This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/VRSYZLu7Iz3MKoqFG3i4WqE0-rk.roa File: VRSYZLu7Iz3MKoqFG3i4WqE0-rk.roa (raw, json) Hash identifier: rVUeHHbdH9yar6h0c5uw/E5qc8xRGnabT3yOgGA4TNA= Subject key identifier: 55:14:98:64:BB:BB:23:3D:CC:2A:8A:85:1B:78:B8:5A:A1:34:FA:B9 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B02FC9D330327D68649F0EE94D2EA8A81 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/VRSYZLu7Iz3MKoqFG3i4WqE0-rk.roa Signing time: Tue 09 Dec 2025 12:01:08 +0000 ROA not before: Tue 09 Dec 2025 12:01:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 45.154.120.0/22 maxlen: 24 77.83.48.0/23 maxlen: 24 77.83.48.0/24 maxlen: 24 77.83.49.0/24 maxlen: 24 86.62.53.0/24 maxlen: 24 86.62.54.0/24 maxlen: 24 88.218.81.0/24 maxlen: 24 88.218.82.0/23 maxlen: 24 91.245.238.0/24 maxlen: 24 95.214.244.0/22 maxlen: 24 193.9.56.0/24 maxlen: 24 193.31.124.0/23 maxlen: 24 193.47.36.0/22 maxlen: 24 193.160.74.0/24 maxlen: 24 193.160.75.0/24 maxlen: 24 194.124.41.0/24 maxlen: 24 213.109.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:fc:9d:33:03:27:d6:86:49:f0:ee:94:d2:ea:8a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Dec 9 12:01:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=55149864bbbb233dcc2a8a851b78b85aa134fab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:05:b9:2a:f2:d0:62:45:30:7c:60:9b:c0: 63:fe:2c:8e:57:d1:12:09:79:33:bf:7a:c0:dd:b6: 5a:bc:ef:a5:71:5d:de:8e:75:76:0c:03:cd:d1:09: d9:52:32:e1:98:47:04:68:9c:32:5c:83:d9:b0:e3: df:6b:33:4b:73:01:de:6c:ac:cd:3a:b3:63:d1:c4: 24:a7:fc:ce:d8:03:db:55:b4:6c:0e:b9:6e:5a:d7: 2a:01:9c:b8:87:d5:4d:a6:7a:5e:6b:c8:4d:ef:8f: ba:45:b0:30:74:30:42:f9:d1:4b:1a:11:fa:bb:4d: 5c:16:b1:31:ae:5b:ff:88:12:73:31:da:2b:02:8e: 7e:18:4a:34:c2:3c:2a:ed:0d:3c:d3:f2:96:41:f2: d9:4e:60:ad:c8:22:07:a0:ff:99:c4:51:52:a0:bc: 9f:d4:16:69:3e:0b:b6:37:43:01:d1:2d:41:e1:be: 7d:7b:8f:d6:48:2f:9a:34:d0:c4:99:e4:15:99:7b: 87:5d:a7:e0:96:d1:64:63:1c:9e:a0:63:2b:d2:23: b0:fa:c8:de:ea:84:92:7a:55:5d:83:02:27:1a:18: f7:eb:5b:76:ee:d7:eb:32:2e:8a:76:61:26:7d:12: 58:b6:e9:3c:55:25:82:ea:0e:e1:7d:26:73:d7:41: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:14:98:64:BB:BB:23:3D:CC:2A:8A:85:1B:78:B8:5A:A1:34:FA:B9 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/VRSYZLu7Iz3MKoqFG3i4WqE0-rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.120.0/22 77.83.48.0/23 86.62.53.0-86.62.54.255 