This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/vZQ8DYlXaa-1KdDuQQWyFWrY5xY.roa File: vZQ8DYlXaa-1KdDuQQWyFWrY5xY.roa (raw, json) Hash identifier: uYVj3mBuLw9REup3cNf5o/ZVZ2uRBM7pKiuYKla1arE= Subject key identifier: BD:94:3C:0D:89:57:69:AF:B5:29:D0:EE:41:05:B2:15:6A:D8:E7:16 Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d Certificate serial: 019AEEB412396E70375DAD5AC63C4C628BDC Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/vZQ8DYlXaa-1KdDuQQWyFWrY5xY.roa Signing time: Fri 05 Dec 2025 13:29:29 +0000 ROA not before: Fri 05 Dec 2025 13:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8368 IP address blocks: 45.149.96.0/22 maxlen: 24 91.212.215.0/24 maxlen: 24 91.236.192.0/24 maxlen: 24 95.36.80.0/20 maxlen: 24 212.85.56.0/21 maxlen: 24 217.18.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:b4:12:39:6e:70:37:5d:ad:5a:c6:3c:4c:62:8b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d Validity Not Before: Dec 5 13:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd943c0d895769afb529d0ee4105b2156ad8e716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:4d:7f:9b:90:5e:56:a1:3d:b7:17:09:24: a9:4a:ac:89:89:58:91:4c:e6:cb:c3:f0:71:8f:23: 68:86:15:c7:12:cf:96:59:49:c1:58:c1:ba:15:a0: 7c:e3:c8:82:97:d3:a5:a3:97:b2:92:3d:0b:b0:cb: d7:3e:1d:8a:d8:82:3c:e2:ee:7a:ff:20:bf:82:39: ea:8e:72:04:af:cd:52:cc:44:f8:cd:20:1d:df:e6: 09:ed:f7:33:48:85:b1:00:57:da:c3:92:3e:ff:10: 1d:d3:2a:c6:66:47:07:88:c9:72:fc:76:22:eb:ae: 91:8f:d0:3d:e0:29:ec:9b:a6:09:69:ea:e4:f1:62: 17:fa:82:f1:09:63:96:96:89:fc:03:e5:24:5d:6e: cf:d2:fb:71:06:c2:0a:43:c8:bf:4e:bd:79:4d:fa: f2:77:de:fc:28:97:60:2a:a5:25:3e:6f:f9:b8:fa: 3f:ba:e9:04:12:8b:58:cc:ea:e6:ca:49:b8:e5:e9: fc:f8:e1:79:e8:d4:aa:e8:2b:2f:4a:3c:69:14:aa: d2:a7:ca:c2:ef:c8:b0:96:89:97:39:91:df:16:73: ad:35:1e:68:f7:d8:1a:46:9b:a5:ca:53:e3:a1:88: 36:03:8d:da:bb:4f:77:56:49:95:70:8e:d7:c1:7e: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:94:3C:0D:89:57:69:AF:B5:29:D0:EE:41:05:B2:15:6A:D8:E7:16 X509v3 Authority Key Identifier: keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/vZQ8DYlXaa-1KdDuQQWyFWrY5xY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.96.0/22 91.212.215.0/24 91.236.192.0/24 95.36.80.0/20 212.85.56.0/21 217.18.80.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:b1:64:2d:7d:5e:a0:63:8b:2c:2f:4a:6f:ed:db:d9:81:2a: dd:84:0a:06:52:30:ee:73:6f:78:24:2e:fa:f3:9d:11:50:b4: 4c:68:fc:62:8b:ec:20:7a:17:0e:94:c6:cb:40:f3:93:7b:58: 86:bc:0f:d7:34:0a:4b:1c:a5:8a:65:af:77:94:95:d7:a4:eb: c7:d8:fb:4a:20:30:d3:e7:e1:37:60:9f:cc:90:41:6c:9a:04: 80:64:1c:86:f2:2c:7c:fd:f5:8f:40:19:6d:92:83:9e:b9:c6: 72:17:59:4f:f6:d9:91:35:bc:ea:30:93:17:22:53:aa:53:81: 3a:2a:94:07:09:8d:74:f4:0a:0d:d9:3a:70:e8:91:da:9b:94: 22:a1:cd:7d:dc:ad:4a:44:90:77:c1:7b:e0:6d:d4:27:2e:cf: 21:81:94:1d:8b:bc:08:65:86:ab:82:07:9d:95:25:49:b2:d4: 99:b7:f2:fa:3a:3c:08:05:09:8e:81:82:7e:31:de:ff:05:12: 2a:09:a8:91:12:ab:9f:2b:af:5a:25:9a:2f:68:7c:bc:c2:f3: e4:c1:c1:04:46:fa:45:11:25:d0:57:7c:4b:d8:98:6b:ae:4a: 6b:cf:67:a6:e6:c0:cc:66:87:b6:48:f2:6d:3f:6f:6f:8f:2c: 9f:e1:6d:d9 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrutBI5bnA3Xa1axjxMYovcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YWMwZGRlYzMwZTI0ZTQ1N2UxNmU2NTA3ZDIxOTcyODMx MDg5M2QwHhcNMjUxMjA1MTMyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDk0M2MwZDg5NTc2OWFmYjUyOWQwZWU0MTA1YjIxNTZhZDhlNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04ZNf5uQXlahPbcXCSSpSqyJiViR TObLw/BxjyNohhXHEs+WWUnBWMG6FaB848iCl9Olo5eykj0LsMvXPh2K2II84u56 /yC/gjnqjnIEr81SzET4zSAd3+YJ7fczSIWxAFfaw5I+/xAd0yrGZkcHiMly/HYi 666Rj9A94Cnsm6YJaerk8WIX+oLxCWOWlon8A+UkXW7P0vtxBsIKQ8i/Tr15Tfry d978KJdgKqUlPm/5uPo/uukEEotYzOrmykm45en8+OF56NSq6CsvSjxpFKrSp8rC 78iwlomXOZHfFnOtNR5o99gaRpulylPjoYg2A43au093VkmVcI7XwX6BkwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFL2UPA2JV2mvtSnQ7kEFshVq2OcWMB8GA1UdIwQY MBaAFFSsDd7DDiTkV+FuZQfSGXKDEIk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEt MmYwNjU1ZjAxMDI5LzEvdlpROERZbFhhYS0xS2REdVFRV3lGV3JZNXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZGRkMzktZTdiZC00NGJhLWFiMjEtMmYwNjU1ZjAxMDI5 LzEvVkt3TjNzTU9KT1JYNFc1bEI5SVpjb01RaVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLZVgAwQA W9TXAwQAW+zAAwQEXyRQAwQD1FU4AwQA2RJQMA0GCSqGSIb3DQEBCwUAA4IBAQB8 sWQtfV6gY4ssL0pv7dvZgSrdhAoGUjDuc294JC76850RULRMaPxii+wgehcOlMbL QPOTe1iGvA/XNApLHKWKZa93lJXXpOvH2PtKIDDT5+E3YJ/MkEFsmgSAZByG8ix8 /fWPQBltkoOeucZyF1lP9tmRNbzqMJMXIlOqU4E6KpQHCY109AoN2Tpw6JHam5Qi oc193K1KRJB3wXvgbdQnLs8hgZQdi7wIZYarggedlSVJstSZt/L6OjwIBQmOgYJ+ Md7/BRIqCaiREqufK69aJZovaHy8wvPkwcEERvpFESXQV3xL2Jhrrkprz2em5sDM Zoe2SPJtP29vjyyf4W3Z -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:53 2025 by rpki-client