This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VBHlkW2BFFHieVzbxMqcdzyiGjg.roa File: VBHlkW2BFFHieVzbxMqcdzyiGjg.roa (raw, json) Hash identifier: ClHT+SGUc6a/yFQ59LlMHx4y0Rn4d89iAnryTWL8AXs= Subject key identifier: 54:11:E5:91:6D:81:14:51:E2:79:5C:DB:C4:CA:9C:77:3C:A2:1A:38 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B68B3753462FB43D9F7620EF6EBF665DE Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VBHlkW2BFFHieVzbxMqcdzyiGjg.roa Signing time: Mon 29 Dec 2025 06:02:29 +0000 ROA not before: Mon 29 Dec 2025 06:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 194.231.132.0/22 maxlen: 22 194.231.136.0/22 maxlen: 22 194.231.136.0/24 maxlen: 24 194.231.139.0/24 maxlen: 24 194.231.150.0/24 maxlen: 24 194.231.152.0/22 maxlen: 22 194.231.158.0/24 maxlen: 24 194.231.195.0/24 maxlen: 24 194.231.196.0/22 maxlen: 22 194.231.200.0/22 maxlen: 22 194.231.204.0/22 maxlen: 22 194.231.204.0/23 maxlen: 24 194.231.204.0/24 maxlen: 24 194.231.206.0/23 maxlen: 24 194.231.208.0/23 maxlen: 24 194.231.210.0/23 maxlen: 24 194.231.212.0/22 maxlen: 22 194.231.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:b3:75:34:62:fb:43:d9:f7:62:0e:f6:eb:f6:65:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 29 06:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5411e5916d811451e2795cdbc4ca9c773ca21a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:f8:1c:4a:cf:3e:cd:6b:23:34:86:fd:e3: ed:e2:3c:9a:76:31:2b:09:2c:e2:ad:5c:36:79:a0: 12:b7:0d:4b:70:46:34:e3:fe:20:ac:d2:8d:eb:02: e1:52:d2:d3:3f:9e:54:d2:c4:5f:e6:be:3e:be:71: ee:04:28:89:a0:01:ba:ab:fd:06:8b:90:12:20:59: 26:31:e3:3d:86:7b:e5:a1:a7:0f:a4:00:5e:7e:8a: 4b:fd:ca:97:dd:36:da:21:a0:15:02:cd:96:da:f9: 8b:a1:b9:32:8d:38:a6:fe:80:e4:2f:ec:a7:35:02: a6:66:dc:16:c9:9e:f3:b4:91:80:50:4f:ff:c9:7b: 9a:ce:50:b5:cb:a2:7a:81:c1:55:e9:16:b6:12:4d: 5d:8f:a7:00:19:4e:cb:3b:e5:33:cb:00:b4:3f:b6: e6:77:c8:e6:ee:24:0d:1a:c6:a6:af:01:fd:39:d7: e7:41:c0:8a:94:65:30:f5:2f:f5:c6:2b:b3:0d:bd: 17:c6:0e:28:9c:c9:b7:6a:18:49:52:c8:0d:32:6f: 05:87:e1:c9:59:4b:86:e5:11:a1:c5:04:6a:be:ce: 04:79:94:e1:dc:bc:a8:0e:f6:7e:c9:bf:bc:a8:61: c2:a8:46:6b:e9:8e:36:f4:2a:b6:8f:8e:fa:b3:14: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:11:E5:91:6D:81:14:51:E2:79:5C:DB:C4:CA:9C:77:3C:A2:1A:38 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VBHlkW2BFFHieVzbxMqcdzyiGjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.132.0-194.231.139.255 