This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VFJ7sxwYhLBFK2ENdP5dseR3EEk.roa File: VFJ7sxwYhLBFK2ENdP5dseR3EEk.roa (raw, json) Hash identifier: Cwvq76WhvhYKbMQk/MC+3+0R/mFdmQJ+7ug7xGI3Foo= Subject key identifier: 54:52:7B:B3:1C:18:84:B0:45:2B:61:0D:74:FE:5D:B1:E4:77:10:49 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B35A7397BA24FF81AC4B2D6D013C10F1C Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VFJ7sxwYhLBFK2ENdP5dseR3EEk.roa Signing time: Fri 19 Dec 2025 08:08:30 +0000 ROA not before: Fri 19 Dec 2025 08:08:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211522 IP address blocks: 45.142.122.0/24 maxlen: 24 91.103.252.0/24 maxlen: 24 91.103.253.0/24 maxlen: 24 185.17.0.0/24 maxlen: 24 185.106.93.0/24 maxlen: 24 185.106.94.0/24 maxlen: 24 185.112.83.0/24 maxlen: 24 185.125.230.0/24 maxlen: 24 185.174.136.0/24 maxlen: 24 185.174.137.0/24 maxlen: 24 185.229.65.0/24 maxlen: 24 185.229.66.0/24 maxlen: 24 194.67.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a7:39:7b:a2:4f:f8:1a:c4:b2:d6:d0:13:c1:0f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Dec 19 08:08:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54527bb31c1884b0452b610d74fe5db1e4771049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:76:05:b4:cf:8e:4b:12:3b:e6:b4:36:d2: 61:92:5b:65:f7:d0:c9:d1:ab:92:3a:a7:87:3b:ed: 90:e4:bd:8d:a5:84:18:28:14:e3:ac:5c:e2:29:6d: de:59:a2:44:93:e3:8e:ad:e5:91:53:ec:a0:62:07: b6:35:1b:28:af:36:67:91:e5:2c:6f:3b:19:d2:f5: 29:c7:46:24:ee:c2:87:4f:9c:99:1e:d7:a3:5a:f3: 59:29:3d:98:6d:5a:e3:78:5d:df:48:3a:23:82:ee: f1:4c:c8:ea:bc:9d:82:4d:4e:64:10:8c:63:86:74: 0e:9e:5d:ff:dd:09:27:b5:56:ff:18:95:09:a8:32: d5:1b:c2:d7:26:37:f9:3c:5d:94:44:5c:40:0e:59: 19:9f:6b:e3:9e:cf:b3:96:98:25:85:46:5e:b7:b3: 0d:33:ae:65:b4:13:71:18:68:df:2e:1b:c6:c1:40: 87:d1:f9:0f:69:09:40:64:6e:0f:c0:db:7d:c6:c3: f1:bb:af:d0:d8:b0:a6:85:fe:51:cd:ce:10:e4:ef: 1d:c6:8e:a6:98:34:c8:cf:1f:c8:19:52:b4:9b:f5: 1c:70:ea:00:90:be:ca:3d:1f:c3:a7:5d:96:db:f8: 15:f3:52:4c:49:66:19:08:00:7e:6c:16:12:f0:fe: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:52:7B:B3:1C:18:84:B0:45:2B:61:0D:74:FE:5D:B1:E4:77:10:49 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/VFJ7sxwYhLBFK2ENdP5dseR3EEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.122.0/24 91.103.252.0/23 185.17.0.0/24 185.106.93.0-185.106.94.255 