This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/VKGWBQGS7SeVBS2cT0MnCVHp0Lw.roa File: VKGWBQGS7SeVBS2cT0MnCVHp0Lw.roa (raw, json) Hash identifier: 4IJezR4ygpGaPpy/eoPBqgPKujvYmQipK8AUc6lPIEQ= Subject key identifier: 54:A1:96:05:01:92:ED:27:95:05:2D:9C:4F:43:27:09:51:E9:D0:BC Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Certificate serial: 019AC0124D208864F7591B599A5B5F8844F9 Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/VKGWBQGS7SeVBS2cT0MnCVHp0Lw.roa Signing time: Wed 26 Nov 2025 12:10:16 +0000 ROA not before: Wed 26 Nov 2025 12:10:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28928 IP address blocks: 194.11.172.0/22 maxlen: 22 194.11.176.0/21 maxlen: 21 194.11.179.0/24 maxlen: 24 194.11.184.0/23 maxlen: 23 194.11.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:12:4d:20:88:64:f7:59:1b:59:9a:5b:5f:88:44:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Validity Not Before: Nov 26 12:10:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54a196050192ed2795052d9c4f43270951e9d0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:c6:be:82:17:c4:14:01:60:8b:f0:8e:eb: 97:12:5f:cc:da:0a:3f:63:33:62:74:0c:dc:a9:79: a5:bd:cc:f9:73:19:18:a5:89:5d:00:16:ca:88:c2: 70:ce:c1:c6:36:94:67:02:03:c8:22:f5:9f:23:df: 4a:f1:a0:b9:85:18:4d:98:3c:70:ec:fa:98:1d:c3: 56:5b:c0:69:8d:e0:91:7f:59:24:f5:02:c6:84:65: c2:cd:fb:8f:bd:51:49:bb:14:fb:e5:69:71:29:32: 03:b7:0b:10:16:bc:06:06:98:74:f8:16:c7:8b:fd: 50:19:5f:e7:f3:ad:96:65:e4:3e:8e:0d:19:66:20: f0:5a:95:f5:15:3e:01:08:63:47:e8:6c:0b:bd:1e: 7a:40:4e:28:1b:b5:99:dd:18:d8:c6:ee:1d:4e:2f: ea:39:78:f5:06:17:37:b1:0d:f6:1f:1b:3c:8d:a8: ef:b5:2f:4a:38:85:87:ff:b1:6b:32:83:12:fd:08: 68:f5:99:bd:87:5e:6f:c2:82:4f:db:22:e8:88:1d: f5:20:80:fd:4e:0b:06:4e:e8:23:41:83:79:cf:39: 99:75:02:7f:c9:f7:59:0e:b0:46:cb:b8:44:f6:30: 08:5f:d4:80:88:be:3a:fc:b3:ad:e1:f0:6f:92:19: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A1:96:05:01:92:ED:27:95:05:2D:9C:4F:43:27:09:51:E9:D0:BC X509v3 Authority Key Identifier: keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/VKGWBQGS7SeVBS2cT0MnCVHp0Lw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.172.0-194.11.186.255 Signature Algorithm: sha256WithRSAEncryption a2:44:19:d0:7d:a2:59:b4:ff:ee:a0:a5:e0:59:eb:bb:c1:40: ec:c6:00:d8:6c:61:ed:8d:83:93:ff:40:b6:5d:31:f2:e6:77: 76:11:cb:98:9e:21:6a:d1:40:7e:2b:bd:49:49:22:fa:17:39: 1b:74:34:41:ec:95:8c:23:ed:62:7b:dc:3f:f7:0c:99:00:81: 48:bf:90:84:6d:00:fb:48:19:8e:9f:3d:93:ea:f1:63:06:7e: f8:03:c2:00:0c:d9:27:5c:bd:72:66:a7:bb:c7:91:e4:aa:e3: 54:18:d1:d6:6f:bd:2f:d1:e6:bf:d7:bc:6f:48:ba:d2:d4:e9: 7f:58:c1:cd:6f:f1:ea:97:69:f4:3d:b4:a7:6b:0b:93:5a:dd: d0:ea:e9:ea:b3:26:39:b4:ce:63:5a:9c:60:84:a2:36:96:ae: cb:d8:2f:f9:f8:ec:3b:9b:5c:82:e4:b7:3f:f3:cf:4e:af:9d: b7:d7:04:cb:26:d8:0c:6d:e8:7c:02:55:34:4a:f6:1d:6c:f9: 5d:1a:13:22:51:6c:70:43:66:dd:e1:50:72:d2:66:64:4a:f9: 75:63:40:e4:86:81:8c:48:f3:5e:f2:ce:49:24:3d:3c:ef:aa: 07:ed:c8:c9:9a:36:cb:5e:4a:8c:57:3e:2d:b3:99:6b:d2:8b: 10:c4:4e:a5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrAEk0giGT3WRtZmltfiET5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWI2MDk0YmNhYjRiZDNiMWY2ZjU2YzUxODJiYTEyMjBl MjJiNmYwHhcNMjUxMTI2MTIxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGExOTYwNTAxOTJlZDI3OTUwNTJkOWM0ZjQzMjcwOTUxZTlkMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDDGvoIXxBQBYIvwjuuXEl/M2go/ YzNidAzcqXmlvcz5cxkYpYldABbKiMJwzsHGNpRnAgPIIvWfI99K8aC5hRhNmDxw 7PqYHcNWW8BpjeCRf1kk9QLGhGXCzfuPvVFJuxT75WlxKTIDtwsQFrwGBph0+BbH i/1QGV/n862WZeQ+jg0ZZiDwWpX1FT4BCGNH6GwLvR56QE4oG7WZ3RjYxu4dTi/q OXj1Bhc3sQ32Hxs8jajvtS9KOIWH/7FrMoMS/Qho9Zm9h15vwoJP2yLoiB31IID9 TgsGTugjQYN5zzmZdQJ/yfdZDrBGy7hE9jAIX9SAiL46/LOt4fBvkhkhWQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFShlgUBku0nlQUtnE9DJwlR6dC8MB8GA1UdIwQY MBaAFGvrYJS8q0vTsfb1bFGCuhIg4itvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjkt ZWE1ODdmZDY1OGIyLzEvVktHV0JRR1M3U2VWQlMyY1QwTW5DVkhwMEx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iYTQ2NDAtMTYzZS00NjVmLTkwZjktZWE1ODdmZDY1OGIy LzEvYS10Z2xMeXJTOU94OXZWc1VZSzZFaURpSzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCC6wD BADCC7owDQYJKoZIhvcNAQELBQADggEBAKJEGdB9olm0/+6gpeBZ67vBQOzGANhs Ye2Ng5P/QLZdMfLmd3YRy5ieIWrRQH4rvUlJIvoXORt0NEHslYwj7WJ73D/3DJkA gUi/kIRtAPtIGY6fPZPq8WMGfvgDwgAM2SdcvXJmp7vHkeSq41QY0dZvvS/R5r/X vG9IutLU6X9Ywc1v8eqXafQ9tKdrC5Na3dDq6eqzJjm0zmNanGCEojaWrsvYL/n4 7DubXILktz/zz06vnbfXBMsm2Axt6HwCVTRK9h1s+V0aEyJRbHBDZt3hUHLSZmRK +XVjQOSGgYxI817yzkkkPTzvqgftyMmaNsteSoxXPi2zmWvSixDETqU= -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:03 2025 by rpki-client