This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vouAuTxkDs7Fx9PeGiuU9eeofwI.roa File: vouAuTxkDs7Fx9PeGiuU9eeofwI.roa (raw, json) Hash identifier: AHJFQQsfjcStfOSuO7/Q/wPGNDVHMGuj2k97GnlSGLA= Subject key identifier: BE:8B:80:B9:3C:64:0E:CE:C5:C7:D3:DE:1A:2B:94:F5:E7:A8:7F:02 Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019B36718D13998F4502B92A478EC183CB52 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vouAuTxkDs7Fx9PeGiuU9eeofwI.roa Signing time: Fri 19 Dec 2025 11:49:29 +0000 ROA not before: Fri 19 Dec 2025 11:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 45.155.240.0/24 maxlen: 24 194.143.210.0/24 maxlen: 24 195.114.203.0/24 maxlen: 24 213.220.2.0/24 maxlen: 24 213.220.4.0/24 maxlen: 24 213.220.6.0/24 maxlen: 24 213.220.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:71:8d:13:99:8f:45:02:b9:2a:47:8e:c1:83:cb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Dec 19 11:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be8b80b93c640ecec5c7d3de1a2b94f5e7a87f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:48:dd:52:74:d6:4a:51:4a:d8:75:5e:6b: 40:90:8f:16:5f:21:7e:cc:f4:86:55:a2:32:fe:be: 9c:72:ec:cb:f9:5d:19:9c:d6:de:35:8d:88:9d:9d: 5f:45:57:2a:a0:cd:d3:53:86:22:9e:d7:c1:df:bf: 21:5d:c7:94:04:52:c9:03:61:5e:5a:d6:e5:fa:27: 34:24:df:97:30:0c:14:97:3f:e4:81:98:80:65:e2: 76:d3:3b:07:e0:45:82:24:6c:61:47:9b:06:bf:23: 6d:a1:28:50:36:8d:51:45:7b:8a:b6:12:de:dc:17: fe:3d:63:46:e4:d9:0c:41:52:76:c0:39:0d:b6:a6: 8f:5f:4c:c9:8c:4a:01:4f:d6:79:2b:f9:57:e6:3b: ab:4c:47:62:4e:0d:d3:3b:72:d8:e5:a7:b9:5e:c3: 5f:a9:f2:62:f5:33:d8:03:ec:05:2a:e9:e5:1d:cc: 66:3d:55:cd:83:72:d8:68:6d:29:1b:86:88:c0:57: 54:39:43:1d:63:e0:ee:19:39:59:5c:94:0e:32:d1: 9e:9f:9f:0a:c2:f2:ed:fa:b6:6b:0b:c1:c3:1a:32: 4a:ef:c3:55:86:86:db:45:49:ef:7e:bf:10:98:1d: 77:f5:d5:1b:11:09:86:80:3f:0e:af:85:a6:f5:3a: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8B:80:B9:3C:64:0E:CE:C5:C7:D3:DE:1A:2B:94:F5:E7:A8:7F:02 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/vouAuTxkDs7Fx9PeGiuU9eeofwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.240.0/24 194.143.210.0/24 195.114.203.0/24 213.220.2.0/24 213.220.4.0/24 213.220.6.0/24 213.220.41.0/24 Signature Algorithm: sha256WithRSAEncryption b0:a3:bf:61:89:07:fe:0e:70:96:48:a6:b2:76:c1:bb:65:56: 4e:b7:8b:15:ec:ca:fd:bc:f5:95:8e:a1:98:86:6a:8b:9f:45: d6:4c:32:c6:89:9f:26:ed:84:01:8e:34:6a:f2:66:e0:54:e8: 27:f3:e8:66:de:1d:b4:80:6a:95:5b:04:95:07:3b:21:ac:7e: af:5c:50:c3:57:e2:e5:5e:b6:50:e8:b7:96:c5:71:6b:7f:4b: 42:14:4f:06:00:10:e2:39:35:38:e4:03:4a:24:79:a2:aa:46: 78:16:35:19:e4:e4:3c:a7:27:16:3c:47:dd:f0:84:1d:ce:f7: 3b:c7:c2:e8:af:2c:20:57:95:bf:94:75:92:c4:f9:bb:d8:3d: 32:66:af:d3:a9:c1:3e:b3:c4:e9:c3:c1:fc:fa:c0:b3:f8:ee: 24:fc:5e:70:8f:4a:d6:cc:9a:5f:00:b9:8a:5a:d2:aa:c4:ec: 1d:16:ac:5b:c9:0d:01:24:bb:da:25:89:c9:e9:33:cd:7f:53: 08:1e:d6:34:7d:1f:44:d8:a0:1b:d1:e9:06:d0:5f:b7:bc:80: fb:3d:fe:fd:2c:bd:50:76:6c:b3:97:cd:f2:5b:73:10:f8:80: 35:67:d9:49:51:4e:4d:f6:16:db:ec:9c:b9:73:e2:6b:4e:30: f3:da:7a:9c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZs2cY0TmY9FArkqR47Bg8tSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMjE5MTE0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZThiODBiOTNjNjQwZWNlYzVjN2QzZGUxYTJiOTRmNWU3YTg3ZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuJI3VJ01kpRSth1XmtAkI8WXyF+ zPSGVaIy/r6ccuzL+V0ZnNbeNY2InZ1fRVcqoM3TU4YintfB378hXceUBFLJA2Fe Wtbl+ic0JN+XMAwUlz/kgZiAZeJ20zsH4EWCJGxhR5sGvyNtoShQNo1RRXuKthLe 3Bf+PWNG5NkMQVJ2wDkNtqaPX0zJjEoBT9Z5K/lX5jurTEdiTg3TO3LY5ae5XsNf qfJi9TPYA+wFKunlHcxmPVXNg3LYaG0pG4aIwFdUOUMdY+DuGTlZXJQOMtGen58K wvLt+rZrC8HDGjJK78NVhobbRUnvfr8QmB139dUbEQmGgD8Or4Wm9TrenQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFL6LgLk8ZA7OxcfT3horlPXnqH8CMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvdm91QXVUeGtEczdGeDlQZUdpdVU5ZWVvZndJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALZvwAwQA wo/SAwQAw3LLAwQA1dwCAwQA1dwEAwQA1dwGAwQA1dwpMA0GCSqGSIb3DQEBCwUA A4IBAQCwo79hiQf+DnCWSKaydsG7ZVZOt4sV7Mr9vPWVjqGYhmqLn0XWTDLGiZ8m 7YQBjjRq8mbgVOgn8+hm3h20gGqVWwSVBzshrH6vXFDDV+LlXrZQ6LeWxXFrf0tC FE8GABDiOTU45ANKJHmiqkZ4FjUZ5OQ8pycWPEfd8IQdzvc7x8LorywgV5W/lHWS xPm72D0yZq/TqcE+s8Tpw8H8+sCz+O4k/F5wj0rWzJpfALmKWtKqxOwdFqxbyQ0B JLvaJYnJ6TPNf1MIHtY0fR9E2KAb0ekG0F+3vID7Pf79LL1Qdmyzl83yW3MQ+IA1 Z9lJUU5N9hbb7Jy5c+JrTjDz2nqc -----END CERTIFICATE-----Generated at Sat Dec 20 22:18:14 2025 by rpki-client