This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Va_brvnCMoUbz2GT2ZGvQQW66JM.roa File: Va_brvnCMoUbz2GT2ZGvQQW66JM.roa (raw, json) Hash identifier: vuqtEPuRh9TElgPQvR/bhHGqA4JQRphVL6kQTwCzViw= Subject key identifier: 55:AF:DB:AE:F9:C2:32:85:1B:CF:61:93:D9:91:AF:41:05:BA:E8:93 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019A96FDF732D7572A0CE4A220D243B6B85D Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Va_brvnCMoUbz2GT2ZGvQQW66JM.roa Signing time: Tue 18 Nov 2025 12:43:37 +0000 ROA not before: Tue 18 Nov 2025 12:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12722 IP address blocks: 46.150.248.0/24 maxlen: 24 46.150.249.0/24 maxlen: 24 85.235.81.0/24 maxlen: 24 91.241.180.0/24 maxlen: 24 91.241.181.0/24 maxlen: 24 176.103.82.0/24 maxlen: 24 192.109.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:fd:f7:32:d7:57:2a:0c:e4:a2:20:d2:43:b6:b8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Nov 18 12:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=55afdbaef9c232851bcf6193d991af4105bae893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:e8:20:7a:ec:aa:2f:1b:0a:63:a0:2c:f1: cc:6b:c6:e5:91:9a:7f:33:c6:4b:30:4d:d2:78:0e: ec:77:bb:21:e7:ba:db:43:3e:ac:03:18:c1:65:7f: ed:94:54:66:c4:dd:cf:50:bb:38:2c:4a:3a:8e:aa: 27:15:b1:5f:48:db:23:4e:88:88:f1:34:0c:62:c3: c5:c6:4b:53:d8:7f:5e:6a:88:35:24:d6:aa:50:5b: 67:26:2e:2a:6b:3d:d0:8f:3b:3b:9d:29:7b:a8:b2: af:8e:00:2c:18:7d:4a:1d:82:5e:31:89:d8:16:93: b9:a3:a7:d3:b1:69:b9:c4:4c:b4:80:d9:73:95:c9: 95:e9:da:61:c9:47:b5:fa:6b:a0:75:65:9a:30:87: 21:fb:57:71:ee:2d:f4:2b:d1:0e:3f:50:82:bd:64: 48:52:ad:f4:bb:54:9c:74:48:aa:4c:80:f0:71:33: e9:15:dd:ee:83:b4:e2:38:52:c7:75:a5:91:09:2b: c3:92:4b:9a:de:cb:27:c3:fc:1a:70:2d:8d:6d:5c: 64:71:f1:0e:ec:87:f2:31:fc:ec:4e:d2:2e:03:d8: 0c:af:dc:ce:ff:6f:cf:ef:97:5b:af:dc:08:dc:83: 43:23:e8:0e:6e:b7:b8:d4:bc:79:44:83:d0:27:a9: b3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AF:DB:AE:F9:C2:32:85:1B:CF:61:93:D9:91:AF:41:05:BA:E8:93 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Va_brvnCMoUbz2GT2ZGvQQW66JM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.150.248.0/23 85.235.81.0/24 91.241.180.0/23 176.103.82.0/24 192.109.97.0/24 Signature Algorithm: sha256WithRSAEncryption 30:a6:f8:ba:99:bb:6a:a0:ef:4e:38:80:51:3a:3f:7d:bb:9b: 9a:7e:9b:9a:33:90:ce:7a:fc:52:aa:80:ab:54:51:1f:21:d6: 09:9c:cc:68:20:11:7b:8f:1e:84:0c:fa:7d:09:a7:21:b2:e7: 5c:71:38:ab:21:15:bc:bb:93:31:fe:c9:3c:42:01:74:1d:7d: 76:30:7c:ab:d9:f0:96:63:33:8d:16:04:d2:12:e4:74:1d:74: ae:15:ef:89:a7:c1:bd:7e:51:54:41:64:2b:ef:85:ca:b7:db: ea:ba:bb:e1:62:3b:47:32:39:05:ad:45:aa:4a:e3:eb:c5:8a: 32:c0:d6:8f:e2:c5:8b:93:8b:1b:48:cd:a4:c9:fc:c0:ac:f7: 06:a3:17:69:2c:83:25:8e:3b:19:cf:d6:d8:80:ec:5c:9a:db: 85:04:59:c7:d4:13:dd:a4:0a:b2:73:f7:32:1f:0f:5e:d8:a7: 68:60:e2:c2:0a:52:c0:41:7a:42:ad:35:e6:e7:88:71:6e:5c: 24:fc:97:08:0e:46:af:16:b5:39:91:9f:2e:47:43:35:a8:2e: a5:fc:6c:7b:1e:c6:84:3f:88:7f:da:34:9e:69:30:df:ec:69: e9:37:c8:1e:a2:ab:3f:c8:b5:76:b2:d1:e7:e8:db:7e:b3:5c: 8e:11:73:81 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqW/fcy11cqDOSiINJDtrhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMTE4MTI0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWFmZGJhZWY5YzIzMjg1MWJjZjYxOTNkOTkxYWY0MTA1YmFlODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3noIHrsqi8bCmOgLPHMa8blkZp/ M8ZLME3SeA7sd7sh57rbQz6sAxjBZX/tlFRmxN3PULs4LEo6jqonFbFfSNsjToiI 8TQMYsPFxktT2H9eaog1JNaqUFtnJi4qaz3Qjzs7nSl7qLKvjgAsGH1KHYJeMYnY FpO5o6fTsWm5xEy0gNlzlcmV6dphyUe1+mugdWWaMIch+1dx7i30K9EOP1CCvWRI Uq30u1ScdEiqTIDwcTPpFd3ug7TiOFLHdaWRCSvDkkua3ssnw/wacC2NbVxkcfEO 7IfyMfzsTtIuA9gMr9zO/2/P75dbr9wI3INDI+gObre41Lx5RIPQJ6mzDQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFWv2675wjKFG89hk9mRr0EFuuiTMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvVmFfYnJ2bkNNb1ViejJHVDJaR3ZRUVc2NkpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLpb4AwQA VetRAwQBW/G0AwQAsGdSAwQAwG1hMA0GCSqGSIb3DQEBCwUAA4IBAQAwpvi6mbtq oO9OOIBROj99u5uafpuaM5DOevxSqoCrVFEfIdYJnMxoIBF7jx6EDPp9Cachsudc cTirIRW8u5Mx/sk8QgF0HX12MHyr2fCWYzONFgTSEuR0HXSuFe+Jp8G9flFUQWQr 74XKt9vqurvhYjtHMjkFrUWqSuPrxYoywNaP4sWLk4sbSM2kyfzArPcGoxdpLIMl jjsZz9bYgOxcmtuFBFnH1BPdpAqyc/cyHw9e2KdoYOLCClLAQXpCrTXm54hxblwk /JcIDkavFrU5kZ8uR0M1qC6l/Gx7HsaEP4h/2jSeaTDf7GnpN8geoqs/yLV2stHn 6Nt+s1yOEXOB -----END CERTIFICATE-----Generated at Sat Dec 6 16:16:34 2025 by rpki-client