This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Vw7opLTGJ7meoIjP73G2m5jJNxM.roa File: Vw7opLTGJ7meoIjP73G2m5jJNxM.roa (raw, json) Hash identifier: XiNVkm1WPALBICMNh3T3KE5041D5HP4IFNLB/PzL5cE= Subject key identifier: 57:0E:E8:A4:B4:C6:27:B9:9E:A0:88:CF:EF:71:B6:9B:98:C9:37:13 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 019A789452944710A950295139B4F7AC1690 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Vw7opLTGJ7meoIjP73G2m5jJNxM.roa Signing time: Wed 12 Nov 2025 14:59:37 +0000 ROA not before: Wed 12 Nov 2025 14:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200313 IP address blocks: 45.142.2.0/24 maxlen: 24 185.212.128.0/23 maxlen: 23 185.212.130.0/24 maxlen: 24 185.212.131.0/24 maxlen: 24 185.217.136.0/24 maxlen: 24 185.224.218.0/24 maxlen: 24 185.232.52.0/24 maxlen: 24 195.43.147.0/24 maxlen: 24 2a0d:1640::/32 maxlen: 32 2a0d:1643::/32 maxlen: 32 2a0d:63c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:94:52:94:47:10:a9:50:29:51:39:b4:f7:ac:16:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Nov 12 14:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=570ee8a4b4c627b99ea088cfef71b69b98c93713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b9:f0:47:77:20:f6:c4:97:b6:b9:e9:77:e9: db:89:51:01:43:4e:b3:e7:7e:03:9c:3d:3f:2a:23: 54:00:b9:c9:a8:ad:cc:39:12:29:ce:b7:a8:01:6f: 93:51:65:67:2f:bf:0c:0a:4f:95:d5:81:e8:d3:a9: 87:fc:1b:01:b2:5b:6b:92:2a:5f:62:3c:fc:5c:0b: 34:72:75:94:bd:c8:36:4f:da:dc:b7:1f:1e:1c:0b: 4a:66:7b:68:8a:07:a8:6a:26:6d:a5:41:05:3e:29: 7b:bf:4d:bc:1a:20:0d:9a:e3:32:ee:e7:84:26:ab: 08:cd:72:93:17:43:d5:af:64:1e:9c:af:9e:ed:de: b3:b3:9b:b3:58:67:24:2e:c0:52:21:d8:78:d9:75: 8e:4d:91:56:49:37:1a:71:af:b8:67:07:26:38:a2: 2d:91:ae:bb:fe:f6:da:57:1a:15:f2:5c:1f:97:80: 27:98:77:b6:26:f7:40:cb:fb:57:cc:f1:11:b1:ac: f2:6a:f1:3e:cd:1f:f2:95:4c:5a:cc:82:f7:52:6c: 5e:b8:26:f7:a4:a3:cf:d5:79:eb:a4:cb:cc:1a:b7: 20:52:00:d0:fc:b5:4b:0f:82:d4:91:9d:7a:fb:8e: a0:64:95:2f:af:03:cb:d0:ee:2a:a5:3f:e5:d7:89: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:E8:A4:B4:C6:27:B9:9E:A0:88:CF:EF:71:B6:9B:98:C9:37:13 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/Vw7opLTGJ7meoIjP73G2m5jJNxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.2.0/24 185.212.128.0/22 185.217.136.0/24 185.224.218.0/24 185.232.52.0/24 195.43.147.0/24 IPv6: 2a0d:1640::/32 2a0d:1643::/32 2a0d:63c0::/32 Signature Algorithm: sha256WithRSAEncryption 64:d6:b8:70:71:1f:7c:c3:07:34:a8:3b:dc:8f:e9:62:d9:68: 78:8f:fa:f4:8c:cb:86:a3:18:7a:a5:37:3c:3b:4d:8e:f9:e8: 79:cd:e9:f4:2e:e8:b6:9f:f2:a7:99:6c:fa:0f:e9:8a:80:be: 32:b4:ed:c5:56:d8:9e:5a:9d:e7:da:74:26:c7:6c:42:11:c0: 3c:00:47:70:ff:9e:7b:0e:d7:5d:cc:3b:1e:6c:cf:73:31:6f: 57:01:e4:86:06:f3:1f:86:84:62:48:f0:d5:4a:9d:4c:fa:96: 0d:02:4e:ca:a4:43:fc:2d:f6:73:6b:09:37:a3:10:b8:84:1d: 8a:54:6b:00:0b:76:0e:27:c5:a0:a5:04:5d:94:56:0f:74:62: 90:6a:bf:9d:26:d1:5c:7f:ed:6a:4d:07:3f:84:e1:76:c6:cb: 0a:dc:a6:11:f7:ae:51:5c:10:c8:8f:a0:e3:04:12:5e:47:b3: 7d:e9:de:29:d4:84:85:d0:5f:b0:17:fe:20:bd:39:32:33:44: 90:5f:0c:d5:33:c5:b6:b9:6b:9d:2b:3c:0a:ab:36:0d:d6:bf: cb:2a:ce:53:66:26:a6:ae:20:d6:94:60:99:86:87:80:c9:15: 48:e7:45:f0:6f:0d:bb:ec:17:23:f7:3e:4e:79:cc:f1:ca:ad: 04:c3:65:d5 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZp4lFKURxCpUClRObT3rBaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjUxMTEyMTQ1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzBlZThhNGI0YzYyN2I5OWVhMDg4Y2ZlZjcxYjY5Yjk4YzkzNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbnwR3cg9sSXtrnpd+nbiVEBQ06z 534DnD0/KiNUALnJqK3MORIpzreoAW+TUWVnL78MCk+V1YHo06mH/BsBsltrkipf Yjz8XAs0cnWUvcg2T9rctx8eHAtKZntoigeoaiZtpUEFPil7v028GiANmuMy7ueE JqsIzXKTF0PVr2QenK+e7d6zs5uzWGckLsBSIdh42XWOTZFWSTcaca+4ZwcmOKIt ka67/vbaVxoV8lwfl4AnmHe2JvdAy/tXzPERsazyavE+zR/ylUxazIL3UmxeuCb3 pKPP1XnrpMvMGrcgUgDQ/LVLD4LUkZ16+46gZJUvrwPL0O4qpT/l14keJQIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFFcO6KS0xie5nqCIz+9xtpuYyTcTMB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvVnc3b3BMVEdKN21lb0lqUDczRzJtNWpKTnhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAqBAIAATAkAwQALY4CAwQC udSAAwQAudmIAwQAueDaAwQAueg0AwQAwyuTMBsEAgACMBUDBQAqDRZAAwUAKg0W QwMFACoNY8AwDQYJKoZIhvcNAQELBQADggEBAGTWuHBxH3zDBzSoO9yP6WLZaHiP +vSMy4ajGHqlNzw7TY756HnN6fQu6Laf8qeZbPoP6YqAvjK07cVW2J5anefadCbH bEIRwDwAR3D/nnsO113MOx5sz3Mxb1cB5IYG8x+GhGJI8NVKnUz6lg0CTsqkQ/wt 9nNrCTejELiEHYpUawALdg4nxaClBF2UVg90YpBqv50m0Vx/7WpNBz+E4XbGywrc phH3rlFcEMiPoOMEEl5Hs33p3inUhIXQX7AX/iC9OTIzRJBfDNUzxba5a50rPAqr Ng3Wv8sqzlNmJqauINaUYJmGh4DJFUjnRfBvDbvsFyP3Pk55zPHKrQTDZdU= -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:11 2025 by rpki-client