This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VVla6EZ_k4ich0q1LQvSMa7XgXE.roa File: VVla6EZ_k4ich0q1LQvSMa7XgXE.roa (raw, json) Hash identifier: na3BjMDhMQN3+lX+Wa4sspVkXqU5tz8Lf3773gbeC9U= Subject key identifier: 55:59:5A:E8:46:7F:93:88:9C:87:4A:B5:2D:0B:D2:31:AE:D7:81:71 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019A81C70E808F50137CCE901B08758FAEEB Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VVla6EZ_k4ich0q1LQvSMa7XgXE.roa Signing time: Fri 14 Nov 2025 09:51:37 +0000 ROA not before: Fri 14 Nov 2025 09:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209178 IP address blocks: 185.233.19.0/24 maxlen: 24 185.235.165.0/24 maxlen: 24 185.243.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:c7:0e:80:8f:50:13:7c:ce:90:1b:08:75:8f:ae:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Nov 14 09:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=55595ae8467f93889c874ab52d0bd231aed78171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:4d:02:b1:98:c8:8d:0d:10:95:7a:d7:00: b1:8f:2f:31:2d:ee:7c:d1:e4:f8:3c:a7:40:0e:58: 75:32:84:e1:53:fb:2b:eb:c5:1a:eb:e2:70:f7:0a: 83:51:b8:c2:83:bc:16:86:74:e9:64:b5:15:69:f7: 4c:10:9e:26:96:b5:7e:73:b1:e9:73:62:42:b2:72: 02:42:29:f2:3e:7a:e1:bd:53:a4:8d:dd:30:95:36: 1d:ff:e3:13:ff:6c:29:f2:e7:ba:81:0e:0e:44:7d: 56:d1:0f:58:65:1a:28:bc:26:41:fd:0d:8b:e5:86: 95:97:77:c0:68:cc:c9:80:0e:0b:b2:d5:14:13:3f: 77:99:10:85:31:83:5e:2a:1a:70:44:36:22:c9:54: 07:17:15:5b:2e:aa:3f:04:c9:d3:db:b0:d8:3d:59: ff:6b:69:48:d3:4a:a6:89:47:f8:c1:2a:7a:fd:45: 61:c6:d5:a4:99:1c:50:d6:3f:9e:d6:8e:ec:3a:b0: 1e:37:80:7c:76:a7:56:9c:42:6e:2d:bf:ac:28:67: 8f:dd:69:fa:95:40:fe:61:a1:6a:82:41:18:f1:f4: dd:5a:2c:2c:6b:52:d4:ec:ab:a3:e7:8f:7e:bb:75: ea:51:16:ce:99:c0:c1:07:6b:fd:33:12:e8:dc:cf: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:59:5A:E8:46:7F:93:88:9C:87:4A:B5:2D:0B:D2:31:AE:D7:81:71 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VVla6EZ_k4ich0q1LQvSMa7XgXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.19.0/24 185.235.165.0/24 185.243.4.0/24 Signature Algorithm: sha256WithRSAEncryption 22:31:9b:63:94:78:26:f8:2e:13:f0:10:39:82:2c:ec:05:fe: 25:fa:09:36:d1:a6:df:df:04:74:70:9a:b6:74:42:a4:3a:c6: 27:99:47:b5:ea:b3:59:d7:fa:04:de:13:10:b8:a0:99:8e:0b: 36:0e:00:ed:67:d7:3d:c4:1e:c5:40:98:1a:c6:d4:b0:d5:9f: d7:45:0f:96:69:aa:7c:b1:62:11:9e:dc:34:0e:5a:8d:56:51: a8:54:3b:d0:6b:da:4e:67:a8:92:49:f7:4e:02:7b:f2:dd:e3: fb:31:ff:c9:d9:ad:e9:8f:78:bd:90:96:da:91:92:39:c5:94: 6e:e6:99:6f:ae:db:56:98:f2:78:54:65:5d:69:44:f4:50:bd: 4b:f9:6a:8a:10:00:0f:83:b5:97:10:18:46:94:ab:ae:85:4d: 1a:a7:33:be:bb:aa:60:02:44:7d:65:fd:5b:5f:ff:60:4b:50: ed:26:4d:9d:0d:5b:52:d1:95:74:69:44:d3:45:08:6e:b3:11: 48:9b:92:be:56:eb:34:82:66:99:8b:48:32:0e:6b:42:67:67: 4a:1c:8e:ff:46:9a:6a:3a:b9:4e:d0:4b:1b:ca:e5:60:f8:6c: e9:e0:63:80:a1:4e:bf:58:53:10:e9:9a:45:72:7a:40:09:84: 9f:a9:b7:cf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqBxw6Aj1ATfM6QGwh1j67rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMTE0MDk1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTU5NWFlODQ2N2Y5Mzg4OWM4NzRhYjUyZDBiZDIzMWFlZDc4MTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EVNArGYyI0NEJV61wCxjy8xLe58 0eT4PKdADlh1MoThU/sr68Ua6+Jw9wqDUbjCg7wWhnTpZLUVafdMEJ4mlrV+c7Hp c2JCsnICQinyPnrhvVOkjd0wlTYd/+MT/2wp8ue6gQ4ORH1W0Q9YZRoovCZB/Q2L 5YaVl3fAaMzJgA4LstUUEz93mRCFMYNeKhpwRDYiyVQHFxVbLqo/BMnT27DYPVn/ a2lI00qmiUf4wSp6/UVhxtWkmRxQ1j+e1o7sOrAeN4B8dqdWnEJuLb+sKGeP3Wn6 lUD+YaFqgkEY8fTdWiwsa1LU7Kuj549+u3XqURbOmcDBB2v9MxLo3M9FcwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFVZWuhGf5OInIdKtS0L0jGu14FxMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvVlZsYTZFWl9rNGljaDBxMUxRdlNNYTdYZ1hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuekTAwQA ueulAwQAufMEMA0GCSqGSIb3DQEBCwUAA4IBAQAiMZtjlHgm+C4T8BA5gizsBf4l +gk20abf3wR0cJq2dEKkOsYnmUe16rNZ1/oE3hMQuKCZjgs2DgDtZ9c9xB7FQJga xtSw1Z/XRQ+Waap8sWIRntw0DlqNVlGoVDvQa9pOZ6iSSfdOAnvy3eP7Mf/J2a3p j3i9kJbakZI5xZRu5plvrttWmPJ4VGVdaUT0UL1L+WqKEAAPg7WXEBhGlKuuhU0a pzO+u6pgAkR9Zf1bX/9gS1DtJk2dDVtS0ZV0aUTTRQhusxFIm5K+Vus0gmaZi0gy DmtCZ2dKHI7/RppqOrlO0EsbyuVg+Gzp4GOAoU6/WFMQ6ZpFcnpACYSfqbfP -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:03 2025 by rpki-client