This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/VippXv6P37a_HWUsJKzrXMsT_7o.roa File: VippXv6P37a_HWUsJKzrXMsT_7o.roa (raw, json) Hash identifier: CzlLA7YeTFuz8+dgTCtbqax7U6Kd7C5qz1Hkvi6wr5A= Subject key identifier: 56:2A:69:5E:FE:8F:DF:B6:BF:1D:65:2C:24:AC:EB:5C:CB:13:FF:BA Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Certificate serial: 019B2F3A0304878F5EBCC0C5C9C44694740E Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/VippXv6P37a_HWUsJKzrXMsT_7o.roa Signing time: Thu 18 Dec 2025 02:11:29 +0000 ROA not before: Thu 18 Dec 2025 02:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1680 IP address blocks: 193.110.180.0/23 maxlen: 24 2a14:dc00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:3a:03:04:87:8f:5e:bc:c0:c5:c9:c4:46:94:74:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Validity Not Before: Dec 18 02:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=562a695efe8fdfb6bf1d652c24aceb5ccb13ffba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:af:8b:1d:d9:d8:33:23:f2:fa:ed:26:d2: 43:a1:e9:99:5e:12:78:58:76:cd:39:12:7a:40:6e: fa:0b:df:c2:11:2d:4a:95:67:84:c6:ed:bc:c9:30: 70:9f:45:9d:95:47:47:ef:6e:eb:63:58:27:8b:c1: f2:b5:a8:92:75:7a:f7:03:55:3f:94:1c:08:cd:4c: b8:c0:45:57:04:5b:1e:b8:b9:97:83:01:54:34:e7: a4:a8:45:23:23:f9:ff:1d:5a:ce:18:fa:79:4a:e9: be:a5:09:af:ef:20:f2:09:39:f7:33:9d:a2:e0:18: 3a:63:39:e3:a8:55:18:00:74:fc:80:53:fd:a8:9e: 41:13:14:2f:22:04:13:4b:04:57:82:74:fb:77:3b: 33:6b:fe:5f:e1:73:c9:9a:b7:f3:f1:ac:df:b9:03: 1c:82:45:0b:c8:66:63:1d:15:d4:0b:db:f8:c2:0f: d0:f1:bc:ad:d7:ae:71:55:99:8c:50:fc:92:5d:6a: b9:81:ea:f1:0c:bb:7c:78:be:3c:ef:ad:eb:23:85: f7:9d:52:d4:96:9b:ef:d3:a5:b6:eb:ed:41:46:f9: f7:de:3c:96:c4:33:a2:a4:3e:30:71:54:eb:d1:76: 88:02:73:15:c3:b3:74:5b:4c:f1:24:68:7e:fe:b0: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2A:69:5E:FE:8F:DF:B6:BF:1D:65:2C:24:AC:EB:5C:CB:13:FF:BA X509v3 Authority Key Identifier: keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/VippXv6P37a_HWUsJKzrXMsT_7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.180.0/23 IPv6: 2a14:dc00::/29 Signature Algorithm: sha256WithRSAEncryption 58:5d:40:be:83:2a:fb:f6:95:aa:aa:61:3b:41:0c:0a:58:79: eb:62:bd:26:2a:80:1a:aa:9b:f5:00:2d:1f:60:6a:ef:de:20: 83:0c:b1:a8:40:b5:cd:3f:af:25:77:9b:c9:b7:a6:ec:f6:8f: 55:87:a6:e4:a0:d4:e4:7a:68:65:9c:48:fa:3c:ec:88:b8:6f: a7:7b:63:30:e7:58:4e:97:4b:9b:9d:1e:ae:a3:d1:17:a4:21: c3:6b:30:44:54:ab:ce:8d:f3:02:98:24:7d:8e:47:22:41:a1: 93:32:6c:e3:e1:01:ca:e3:73:35:90:11:53:a0:7e:ee:23:8a: 88:7e:bc:e9:b4:69:a4:15:9e:8f:3a:b8:70:02:b4:bc:d8:4b: 97:58:e6:f0:e4:46:f5:c6:8f:2d:ca:6a:d1:f8:72:b3:43:29: 89:26:62:fb:51:a7:fd:e3:51:0b:36:0b:c5:2b:eb:61:79:1a: 57:70:60:c4:08:f0:e2:05:5d:e1:d2:e0:76:04:c1:fa:6d:92: 90:e5:ce:1e:79:0b:a6:b4:71:fc:a9:89:2d:0a:47:dd:70:89: 93:c7:c7:1d:94:7d:ce:00:79:0b:51:a5:ac:18:5c:24:de:4a: a2:46:b7:fd:c0:70:8c:f1:3f:68:9e:99:e4:74:f3:d2:c5:08: 0f:e5:09:5d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZsvOgMEh49evMDFycRGlHQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTM0ZjlkMWRiZDIwYWE4N2ZiMGY2MmJkMmI2YzVlMzBj NjE0YTIwHhcNMjUxMjE4MDIxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjJhNjk1ZWZlOGZkZmI2YmYxZDY1MmMyNGFjZWI1Y2NiMTNmZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrmvix3Z2DMj8vrtJtJDoemZXhJ4 WHbNORJ6QG76C9/CES1KlWeExu28yTBwn0WdlUdH727rY1gni8HytaiSdXr3A1U/ lBwIzUy4wEVXBFseuLmXgwFUNOekqEUjI/n/HVrOGPp5Sum+pQmv7yDyCTn3M52i 4Bg6YznjqFUYAHT8gFP9qJ5BExQvIgQTSwRXgnT7dzsza/5f4XPJmrfz8azfuQMc gkULyGZjHRXUC9v4wg/Q8byt165xVZmMUPySXWq5gerxDLt8eL48763rI4X3nVLU lpvv06W26+1BRvn33jyWxDOipD4wcVTr0XaIAnMVw7N0W0zxJGh+/rAiqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFYqaV7+j9+2vx1lLCSs61zLE/+6MB8GA1UdIwQY MBaAFDCjT50dvSCqh/sPYr0rbF4wxhSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEt ZWI2NTNkMzYyMmJiLzEvVmlwcFh2NlAzN2FfSFdVc0pLenJYTXNUXzdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEtZWI2NTNkMzYyMmJi LzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwW60MA0E AgACMAcDBQMqFNwAMA0GCSqGSIb3DQEBCwUAA4IBAQBYXUC+gyr79pWqqmE7QQwK WHnrYr0mKoAaqpv1AC0fYGrv3iCDDLGoQLXNP68ld5vJt6bs9o9Vh6bkoNTkemhl nEj6POyIuG+ne2Mw51hOl0ubnR6uo9EXpCHDazBEVKvOjfMCmCR9jkciQaGTMmzj 4QHK43M1kBFToH7uI4qIfrzptGmkFZ6POrhwArS82EuXWObw5Eb1xo8tymrR+HKz QymJJmL7Uaf941ELNgvFK+theRpXcGDECPDiBV3h0uB2BMH6bZKQ5c4eeQumtHH8 qYktCkfdcImTx8cdlH3OAHkLUaWsGFwk3kqiRrf9wHCM8T9onpnkdPPSxQgP5Qld -----END CERTIFICATE-----Generated at Thu Dec 18 23:49:33 2025 by rpki-client