This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/VDE0EL23t5ZK3TnAJ4c3hO0ZuuA.roa File: VDE0EL23t5ZK3TnAJ4c3hO0ZuuA.roa (raw, json) Hash identifier: kuMopigtoVTVzv9PsM6n2G88LQDBgK/Jmi/EWrIGAAE= Subject key identifier: 54:31:34:10:BD:B7:B7:96:4A:DD:39:C0:27:87:37:84:ED:19:BA:E0 Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025 Certificate serial: 019AEB9963EFD0C0C2F4F41207B84DB35AF1 Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/VDE0EL23t5ZK3TnAJ4c3hO0ZuuA.roa Signing time: Thu 04 Dec 2025 23:01:29 +0000 ROA not before: Thu 04 Dec 2025 23:01:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213456 IP address blocks: 212.108.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:99:63:ef:d0:c0:c2:f4:f4:12:07:b8:4d:b3:5a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025 Validity Not Before: Dec 4 23:01:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54313410bdb7b7964add39c027873784ed19bae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:2f:04:33:58:0b:70:7b:16:dc:d9:11:a3: 55:be:06:53:22:93:64:70:74:5d:d7:39:12:95:5e: 96:f5:b5:2b:f8:78:5d:f6:4d:e6:ee:fc:47:c2:3a: d3:fe:50:03:a2:0f:9a:c4:df:23:ec:04:e8:de:2c: 8a:4e:c9:ab:49:6d:0c:cc:60:67:72:5b:45:d9:06: 31:d0:87:8c:f7:b3:df:fd:6b:52:cd:d2:64:03:70: b2:91:90:06:b0:48:ae:86:5e:48:88:81:a0:e8:be: 00:09:51:1f:67:98:39:19:62:53:af:59:32:65:51: 23:2b:05:7a:c7:1b:68:31:78:20:0c:7d:93:6e:38: cd:71:d5:cd:79:6e:f6:cc:d5:47:d5:0f:6e:c2:cf: 04:76:a0:d5:e3:38:29:c1:a4:54:6e:53:d4:36:1d: b4:b3:fe:b9:93:d3:86:d7:13:3d:c5:d4:e5:4f:3f: 17:0e:4d:12:3f:d2:db:11:c1:32:d1:cf:ae:49:7b: 6d:a6:6d:9a:6d:ca:87:b0:de:fc:07:e9:5f:03:9b: d7:be:be:e1:a9:63:7f:b8:be:e1:6a:ad:8c:44:4f: 8f:6c:e5:11:d3:f7:76:47:af:39:54:4a:cd:41:f2: bb:a6:61:4b:5c:ef:3a:3a:5f:99:02:97:59:24:b2: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:31:34:10:BD:B7:B7:96:4A:DD:39:C0:27:87:37:84:ED:19:BA:E0 X509v3 Authority Key Identifier: keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/VDE0EL23t5ZK3TnAJ4c3hO0ZuuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.124.0/24 Signature Algorithm: sha256WithRSAEncryption 58:20:b6:88:69:08:18:1d:4b:06:8b:05:69:9c:3b:08:56:d0: 05:b7:cb:bb:31:f8:16:d0:d3:2a:e7:7e:8d:7c:11:8f:2b:71: f4:d9:65:7c:30:19:7e:5f:ad:01:23:67:a6:4a:25:f7:79:b7: 78:b5:3a:1a:fd:d9:ab:b5:5e:fa:81:65:68:96:d6:0f:90:ac: 88:bc:7d:39:21:2e:2c:6a:90:21:0c:e0:54:2e:fc:83:06:8a: 63:47:08:5f:e2:e9:7e:e8:17:08:27:8a:6d:ec:a3:30:95:a4: d4:b7:f0:86:26:cc:08:9f:2d:d5:06:cc:37:9f:20:c8:b4:b6: 55:9c:09:ad:33:5b:6b:ae:f3:e1:8f:9b:2a:4e:a3:74:d6:e9: dc:fd:78:16:c4:a3:84:38:1f:ed:46:23:9d:c3:fd:93:ed:d6: f4:cf:c5:92:68:9f:43:e3:e4:84:a7:1f:ce:54:c1:7d:f3:ac: a4:cf:96:06:cb:b3:aa:69:d0:9d:35:84:3b:72:6d:bc:ad:81: 81:9f:e0:bc:38:ea:87:da:61:d3:85:b0:f6:d5:c8:ed:d1:7a: 84:f5:be:43:78:f6:08:28:f3:bf:0a:db:86:d2:96:de:13:c9: b0:87:3b:10:ec:88:85:ee:e2:be:a8:32:37:61:a6:71:cd:43: 8a:bf:bf:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrrmWPv0MDC9PQSB7hNs1rxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhMjNiMDdhM2MwYWM5ZTMzM2Y1MmU4YjVkNDFhNzY4YTNk MzkwMjUwHhcNMjUxMjA0MjMwMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDMxMzQxMGJkYjdiNzk2NGFkZDM5YzAyNzg3Mzc4NGVkMTliYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWQvBDNYC3B7FtzZEaNVvgZTIpNk cHRd1zkSlV6W9bUr+Hhd9k3m7vxHwjrT/lADog+axN8j7ATo3iyKTsmrSW0MzGBn cltF2QYx0IeM97Pf/WtSzdJkA3CykZAGsEiuhl5IiIGg6L4ACVEfZ5g5GWJTr1ky ZVEjKwV6xxtoMXggDH2TbjjNcdXNeW72zNVH1Q9uws8EdqDV4zgpwaRUblPUNh20 s/65k9OG1xM9xdTlTz8XDk0SP9LbEcEy0c+uSXttpm2abcqHsN78B+lfA5vXvr7h qWN/uL7haq2MRE+PbOUR0/d2R685VErNQfK7pmFLXO86Ol+ZApdZJLKfkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQxNBC9t7eWSt05wCeHN4TtGbrgMB8GA1UdIwQY MBaAFLojsHo8CsnjM/Uui11Bp2ij05AlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEt ODA2OWM0Njc3MWNjLzEvVkRFMEVMMjN0NVpLM1RuQUo0YzNoTzBadXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xMGQ1YjItODVlMy00OWVkLWJkYzEtODA2OWM0Njc3MWNj LzEvdWlPd2Vqd0t5ZU16OVM2TFhVR25hS1BUa0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Gx8MA0G CSqGSIb3DQEBCwUAA4IBAQBYILaIaQgYHUsGiwVpnDsIVtAFt8u7MfgW0NMq536N fBGPK3H02WV8MBl+X60BI2emSiX3ebd4tToa/dmrtV76gWVoltYPkKyIvH05IS4s apAhDOBULvyDBopjRwhf4ul+6BcIJ4pt7KMwlaTUt/CGJswIny3VBsw3nyDItLZV nAmtM1trrvPhj5sqTqN01unc/XgWxKOEOB/tRiOdw/2T7db0z8WSaJ9D4+SEpx/O VMF986ykz5YGy7OqadCdNYQ7cm28rYGBn+C8OOqH2mHThbD21cjt0XqE9b5DePYI KPO/CtuG0pbeE8mwhzsQ7IiF7uK+qDI3YaZxzUOKv7/G -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:07 2025 by rpki-client