194.231.150.0/24 194.231.152.0/22 194.231.158.0/24 194.231.195.0-194.231.215.255 194.231.220.0/22 Signature Algorithm: sha256WithRSAEncryption 50:93:e3:b4:9d:38:fd:00:fd:c1:b3:f1:01:ed:d9:28:30:30: e1:04:4b:91:50:1e:f1:fb:60:93:45:f8:2c:1d:bc:97:d1:fe: 94:79:0b:b0:4f:2e:59:b2:50:39:4f:9b:d7:ca:7c:46:90:67: 8e:2a:c4:e4:e9:24:6d:6a:05:f4:56:c1:80:56:c2:b8:f8:57: c1:ae:b8:0a:79:37:ea:08:8f:07:3e:7f:0d:21:21:63:2d:52: 5d:e0:b4:9c:3b:e8:32:cb:e1:4b:76:74:78:92:94:46:4e:8f: fd:d4:20:d3:22:45:6a:ff:88:aa:4a:2b:54:16:07:5c:a0:f9: 14:6c:9e:5d:9f:4b:44:ea:50:5b:c3:52:b2:66:d6:40:1d:fa: 11:57:cd:7a:b5:3a:41:44:40:7a:af:9e:ea:53:09:38:ba:35: 59:22:a9:eb:e9:a2:3d:87:a1:9f:e4:d1:a0:98:d7:fc:56:f2: a0:c9:28:0e:b0:be:19:90:3b:15:69:a5:2c:c8:90:50:79:df: 7a:ba:fb:ec:91:d5:d2:bb:bb:22:8d:62:8f:db:50:cd:ea:62: fd:ff:5e:eb:8a:e4:82:62:e0:de:93:f9:b9:5a:82:81:a6:cc: 52:0c:90:95:45:e1:cc:e2:a9:6e:69:3b:6f:41:8d:1f:fc:64: ed:3f:54:34 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZtos3U0YvtD2fdiDvbr9mXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjI5MDYwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDExZTU5MTZkODExNDUxZTI3OTVjZGJjNGNhOWM3NzNjYTIxYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLX4HErPPs1rIzSG/ePt4jyadjEr CSzirVw2eaAStw1LcEY04/4grNKN6wLhUtLTP55U0sRf5r4+vnHuBCiJoAG6q/0G i5ASIFkmMeM9hnvloacPpABefopL/cqX3TbaIaAVAs2W2vmLobkyjTim/oDkL+yn NQKmZtwWyZ7ztJGAUE//yXuazlC1y6J6gcFV6Ra2Ek1dj6cAGU7LO+UzywC0P7bm d8jm7iQNGsamrwH9OdfnQcCKlGUw9S/1xiuzDb0Xxg4onMm3ahhJUsgNMm8Fh+HJ WUuG5RGhxQRqvs4EeZTh3LyoDvZ+yb+8qGHCqEZr6Y429Cq2j476sxSQ7QIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFFQR5ZFtgRRR4nlc28TKnHc8oho4MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvVkJIbGtXMkJGRkhpZVZ6YnhNcWNkenlpR2pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBALC54QD BALC54gDBADC55YDBALC55gDBADC554wDAMEAMLnwwMEA8Ln0AMEAsLn3DANBgkq hkiG9w0BAQsFAAOCAQEAUJPjtJ04/QD9wbPxAe3ZKDAw4QRLkVAe8ftgk0X4LB28 l9H+lHkLsE8uWbJQOU+b18p8RpBnjirE5OkkbWoF9FbBgFbCuPhXwa64Cnk36giP Bz5/DSEhYy1SXeC0nDvoMsvhS3Z0eJKURk6P/dQg0yJFav+IqkorVBYHXKD5FGye XZ9LROpQW8NSsmbWQB36EVfNerU6QURAeq+e6lMJOLo1WSKp6+miPYehn+TRoJjX /FbyoMkoDrC+GZA7FWmlLMiQUHnferr77JHV0ru7Io1ij9tQzepi/f9e64rkgmLg 3pP5uVqCgabMUgyQlUXhzOKpbmk7b0GNH/xk7T9UNA== -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:13 2025 by rpki-client