This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vxRAQIV12C4JH31qwlp7JWImxWU.roa File: vxRAQIV12C4JH31qwlp7JWImxWU.roa (raw, json) Hash identifier: odp13BbwnzelbJu4ViI2Eueefgtk7P0dbj2vlEhz0Ro= Subject key identifier: BF:14:40:40:85:75:D8:2E:09:1F:7D:6A:C2:5A:7B:25:62:26:C5:65 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B3841B876553AB83AC87148CB70B93215 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vxRAQIV12C4JH31qwlp7JWImxWU.roa Signing time: Fri 19 Dec 2025 20:16:29 +0000 ROA not before: Fri 19 Dec 2025 20:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 79.98.244.0/24 maxlen: 24 185.250.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:41:b8:76:55:3a:b8:3a:c8:71:48:cb:70:b9:32:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Dec 19 20:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf1440408575d82e091f7d6ac25a7b256226c565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d0:5a:22:49:74:98:41:45:b2:db:86:37:f2: 01:e1:ba:ff:b9:42:24:65:7b:85:3d:d2:d6:ba:cc: fc:7d:e8:63:cf:73:c4:39:af:93:01:4f:de:c0:7d: ca:94:c5:be:3f:d9:a3:20:dc:b5:98:9d:05:43:2d: fe:48:b4:57:51:89:91:08:a0:32:6c:69:9c:41:14: 3e:32:d7:d7:e1:52:cf:6d:7e:43:9b:02:d6:26:f5: e0:ba:38:da:46:88:e1:03:73:2c:63:3c:9b:3d:fe: 94:4f:ac:2e:22:9d:50:0a:21:11:70:b5:22:56:ad: 12:e2:09:d9:f5:65:5f:dd:f6:8d:6e:fb:05:39:4b: 99:cf:94:c7:2c:ba:16:a8:63:72:f8:7a:7c:da:bf: 0c:30:d9:c5:e5:59:dd:8d:d0:69:9a:b4:d2:75:88: 5f:cf:2c:a4:84:07:be:a2:24:4f:c9:d5:8b:19:bf: 9f:1b:3a:51:87:fa:74:c9:4b:8a:66:61:a4:1f:98: 00:7e:d2:0c:51:87:15:a5:93:68:95:64:12:41:f0: 7c:d4:1f:ce:68:30:e5:f8:92:17:55:b1:4d:b7:65: 17:38:f5:eb:c7:4d:b0:1b:4e:78:82:da:a4:25:fc: aa:c1:6f:e0:29:c7:81:7e:cc:d2:c9:5b:ff:3c:d1: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:14:40:40:85:75:D8:2E:09:1F:7D:6A:C2:5A:7B:25:62:26:C5:65 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/vxRAQIV12C4JH31qwlp7JWImxWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.244.0/24 185.250.26.0/24 Signature Algorithm: sha256WithRSAEncryption 09:97:7b:43:e5:2c:fa:a7:f5:0a:41:72:bd:90:8e:f8:ee:36: 60:15:e5:a3:e3:91:d0:a2:af:54:57:62:48:8f:f9:c4:1a:b5: c5:dd:75:00:27:7e:b7:7f:63:d8:95:77:36:1e:4e:57:a6:a4: 2f:89:db:ea:ce:33:08:44:4b:71:f8:70:02:bc:20:5e:0d:83: be:5e:5e:a6:60:6d:af:0b:36:7a:b1:6c:03:ce:8e:99:12:fc: 54:27:1e:77:5a:27:e5:ac:d8:de:7e:e4:a7:64:30:71:7c:d6: 32:d1:33:6d:2d:7c:b8:26:96:bf:69:2b:28:20:e4:11:61:6d: 28:38:8d:d0:7b:e0:47:5d:98:bb:5c:5b:99:9d:cb:19:c9:83: ff:78:bb:c6:81:48:34:7e:67:41:f8:73:3e:9d:ce:f0:93:4d: 50:bc:6c:3f:bb:3a:33:86:eb:b9:9c:dc:29:67:03:fa:5d:3d: 5c:4b:75:49:f6:3b:37:eb:c0:cb:b2:f7:7a:66:49:87:a8:eb: b5:40:ba:b0:3f:a1:85:2f:0c:1a:82:e3:c5:0f:ca:88:c9:3f: 46:b0:01:3d:e1:ad:6a:7f:23:cb:dc:6b:c0:ec:d4:ed:bd:e7: e0:8c:58:64:97:a3:53:65:3b:58:ce:66:0b:10:dc:e0:b9:d0: b9:3c:2f:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZs4Qbh2VTq4OshxSMtwuTIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMjE5MjAxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjE0NDA0MDg1NzVkODJlMDkxZjdkNmFjMjVhN2IyNTYyMjZjNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9BaIkl0mEFFstuGN/IB4br/uUIk ZXuFPdLWusz8fehjz3PEOa+TAU/ewH3KlMW+P9mjINy1mJ0FQy3+SLRXUYmRCKAy bGmcQRQ+MtfX4VLPbX5DmwLWJvXgujjaRojhA3MsYzybPf6UT6wuIp1QCiERcLUi Vq0S4gnZ9WVf3faNbvsFOUuZz5THLLoWqGNy+Hp82r8MMNnF5VndjdBpmrTSdYhf zyykhAe+oiRPydWLGb+fGzpRh/p0yUuKZmGkH5gAftIMUYcVpZNolWQSQfB81B/O aDDl+JIXVbFNt2UXOPXrx02wG054gtqkJfyqwW/gKceBfszSyVv/PNEK7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL8UQECFddguCR99asJaeyViJsVlMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvdnhSQVFJVjEyQzRKSDMxcXdscDdKV0lteFdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT2L0AwQA ufoaMA0GCSqGSIb3DQEBCwUAA4IBAQAJl3tD5Sz6p/UKQXK9kI747jZgFeWj45HQ oq9UV2JIj/nEGrXF3XUAJ363f2PYlXc2Hk5XpqQvidvqzjMIREtx+HACvCBeDYO+ Xl6mYG2vCzZ6sWwDzo6ZEvxUJx53WiflrNjefuSnZDBxfNYy0TNtLXy4Jpa/aSso IOQRYW0oOI3Qe+BHXZi7XFuZncsZyYP/eLvGgUg0fmdB+HM+nc7wk01QvGw/uzoz huu5nNwpZwP6XT1cS3VJ9js368DLsvd6ZkmHqOu1QLqwP6GFLwwaguPFD8qIyT9G sAE94a1qfyPL3GvA7NTtvefgjFhkl6NTZTtYzmYLENzgudC5PC9d -----END CERTIFICATE-----Generated at Sat Dec 20 22:10:29 2025 by rpki-client