185.112.83.0/24 185.125.230.0/24 185.174.136.0/23 185.229.65.0-185.229.66.255 194.67.201.0/24 Signature Algorithm: sha256WithRSAEncryption 63:b4:9f:4c:12:a1:c7:6f:af:21:78:b5:3c:d7:d9:fd:aa:74: a9:48:82:7c:d1:1e:4d:bf:cf:e3:36:f9:fb:83:33:91:f3:7a: d2:eb:e3:3b:dd:06:3b:c6:b3:05:e8:b0:2b:bd:e8:f1:4c:8d: 65:03:8d:7f:19:0e:8e:81:ea:27:0c:de:fe:ed:29:10:b8:30: f1:e4:01:f0:2a:f4:cd:cc:ae:b9:13:3d:8e:70:bd:b0:ad:e3: 27:9f:a0:77:44:a0:e2:d1:00:14:62:fa:51:1b:cd:42:0b:ed: e4:e7:9c:f0:7c:97:57:59:70:41:7a:2f:7b:b0:42:38:ed:db: 00:14:f9:a2:ef:dd:2e:72:b0:ab:4a:21:f3:21:95:7f:ed:ee: a0:6e:3d:b1:a7:8a:fe:5f:90:3e:39:c8:4c:78:95:7d:33:a7: 8d:0c:c5:c0:71:5b:3c:63:6f:45:11:fe:95:74:9b:4e:b5:68: 0c:8f:46:49:fd:90:cb:80:4e:1f:8f:5f:04:7a:d7:37:33:ed: 20:69:92:a2:82:ca:81:72:8f:c1:51:d7:23:ab:d3:22:2f:ed: 75:a8:a5:15:e7:7f:fb:63:19:25:28:39:0b:81:c2:6b:58:b7: b4:ad:0e:84:12:e3:05:1e:61:f3:82:50:3d:b4:17:61:35:72: c3:9f:d3:d6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZs1pzl7ok/4GsSy1tATwQ8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMjE5MDgwODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDUyN2JiMzFjMTg4NGIwNDUyYjYxMGQ3NGZlNWRiMWU0NzcxMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pR2BbTPjksSO+a0NtJhkltl99DJ 0auSOqeHO+2Q5L2NpYQYKBTjrFziKW3eWaJEk+OOreWRU+ygYge2NRsorzZnkeUs bzsZ0vUpx0Yk7sKHT5yZHtejWvNZKT2YbVrjeF3fSDojgu7xTMjqvJ2CTU5kEIxj hnQOnl3/3QkntVb/GJUJqDLVG8LXJjf5PF2URFxADlkZn2vjns+zlpglhUZet7MN M65ltBNxGGjfLhvGwUCH0fkPaQlAZG4PwNt9xsPxu6/Q2LCmhf5Rzc4Q5O8dxo6m mDTIzx/IGVK0m/UccOoAkL7KPR/Dp12W2/gV81JMSWYZCAB+bBYS8P7r5wIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFFRSe7McGISwRSthDXT+XbHkdxBJMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvVkZKN3N4d1loTEJGSzJFTmRQNWRzZVIzRUVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQALY56AwQB W2f8AwQAuREAMAwDBAC5al0DBAC5al4DBAC5cFMDBAC5feYDBAG5rogwDAMEALnl QQMEALnlQgMEAMJDyTANBgkqhkiG9w0BAQsFAAOCAQEAY7SfTBKhx2+vIXi1PNfZ /ap0qUiCfNEeTb/P4zb5+4MzkfN60uvjO90GO8azBeiwK73o8UyNZQONfxkOjoHq Jwze/u0pELgw8eQB8Cr0zcyuuRM9jnC9sK3jJ5+gd0Sg4tEAFGL6URvNQgvt5Oec 8HyXV1lwQXove7BCOO3bABT5ou/dLnKwq0oh8yGVf+3uoG49saeK/l+QPjnITHiV fTOnjQzFwHFbPGNvRRH+lXSbTrVoDI9GSf2Qy4BOH49fBHrXNzPtIGmSooLKgXKP wVHXI6vTIi/tdailFed/+2MZJSg5C4HCa1i3tK0OhBLjBR5h84JQPbQXYTVyw5/T 1g== -----END CERTIFICATE-----Generated at Sat Dec 20 00:12:52 2025 by rpki-client