This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/NPMvSU7VVQ4X5ghXddqolgoFaS8.roa File: NPMvSU7VVQ4X5ghXddqolgoFaS8.roa (raw, json) Hash identifier: zvFD6huqKjrom3pCrtLJ4t9UWyxCh2M+E0umnAtiNE4= Subject key identifier: 34:F3:2F:49:4E:D5:55:0E:17:E6:08:57:75:DA:A8:96:0A:05:69:2F Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9 Certificate serial: 019B0C7541ACAFD6A3152D5AB92615361E08 Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/NPMvSU7VVQ4X5ghXddqolgoFaS8.roa Signing time: Thu 11 Dec 2025 08:09:29 +0000 ROA not before: Thu 11 Dec 2025 08:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25540 IP address blocks: 109.239.114.0/23 maxlen: 24 109.239.114.0/24 maxlen: 24 109.239.115.0/24 maxlen: 24 109.239.124.0/24 maxlen: 24 159.100.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:75:41:ac:af:d6:a3:15:2d:5a:b9:26:15:36:1e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9 Validity Not Before: Dec 11 08:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=34f32f494ed5550e17e6085775daa8960a05692f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:29:75:c5:ea:98:e7:52:7b:dd:a8:aa:14: 9b:83:05:12:98:f3:f6:e0:05:e2:b0:7a:e2:b2:49: e0:3f:e8:84:c2:d7:15:b1:db:25:53:f3:92:1c:2e: 9f:ec:36:08:13:80:ac:c1:c2:0b:ca:0c:be:88:22: f1:7d:9d:b4:7b:60:b8:0b:40:61:ca:a7:99:10:7e: a9:46:b0:1c:f9:6e:29:8f:d7:72:31:58:12:47:71: 91:15:73:0a:46:f9:0b:77:6d:f8:f4:da:1c:01:78: 3b:38:23:b0:54:3c:f9:ec:d6:47:e3:7d:dc:1a:30: 90:67:fc:e0:13:6d:62:99:ab:ae:d6:28:fe:f0:76: eb:7d:48:d9:97:42:c1:5a:3a:5a:72:bc:9d:53:1e: 58:7d:b4:34:b2:12:04:52:48:dd:98:36:94:fa:f5: 90:7c:b0:79:0f:d3:e5:cb:c7:83:d7:14:31:85:ca: 74:32:a7:8b:c5:49:65:3b:21:21:7a:a3:c1:0a:6d: 94:7c:33:b0:b5:30:ee:48:72:86:c6:43:8d:83:79: e1:54:07:84:c9:46:3a:fb:88:37:03:11:9e:50:16: 3e:93:56:1c:bf:a9:bd:57:3a:34:95:6e:fe:89:97: 1c:c6:44:fe:ee:15:0a:41:43:8b:04:3b:00:52:57: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F3:2F:49:4E:D5:55:0E:17:E6:08:57:75:DA:A8:96:0A:05:69:2F X509v3 Authority Key Identifier: keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/NPMvSU7VVQ4X5ghXddqolgoFaS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.239.114.0/23 109.239.124.0/24 159.100.36.0/23 Signature Algorithm: sha256WithRSAEncryption a8:3f:5a:58:18:24:78:76:83:b9:77:90:9a:09:ed:95:ad:76: 77:81:26:37:6b:ae:da:50:a8:d6:a5:39:07:75:51:e0:12:b3: c1:f6:c3:17:5c:4c:d4:ab:35:6b:98:fe:36:5b:b8:46:53:2e: 17:ad:9a:ed:ce:5d:94:84:e0:20:46:d0:1b:bc:46:28:aa:9e: ed:48:9e:f6:78:cd:6f:ee:ca:37:3a:a4:0b:c4:86:b8:a3:00: 64:c7:96:a9:80:1f:e4:41:6a:a3:91:4f:f8:f1:01:40:f9:aa: d9:36:6a:85:cc:14:6e:88:62:c1:30:1c:78:0e:52:7c:20:b6: e2:1e:c7:cc:a6:44:81:be:35:cd:a9:ff:5c:74:27:0c:47:cd: 36:ef:6a:28:31:5b:b4:85:09:6b:54:c5:c8:c4:5d:8d:d8:ab: ce:d3:a4:23:39:43:64:9f:a2:b8:27:d4:24:b2:ee:a2:c0:86: 46:e2:24:a8:64:d9:7f:50:f4:30:dc:65:89:70:aa:a2:1b:8b: 62:85:30:f0:f7:65:ba:41:c2:db:32:0f:cd:99:97:5a:38:28: 96:30:5f:5a:1f:0e:f2:d1:b9:be:56:40:25:b3:bf:a8:bd:f2: 90:6c:8a:57:9a:62:46:d7:d2:1a:3e:8f:6c:d1:e2:41:b3:67: ad:ad:ec:78 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsMdUGsr9ajFS1auSYVNh4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy YzA5ZjkwHhcNMjUxMjExMDgwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGYzMmY0OTRlZDU1NTBlMTdlNjA4NTc3NWRhYTg5NjBhMDU2OTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08QpdcXqmOdSe92oqhSbgwUSmPP2 4AXisHriskngP+iEwtcVsdslU/OSHC6f7DYIE4CswcILygy+iCLxfZ20e2C4C0Bh yqeZEH6pRrAc+W4pj9dyMVgSR3GRFXMKRvkLd2349NocAXg7OCOwVDz57NZH433c GjCQZ/zgE21imauu1ij+8HbrfUjZl0LBWjpacrydUx5YfbQ0shIEUkjdmDaU+vWQ fLB5D9Ply8eD1xQxhcp0MqeLxUllOyEheqPBCm2UfDOwtTDuSHKGxkONg3nhVAeE yUY6+4g3AxGeUBY+k1Ycv6m9Vzo0lW7+iZccxkT+7hUKQUOLBDsAUlenzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDTzL0lO1VUOF+YIV3XaqJYKBWkvMB8GA1UdIwQY MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt Y2U4ZGQ2ODk4YjI3LzEvTlBNdlNVN1ZWUTRYNWdoWGRkcW9sZ29GYVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3 LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBbe9yAwQA be98AwQBn2QkMA0GCSqGSIb3DQEBCwUAA4IBAQCoP1pYGCR4doO5d5CaCe2VrXZ3 gSY3a67aUKjWpTkHdVHgErPB9sMXXEzUqzVrmP42W7hGUy4XrZrtzl2UhOAgRtAb vEYoqp7tSJ72eM1v7so3OqQLxIa4owBkx5apgB/kQWqjkU/48QFA+arZNmqFzBRu iGLBMBx4DlJ8ILbiHsfMpkSBvjXNqf9cdCcMR80272ooMVu0hQlrVMXIxF2N2KvO 06QjOUNkn6K4J9Qksu6iwIZG4iSoZNl/UPQw3GWJcKqiG4tihTDw92W6QcLbMg/N mZdaOCiWMF9aHw7y0bm+VkAls7+ovfKQbIpXmmJG19IaPo9s0eJBs2etrex4 -----END CERTIFICATE-----Generated at Thu Dec 18 21:52:46 2025 by rpki-client