This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/vNe83EC6bSzw91lQkjOMncRB1Rc.roa File: vNe83EC6bSzw91lQkjOMncRB1Rc.roa (raw, json) Hash identifier: qNN6BcyomHcOioxsu8jwQV4wilKffmNHmTxNu0m5mU8= Subject key identifier: BC:D7:BC:DC:40:BA:6D:2C:F0:F7:59:50:92:33:8C:9D:C4:41:D5:17 Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Certificate serial: 019B31BE8C10D892969751C873E5D20F7702 Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/vNe83EC6bSzw91lQkjOMncRB1Rc.roa Signing time: Thu 18 Dec 2025 13:55:29 +0000 ROA not before: Thu 18 Dec 2025 13:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213051 IP address blocks: 193.109.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:be:8c:10:d8:92:96:97:51:c8:73:e5:d2:0f:77:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Validity Not Before: Dec 18 13:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bcd7bcdc40ba6d2cf0f7595092338c9dc441d517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7c:d1:41:d0:7f:d5:6d:ce:9f:44:8b:03:6c: 81:94:0f:63:19:f6:bc:4a:80:4c:b0:ad:13:9b:4e: 04:5b:a7:d2:c0:fe:9a:3c:c5:73:4e:1d:44:eb:67: 35:40:7f:c3:d6:a6:04:54:17:4f:f5:e3:9a:4e:22: 36:ec:3d:e1:2a:b8:c8:7f:81:0e:18:7e:00:86:50: 87:4b:e6:05:34:24:65:8b:72:17:cd:90:3e:c8:2c: 4f:8c:37:d1:6c:bd:93:ef:3f:14:72:69:fd:55:7e: e2:44:6f:19:ab:bd:5c:0d:3d:ce:06:10:76:87:e5: 5c:f1:b1:d9:64:ba:34:a7:47:c9:f6:13:bf:e3:a2: 6b:06:ff:9e:cb:23:df:d0:a7:96:63:62:ac:bd:5b: 42:f1:ae:a6:fb:33:c0:5d:2c:2d:bb:03:5e:0d:d6: a4:3a:94:6a:40:d1:29:22:03:c5:d4:bc:57:67:1d: ad:f0:67:e1:b2:57:a4:32:82:51:c1:0e:cf:cb:97: da:15:f5:2d:12:ee:f2:ef:29:9d:55:4c:dd:14:d9: 73:7a:7a:d1:3f:57:db:80:32:f0:5a:e7:ae:53:8e: 26:62:c0:fb:f2:1f:11:87:bc:0d:c2:56:96:b7:4a: 29:ab:39:9d:b1:6d:a4:13:05:95:98:5e:b3:53:a9: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D7:BC:DC:40:BA:6D:2C:F0:F7:59:50:92:33:8C:9D:C4:41:D5:17 X509v3 Authority Key Identifier: keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/vNe83EC6bSzw91lQkjOMncRB1Rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.108.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:fb:00:a7:1b:ec:80:49:48:b5:84:fa:8b:06:ab:8c:1a:39: c7:ae:97:55:c2:88:e7:4a:28:47:c5:b4:b4:08:17:e2:67:89: 3b:58:af:a8:c9:0e:6e:a9:7f:00:f4:5b:ee:f4:81:a8:25:fb: d2:5c:87:50:da:33:8e:6a:43:2d:6d:ac:3e:d2:60:b3:69:95: c8:63:7e:c4:58:a8:ab:18:fc:37:d8:ed:2b:9d:41:a3:ff:ef: 68:ae:af:dd:10:7d:94:d5:0d:6c:ae:0c:04:9e:3f:0c:6d:a4: ff:5b:15:3a:a8:c3:86:68:ad:0b:0a:0c:3a:ff:83:63:0d:52: 3f:cd:cb:2c:6c:b1:63:9d:ae:0b:2e:8b:e5:30:98:77:90:1f: 37:7b:32:cb:af:a6:6a:7c:c9:35:f0:eb:b4:1f:a0:db:87:77: 63:12:ba:45:ef:5c:1e:5a:6e:69:3b:12:2b:a0:4a:73:67:bf: a1:a5:df:7d:6b:77:e5:8b:4e:9a:66:9f:16:14:cc:0f:7c:6d: 65:1c:6c:aa:11:f0:36:00:39:5f:ff:4a:ef:db:6b:e5:45:d7: 95:57:fa:cf:ac:47:26:72:08:a0:c8:62:d6:df:1f:1f:fd:8f: f9:0a:59:46:21:e1:4c:d0:c4:f9:47:ec:cd:b7:20:48:08:7c: 06:2d:81:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxvowQ2JKWl1HIc+XSD3cCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh ZDJmMDkwHhcNMjUxMjE4MTM1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2Q3YmNkYzQwYmE2ZDJjZjBmNzU5NTA5MjMzOGM5ZGM0NDFkNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nzRQdB/1W3On0SLA2yBlA9jGfa8 SoBMsK0Tm04EW6fSwP6aPMVzTh1E62c1QH/D1qYEVBdP9eOaTiI27D3hKrjIf4EO GH4AhlCHS+YFNCRli3IXzZA+yCxPjDfRbL2T7z8Ucmn9VX7iRG8Zq71cDT3OBhB2 h+Vc8bHZZLo0p0fJ9hO/46JrBv+eyyPf0KeWY2KsvVtC8a6m+zPAXSwtuwNeDdak OpRqQNEpIgPF1LxXZx2t8GfhslekMoJRwQ7Py5faFfUtEu7y7ymdVUzdFNlzenrR P1fbgDLwWueuU44mYsD78h8Rh7wNwlaWt0opqzmdsW2kEwWVmF6zU6kevwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzXvNxAum0s8PdZUJIzjJ3EQdUXMB8GA1UdIwQY MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt MDZhNDk5NjhjMmQzLzEvdk5lODNFQzZiU3p3OTFsUWtqT01uY1JCMVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW1sMA0G CSqGSIb3DQEBCwUAA4IBAQAq+wCnG+yASUi1hPqLBquMGjnHrpdVwojnSihHxbS0 CBfiZ4k7WK+oyQ5uqX8A9Fvu9IGoJfvSXIdQ2jOOakMtbaw+0mCzaZXIY37EWKir GPw32O0rnUGj/+9orq/dEH2U1Q1srgwEnj8MbaT/WxU6qMOGaK0LCgw6/4NjDVI/ zcssbLFjna4LLovlMJh3kB83ezLLr6ZqfMk18Ou0H6Dbh3djErpF71weWm5pOxIr oEpzZ7+hpd99a3fli06aZp8WFMwPfG1lHGyqEfA2ADlf/0rv22vlRdeVV/rPrEcm cgigyGLW3x8f/Y/5CllGIeFM0MT5R+zNtyBICHwGLYHO -----END CERTIFICATE-----Generated at Sun Dec 21 11:54:26 2025 by rpki-client