq7t80mlCXHnwSADf yXXR93OcAT5EbJINJTh3XM8huMSMGalPKFitbdpQ47I9/Sm4G+WWFU+h2d9Nk4Q8 givlqjZGs0AihFciNWapUtBKospHiuPvVIrJ+C6U4Yerlokyo1/jNH2C5d2Vh+XY EG8osoQCrbrxPrR4SgWZfwLoiwnLZq549eMtKnyTxReQ6qyo0YGv -----END CERTIFICATE-----Generated at Mon Dec 22 08:04:37 2025 by rpki-client