This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vXpHgw9APsvCjoH3rUZ41JRN06E.roa File: vXpHgw9APsvCjoH3rUZ41JRN06E.roa (raw, json) Hash identifier: lNe+ZlzjG4kHEyfo7+uJmFKlviG8sBhxnhF7Yq/NIsU= Subject key identifier: BD:7A:47:83:0F:40:3E:CB:C2:8E:81:F7:AD:46:78:D4:94:4D:D3:A1 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B0D911322CAF7D58DF2778896CA009BC8 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vXpHgw9APsvCjoH3rUZ41JRN06E.roa Signing time: Thu 11 Dec 2025 13:19:30 +0000 ROA not before: Thu 11 Dec 2025 13:19:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213657 IP address blocks: 31.210.43.0/24 maxlen: 24 188.132.215.0/24 maxlen: 24 188.132.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:91:13:22:ca:f7:d5:8d:f2:77:88:96:ca:00:9b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 11 13:19:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd7a47830f403ecbc28e81f7ad4678d4944dd3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:b9:58:8b:6b:28:51:b9:48:54:c9:dc:80: 58:46:59:80:54:66:1a:f0:a1:f8:89:02:fd:16:fd: 81:3f:2d:21:22:52:be:21:85:81:eb:88:22:2c:de: c2:b9:01:67:9a:a9:e2:93:17:7c:50:65:b1:ef:69: c3:94:7f:4b:a9:b4:c1:b6:e3:c9:52:e2:d3:10:bc: a0:c9:0f:c9:bc:4a:32:55:07:90:2e:67:11:ad:34: 05:73:4e:42:7b:0f:02:bc:3b:39:42:cd:a5:98:cb: cc:f3:49:0e:c3:bc:22:25:5d:d8:d0:98:cb:62:a0: cf:49:92:3a:fd:03:c7:f7:4f:2c:8f:26:70:1e:d2: ad:2f:b0:d3:9c:6e:66:64:a8:ec:d5:4e:1d:56:65: 7b:bb:da:7d:30:a3:4e:0e:fd:59:cc:43:67:71:a5: 8c:1f:37:5f:bb:ea:08:f7:cb:9b:c4:76:a0:a3:1f: 68:83:19:ea:cb:f8:0a:80:95:bd:ca:db:a1:e7:06: 3f:15:39:8a:6b:d1:71:c0:87:f7:e7:23:d3:af:6a: d8:7d:72:02:a7:05:e8:1c:40:e3:17:8d:62:81:cb: 24:82:d0:45:98:85:ef:11:58:45:e8:29:bc:cc:8d: 94:d5:c7:59:5a:23:5f:31:a9:54:e4:c6:6d:f5:f3: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7A:47:83:0F:40:3E:CB:C2:8E:81:F7:AD:46:78:D4:94:4D:D3:A1 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vXpHgw9APsvCjoH3rUZ41JRN06E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.43.0/24 188.132.215.0/24 188.132.237.0/24 Signature Algorithm: sha256WithRSAEncryption 12:7d:f8:b1:54:6c:25:80:d5:e8:a7:65:c4:23:7c:34:62:73: e4:e4:95:d3:1c:42:7d:71:a9:9e:26:0b:da:d1:b6:88:f6:85: fe:8e:52:23:ea:82:00:b1:95:87:10:da:a9:22:af:20:21:68: 0f:34:2a:af:1d:26:7f:e2:c1:f6:eb:ab:46:c4:85:dc:85:38: c1:3d:59:93:5d:27:36:36:50:57:0f:c6:f8:90:44:97:1c:55: dd:2c:42:67:fd:e3:52:8e:f1:57:61:62:f0:b5:c9:87:74:40: 3e:dd:45:bf:4a:dc:fb:1d:43:cc:5a:ec:8d:66:83:c5:5e:a0: 0d:fd:14:ae:80:fa:71:35:52:15:c8:4f:d4:3c:b3:ac:83:2f: 4f:25:60:ae:87:94:bf:11:53:da:88:fe:4e:6a:d2:fb:3a:6f: 88:03:c4:ce:2e:c0:dc:6a:5d:a6:1a:f4:0e:b2:87:43:04:0f: cc:c4:33:34:18:30:ba:d6:8f:b1:ce:bf:20:d6:05:8c:97:d8: 16:7a:a2:73:1d:fd:1f:8c:5b:58:72:3d:6c:b2:7c:ca:09:fc: 3a:9e:e7:be:c7:67:f4:dc:d5:a2:29:ed:17:c3:73:b7:4a:3d: d8:b4:ea:5d:0b:d8:2b:e5:a9:19:d3:f9:4f:d7:33:7a:72:19: 96:67:6f:9d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsNkRMiyvfVjfJ3iJbKAJvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjExMTMxOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDdhNDc4MzBmNDAzZWNiYzI4ZTgxZjdhZDQ2NzhkNDk0NGRkM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1e5WItrKFG5SFTJ3IBYRlmAVGYa 8KH4iQL9Fv2BPy0hIlK+IYWB64giLN7CuQFnmqnikxd8UGWx72nDlH9LqbTBtuPJ UuLTELygyQ/JvEoyVQeQLmcRrTQFc05Cew8CvDs5Qs2lmMvM80kOw7wiJV3Y0JjL YqDPSZI6/QPH908sjyZwHtKtL7DTnG5mZKjs1U4dVmV7u9p9MKNODv1ZzENncaWM Hzdfu+oI98ubxHagox9ogxnqy/gKgJW9ytuh5wY/FTmKa9FxwIf35yPTr2rYfXIC pwXoHEDjF41igcskgtBFmIXvEVhF6Cm8zI2U1cdZWiNfMalU5MZt9fOhpwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL16R4MPQD7Lwo6B961GeNSUTdOhMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvdlhwSGd3OUFQc3ZDam9IM3JVWjQxSlJOMDZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH9IrAwQA vITXAwQAvITtMA0GCSqGSIb3DQEBCwUAA4IBAQASffixVGwlgNXop2XEI3w0YnPk 5JXTHEJ9cameJgva0baI9oX+jlIj6oIAsZWHENqpIq8gIWgPNCqvHSZ/4sH266tG xIXchTjBPVmTXSc2NlBXD8b4kESXHFXdLEJn/eNSjvFXYWLwtcmHdEA+3UW/Stz7 HUPMWuyNZoPFXqAN/RSugPpxNVIVyE/UPLOsgy9PJWCuh5S/EVPaiP5OatL7Om+I A8TOLsDcal2mGvQOsodDBA/MxDM0GDC61o+xzr8g1gWMl9gWeqJzHf0fjFtYcj1s snzKCfw6nue+x2f03NWiKe0Xw3O3Sj3YtOpdC9gr5akZ0/lP1zN6chmWZ2+d -----END CERTIFICATE-----Generated at Sat Dec 20 02:00:18 2025 by rpki-client