This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VJ56WuOhxsUse2Wjh194KIfDmWo.roa File: VJ56WuOhxsUse2Wjh194KIfDmWo.roa (raw, json) Hash identifier: bUKkm23vexWNMu4lKi52LXPYZkbmuyNIcxiAB5ddWRg= Subject key identifier: 54:9E:7A:5A:E3:A1:C6:C5:2C:7B:65:A3:87:5F:78:28:87:C3:99:6A Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019A92751464162FC0FA9A2E8F3FB8FCA2A1 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VJ56WuOhxsUse2Wjh194KIfDmWo.roa Signing time: Mon 17 Nov 2025 15:35:37 +0000 ROA not before: Mon 17 Nov 2025 15:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.17.96.0/24 maxlen: 24 109.111.32.0/22 maxlen: 24 109.111.34.0/23 maxlen: 24 109.111.48.0/20 maxlen: 20 109.111.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:75:14:64:16:2f:c0:fa:9a:2e:8f:3f:b8:fc:a2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Nov 17 15:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=549e7a5ae3a1c6c52c7b65a3875f782887c3996a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:f2:d1:4c:bf:63:64:64:3f:d5:33:51:de: 02:04:6e:38:32:58:2d:82:fa:05:1c:f3:7a:a4:96: 2c:5c:bb:4e:3b:59:36:ea:3f:6e:ec:b5:92:57:03: c2:35:ac:81:3f:5b:b0:12:9a:1c:16:f3:7d:b8:ab: b4:4c:40:4d:02:ee:8d:03:ea:9d:59:f6:40:27:64: a5:1f:7a:d8:09:19:51:c1:91:27:c6:0c:b5:82:b8: 93:00:eb:74:96:1f:cc:d1:8d:98:1f:86:f1:30:b9: fc:0a:8c:de:1f:88:9d:5a:67:b1:51:5c:41:71:46: c0:a2:27:6a:f6:dc:92:05:b9:b8:49:0e:f2:7a:87: 3f:e4:07:48:0c:4e:88:9a:c1:0d:46:33:20:a7:b2: 1e:f0:7a:c2:5b:57:1b:10:70:3b:33:aa:4c:8c:5e: f4:74:f9:7a:56:77:18:ed:9b:4e:95:14:da:2b:36: 0b:79:62:5f:32:a0:46:2f:9d:bb:16:92:0b:7f:8f: 4e:b2:26:78:74:a0:f9:47:e6:b2:96:99:9d:6f:4d: cd:65:1a:e5:10:f3:d4:6d:3d:f4:03:72:d1:86:ea: 79:ba:ad:19:49:9d:ef:f1:c7:0e:6c:06:8b:f2:21: b6:99:a7:00:dd:5c:ee:84:5f:43:7a:42:86:0b:88: 70:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9E:7A:5A:E3:A1:C6:C5:2C:7B:65:A3:87:5F:78:28:87:C3:99:6A X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VJ56WuOhxsUse2Wjh194KIfDmWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.96.0/24 109.111.32.0/22 109.111.48.0/20 Signature Algorithm: sha256WithRSAEncryption af:b7:2a:04:ca:10:a0:c8:ef:85:87:ac:7d:61:9e:42:4d:8a: e7:ef:52:1c:8b:3f:00:02:d0:77:b8:7a:d0:0d:0d:4d:35:5e: f3:87:db:67:be:1a:09:94:0d:0e:15:99:60:37:24:20:ea:82: 41:d0:76:a0:cb:90:33:e6:91:23:c4:66:31:43:7a:a6:e1:fd: e9:bf:f9:ca:16:10:f8:53:53:bb:ba:09:bd:b8:f2:c4:24:62: ae:82:c2:b8:b1:1b:81:71:81:dc:77:c4:8c:c8:60:3c:bb:9c: f6:41:7e:1f:75:d5:5c:b1:cb:b9:af:0c:7e:a5:c0:5a:75:dc: c6:ce:f1:d5:db:61:d5:ae:da:a4:29:f8:47:5a:e7:98:56:14: b1:73:32:b5:6c:2b:b0:22:58:41:38:b1:a5:90:0a:4b:6c:9b: da:e6:2b:24:07:2e:41:3f:d4:3e:83:05:da:dc:90:0d:7e:dc: 6b:2c:0c:a1:4a:da:c6:2a:3a:a0:3e:17:cc:39:02:1c:96:fb: 1c:05:75:18:aa:22:e3:e1:dd:91:7e:b7:d3:c3:c3:2f:98:e5: 17:d2:b5:0c:68:84:2b:74:e7:9d:38:e3:13:84:ff:eb:08:76: cf:44:72:28:97:ce:3f:2e:28:2e:c4:c8:7f:6e:66:e2:23:a8: f0:04:eb:36 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqSdRRkFi/A+poujz+4/KKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjUxMTE3MTUzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDllN2E1YWUzYTFjNmM1MmM3YjY1YTM4NzVmNzgyODg3YzM5OTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYjy0Uy/Y2RkP9UzUd4CBG44Mlgt gvoFHPN6pJYsXLtOO1k26j9u7LWSVwPCNayBP1uwEpocFvN9uKu0TEBNAu6NA+qd WfZAJ2SlH3rYCRlRwZEnxgy1griTAOt0lh/M0Y2YH4bxMLn8CozeH4idWmexUVxB cUbAoidq9tySBbm4SQ7yeoc/5AdIDE6ImsENRjMgp7Ie8HrCW1cbEHA7M6pMjF70 dPl6VncY7ZtOlRTaKzYLeWJfMqBGL527FpILf49OsiZ4dKD5R+aylpmdb03NZRrl EPPUbT30A3LRhup5uq0ZSZ3v8ccObAaL8iG2macA3VzuhF9DekKGC4hwxQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFSeelrjocbFLHtlo4dfeCiHw5lqMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvVko1Nld1T2h4c1VzZTJXamgxOTRLSWZEbVdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZxFgAwQC bW8gAwQEbW8wMA0GCSqGSIb3DQEBCwUAA4IBAQCvtyoEyhCgyO+Fh6x9YZ5CTYrn 71Iciz8AAtB3uHrQDQ1NNV7zh9tnvhoJlA0OFZlgNyQg6oJB0Hagy5Az5pEjxGYx Q3qm4f3pv/nKFhD4U1O7ugm9uPLEJGKugsK4sRuBcYHcd8SMyGA8u5z2QX4fddVc scu5rwx+pcBaddzGzvHV22HVrtqkKfhHWueYVhSxczK1bCuwIlhBOLGlkApLbJva 5iskBy5BP9Q+gwXa3JANftxrLAyhStrGKjqgPhfMOQIclvscBXUYqiLj4d2RfrfT w8MvmOUX0rUMaIQrdOedOOMThP/rCHbPRHIol84/LiguxMh/bmbiI6jwBOs2 -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:30 2025 by rpki-client