This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vchnlWc0Fsx6XPg2RwN6AZKMjuQ.roa File: vchnlWc0Fsx6XPg2RwN6AZKMjuQ.roa (raw, json) Hash identifier: +sfsLeR4aA8D9PpU6Hss1oGuVfC35Po3AfH+YNZA+6A= Subject key identifier: BD:C8:67:95:67:34:16:CC:7A:5C:F8:36:47:03:7A:01:92:8C:8E:E4 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B22968DB44551F91ABCAD93B3484EF53F Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vchnlWc0Fsx6XPg2RwN6AZKMjuQ.roa Signing time: Mon 15 Dec 2025 15:17:30 +0000 ROA not before: Mon 15 Dec 2025 15:17:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56766 IP address blocks: 31.133.38.0/23 maxlen: 24 31.133.43.0/24 maxlen: 24 176.124.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:96:8d:b4:45:51:f9:1a:bc:ad:93:b3:48:4e:f5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Dec 15 15:17:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bdc86795673416cc7a5cf83647037a01928c8ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a3:91:01:e7:60:98:30:f1:be:5a:af:f3:ae: 8b:6e:6d:59:be:ea:08:5a:45:d8:d2:b3:23:3f:0a: 00:b0:8a:dd:db:33:4d:65:f0:6c:6f:ad:13:0f:7c: 28:14:03:2a:2a:93:e5:04:3c:a2:64:1a:3e:4e:6c: 54:38:0c:c9:8c:ac:db:51:46:3c:68:4d:7b:65:1f: f6:24:07:96:07:e8:8d:19:c2:a9:b0:f4:f3:01:6b: 83:47:fa:b7:d3:42:55:db:54:1b:ae:d1:51:1e:e4: f4:70:e0:af:5a:28:04:07:25:65:13:e6:43:cb:f1: a3:8e:f6:89:6d:3e:b9:03:b8:c7:6e:d2:dd:10:7f: a8:20:b8:4f:3b:4e:6f:7b:27:56:25:24:29:a6:c6: 9a:70:6f:69:73:d6:d4:c2:56:86:57:cc:7a:df:16: 98:55:e8:40:d3:a9:27:a9:cd:8e:18:bd:de:7a:fd: e0:17:ac:96:c9:31:93:9c:61:2c:4d:c3:e4:c9:6a: a4:0f:98:5e:85:b3:3b:b0:e1:8e:a2:ff:08:b7:62: ec:e9:49:8b:a8:eb:18:3d:ce:16:b1:62:dc:86:a9: e3:0f:00:cf:42:53:1d:7c:d8:14:2f:7f:f9:33:6a: 89:43:a4:6e:9c:be:0a:77:68:16:58:10:a9:65:a0: d5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C8:67:95:67:34:16:CC:7A:5C:F8:36:47:03:7A:01:92:8C:8E:E4 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vchnlWc0Fsx6XPg2RwN6AZKMjuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.38.0/23 31.133.43.0/24 176.124.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:e1:3d:e1:1a:b6:74:fc:00:eb:50:7b:57:da:3a:dd:d3:48: f0:81:c8:b0:02:41:f0:c6:b5:c1:33:c8:4b:f1:01:6a:16:5a: f0:bd:01:be:32:35:65:3d:d8:88:f8:de:b8:72:42:a6:d1:08: 93:8b:05:d5:36:4a:8e:fc:a6:59:a9:fc:53:83:18:17:1f:80: 65:3b:b7:a6:b7:07:d6:17:1e:4a:e3:e2:fd:f2:69:3b:b8:56: 95:2c:0b:65:33:60:64:40:01:86:27:84:d0:aa:4a:7e:e5:ee: b8:01:e1:52:90:84:49:2e:34:5a:91:54:51:84:fe:ae:4b:e3: 84:6b:2e:1a:0c:ab:bf:29:7b:fe:e6:49:59:9c:56:81:6f:67: b5:2f:81:98:e0:d7:d6:c1:cd:c5:c3:a1:a8:7c:b6:4c:d5:df: 3b:47:a6:bb:5e:25:c4:74:71:29:71:52:8d:af:be:49:c9:9f: ff:5c:de:c5:23:5e:ea:2f:16:b8:df:14:32:04:49:35:17:7c: 31:20:97:d0:7f:fd:b1:6e:5f:16:16:29:ab:f2:5d:a2:a0:d6: 93:fa:f4:e8:52:a9:79:aa:b0:42:fd:03:4f:df:f4:a1:98:5b: 5e:6e:26:f2:a3:ae:c1:79:4f:85:cb:c5:0e:28:78:21:3b:f8: e9:aa:a9:f2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsilo20RVH5Grytk7NITvU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMjE1MTUxNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGM4Njc5NTY3MzQxNmNjN2E1Y2Y4MzY0NzAzN2EwMTkyOGM4ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aORAedgmDDxvlqv866Lbm1ZvuoI WkXY0rMjPwoAsIrd2zNNZfBsb60TD3woFAMqKpPlBDyiZBo+TmxUOAzJjKzbUUY8 aE17ZR/2JAeWB+iNGcKpsPTzAWuDR/q300JV21QbrtFRHuT0cOCvWigEByVlE+ZD y/GjjvaJbT65A7jHbtLdEH+oILhPO05veydWJSQppsaacG9pc9bUwlaGV8x63xaY VehA06knqc2OGL3eev3gF6yWyTGTnGEsTcPkyWqkD5hehbM7sOGOov8It2Ls6UmL qOsYPc4WsWLchqnjDwDPQlMdfNgUL3/5M2qJQ6RunL4Kd2gWWBCpZaDV0QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL3IZ5VnNBbMelz4NkcDegGSjI7kMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvdmNobmxXYzBGc3g2WFBnMlJ3TjZBWktNanVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBH4UmAwQA H4UrAwQAsHwUMA0GCSqGSIb3DQEBCwUAA4IBAQBu4T3hGrZ0/ADrUHtX2jrd00jw gciwAkHwxrXBM8hL8QFqFlrwvQG+MjVlPdiI+N64ckKm0QiTiwXVNkqO/KZZqfxT gxgXH4BlO7emtwfWFx5K4+L98mk7uFaVLAtlM2BkQAGGJ4TQqkp+5e64AeFSkIRJ LjRakVRRhP6uS+OEay4aDKu/KXv+5klZnFaBb2e1L4GY4NfWwc3Fw6GofLZM1d87 R6a7XiXEdHEpcVKNr75JyZ//XN7FI17qLxa43xQyBEk1F3wxIJfQf/2xbl8WFimr 8l2ioNaT+vToUql5qrBC/QNP3/ShmFtebibyo67BeU+Fy8UOKHghO/jpqqny -----END CERTIFICATE-----Generated at Sun Dec 21 09:28:05 2025 by rpki-client