88.218.81.0-88.218.83.255 91.245.238.0/24 95.214.244.0/22 193.9.56.0/24 193.31.124.0/23 193.47.36.0/22 193.160.74.0/23 194.124.41.0/24 213.109.188.0/22 Signature Algorithm: sha256WithRSAEncryption 68:30:94:7b:5d:e6:78:31:5f:8f:c3:e1:96:9e:b6:0f:5b:51: f2:a3:05:ec:62:a2:18:1c:56:18:c9:c0:c8:63:98:f0:86:91: 1e:46:82:01:be:49:2b:65:4d:71:6a:91:72:ed:7a:54:f0:ad: 1e:4c:a4:4d:a3:21:6d:88:50:2e:50:9f:50:79:89:fa:54:28: 64:da:bd:61:92:08:70:a2:03:b6:0a:59:87:c2:10:3d:fa:db: 51:0c:ac:79:20:79:95:0c:e0:78:22:c1:f3:ec:28:1a:da:b1: a4:c5:97:45:ce:58:36:33:39:79:34:2a:60:aa:f3:38:4d:e5: 6b:cb:6c:f9:76:87:0b:42:6e:86:d7:04:3c:b4:1e:7c:fa:d0: 79:24:52:a3:17:bc:86:7f:dd:33:d0:9f:dd:b4:f4:07:a4:27: 55:e9:0a:23:d6:30:b4:08:91:95:ac:8e:ed:9d:c4:9b:11:58: 38:6b:ae:20:ba:a7:05:1a:05:04:24:97:11:bc:cd:64:98:ba: 31:91:81:1e:db:21:13:c7:fa:2b:60:ba:f1:a9:42:fb:4d:63: 47:01:cb:48:de:23:15:fa:98:29:62:04:64:bd:c4:7a:78:fb: db:62:ee:ca:33:94:2a:c2:71:5e:57:47:16:54:6f:7c:bc:60: 50:f6:0d:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZsC/J0zAyfWhknw7pTS6oqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjUxMjA5MTIwMTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTE0OTg2NGJiYmIyMzNkY2MyYThhODUxYjc4Yjg1YWExMzRmYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiwFuSry0GJFMHxgm8Bj/iyOV9ES CXkzv3rA3bZavO+lcV3ejnV2DAPN0QnZUjLhmEcEaJwyXIPZsOPfazNLcwHebKzN OrNj0cQkp/zO2APbVbRsDrluWtcqAZy4h9VNpnpea8hN74+6RbAwdDBC+dFLGhH6 u01cFrExrlv/iBJzMdorAo5+GEo0wjwq7Q080/KWQfLZTmCtyCIHoP+ZxFFSoLyf 1BZpPgu2N0MB0S1B4b59e4/WSC+aNNDEmeQVmXuHXafgltFkYxyeoGMr0iOw+sje 6oSSelVdgwInGhj361t27tfrMi6KdmEmfRJYtuk8VSWC6g7hfSZz10GoKwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFFUUmGS7uyM9zCqKhRt4uFqhNPq5MB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvVlJTWVpMdTdJejNNS29xRkczaTRXcUUwLXJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQCLZp4AwQB TVMwMAwDBABWPjUDBABWPjYwDAMEAFjaUQMEAljaUAMEAFv17gMEAl/W9AMEAMEJ OAMEAcEffAMEAsEvJAMEAcGgSgMEAMJ8KQMEAtVtvDANBgkqhkiG9w0BAQsFAAOC AQEAaDCUe13meDFfj8Phlp62D1tR8qMF7GKiGBxWGMnAyGOY8IaRHkaCAb5JK2VN cWqRcu16VPCtHkykTaMhbYhQLlCfUHmJ+lQoZNq9YZIIcKIDtgpZh8IQPfrbUQys eSB5lQzgeCLB8+woGtqxpMWXRc5YNjM5eTQqYKrzOE3la8ts+XaHC0JuhtcEPLQe fPrQeSRSoxe8hn/dM9Cf3bT0B6QnVekKI9YwtAiRlayO7Z3EmxFYOGuuILqnBRoF BCSXEbzNZJi6MZGBHtshE8f6K2C68alC+01jRwHLSN4jFfqYKWIEZL3Eenj722Lu yjOUKsJxXldHFlRvfLxgUPYNEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:34:21 2025 by rpki-client