This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/vA3DqyvNGHMDKHTEiVWXXGlC-Q4.roa File: vA3DqyvNGHMDKHTEiVWXXGlC-Q4.roa (raw, json) Hash identifier: I5VIDSXlYm0OjzIrYxH5a3fzHBdn2UCpIwB6Nwr4MjU= Subject key identifier: BC:0D:C3:AB:2B:CD:18:73:03:28:74:C4:89:55:97:5C:69:42:F9:0E Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Certificate serial: 019A9D8B35FBA0D4CCDA4DC35B2DC6B7C801 Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/vA3DqyvNGHMDKHTEiVWXXGlC-Q4.roa Signing time: Wed 19 Nov 2025 19:15:37 +0000 ROA not before: Wed 19 Nov 2025 19:15:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214361 IP address blocks: 185.161.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:8b:35:fb:a0:d4:cc:da:4d:c3:5b:2d:c6:b7:c8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Validity Not Before: Nov 19 19:15:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bc0dc3ab2bcd1873032874c48955975c6942f90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:32:8b:d0:25:8d:53:97:3f:3b:ab:7a:f9:5a: 55:23:27:9e:f4:ff:74:84:97:42:1f:ec:9f:21:d5: 2f:f4:83:bc:c3:ed:32:d2:ae:a4:3c:1b:be:ca:85: 72:3a:8a:bf:29:10:45:99:a3:25:74:8a:67:b5:54: c2:f6:81:51:77:40:fa:65:b1:d7:fc:a2:52:c7:9c: 26:45:b4:36:1e:1d:ba:75:fa:cf:d1:ae:7a:55:76: ff:ed:9e:d7:e0:e9:01:8e:b8:95:14:18:57:ce:70: fd:06:ad:43:9c:32:ff:4e:65:bd:a7:e5:79:6e:50: 0d:3b:f0:7e:95:79:3f:b9:c6:d9:bf:98:ad:e5:a7: c7:d4:3e:a4:76:b7:ad:bf:6d:0c:80:53:c5:97:87: e5:a3:a7:88:e9:c8:01:d6:65:ef:75:ed:e4:b1:41: 28:83:5e:8e:29:e3:13:7e:90:e4:0a:59:d0:3d:df: 25:b3:d5:ac:cb:61:99:09:27:9b:36:1a:fd:05:8e: c2:db:82:5b:66:50:f2:13:8b:f6:ae:60:0d:bd:f5: 9c:be:e5:ca:6c:0c:08:3c:ba:53:69:90:57:8c:3a: 6e:ba:91:e5:ac:42:aa:5d:ca:6f:05:06:47:6a:e0: d8:26:96:53:fb:b7:95:ab:6d:6c:01:9b:04:f4:59: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0D:C3:AB:2B:CD:18:73:03:28:74:C4:89:55:97:5C:69:42:F9:0E X509v3 Authority Key Identifier: keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/vA3DqyvNGHMDKHTEiVWXXGlC-Q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.36.0/24 Signature Algorithm: sha256WithRSAEncryption 16:24:83:fe:31:a7:cd:4c:11:82:62:61:48:28:d9:cc:46:63: 44:97:a0:aa:0c:83:98:56:2b:4c:fe:68:08:ea:a2:f4:a1:ab: a8:86:10:c1:61:d7:4e:19:39:c8:7e:9a:9b:80:a3:1d:95:8b: d8:06:3f:10:5f:ef:a6:27:40:d4:ba:c4:e7:2a:93:08:68:11: f7:ac:81:9a:9e:73:61:53:73:2f:6c:17:bf:9e:bb:af:29:50: 8a:b0:f6:c6:9e:04:16:24:d2:95:18:9a:03:f1:39:e2:7f:ef: 26:42:94:2b:1c:78:3b:2f:ed:bd:da:2c:72:72:f1:5f:aa:93: 7a:6f:f9:dc:2c:56:a3:07:56:cd:75:38:68:55:e2:d6:b4:ac: fb:1e:a1:01:13:67:7b:32:cb:57:56:5f:1c:95:44:3a:51:d2: d5:a9:b8:8d:e0:6a:b5:3d:86:f7:80:2c:fd:e5:69:90:79:3f: 68:21:fb:3c:4e:04:6d:62:46:0f:2d:6f:11:c8:50:3a:8c:93: 93:bd:1a:97:fb:8c:00:1b:43:78:28:7f:76:32:6d:2c:a7:a7: 52:b6:c7:06:7c:d2:5b:b3:d0:26:6a:f6:d5:dc:6c:cb:65:63: fa:ba:14:0a:d2:e0:c2:51:cc:54:98:8d:81:9e:74:16:f5:89: 2e:83:b4:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdizX7oNTM2k3DWy3Gt8gBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTM4MWI2ZTc2Y2I5NTIwZThkOGY1Njc3NmVjYTBmZTE3 NmNjNDAwHhcNMjUxMTE5MTkxNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzBkYzNhYjJiY2QxODczMDMyODc0YzQ4OTU1OTc1YzY5NDJmOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTKL0CWNU5c/O6t6+VpVIyee9P90 hJdCH+yfIdUv9IO8w+0y0q6kPBu+yoVyOoq/KRBFmaMldIpntVTC9oFRd0D6ZbHX /KJSx5wmRbQ2Hh26dfrP0a56VXb/7Z7X4OkBjriVFBhXznD9Bq1DnDL/TmW9p+V5 blANO/B+lXk/ucbZv5it5afH1D6kdretv20MgFPFl4flo6eI6cgB1mXvde3ksUEo g16OKeMTfpDkClnQPd8ls9Wsy2GZCSebNhr9BY7C24JbZlDyE4v2rmANvfWcvuXK bAwIPLpTaZBXjDpuupHlrEKqXcpvBQZHauDYJpZT+7eVq21sAZsE9FlC7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwNw6srzRhzAyh0xIlVl1xpQvkOMB8GA1UdIwQY MBaAFKDjgbbnbLlSDo2PVnduyg/hdsxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEt YTljMzg0MTI4ZDQyLzEvdkEzRHF5dk5HSE1ES0hURWlWV1hYR2xDLVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEtYTljMzg0MTI4ZDQy LzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaEkMA0G CSqGSIb3DQEBCwUAA4IBAQAWJIP+MafNTBGCYmFIKNnMRmNEl6CqDIOYVitM/mgI 6qL0oauohhDBYddOGTnIfpqbgKMdlYvYBj8QX++mJ0DUusTnKpMIaBH3rIGannNh U3MvbBe/nruvKVCKsPbGngQWJNKVGJoD8Tnif+8mQpQrHHg7L+292ixycvFfqpN6 b/ncLFajB1bNdThoVeLWtKz7HqEBE2d7MstXVl8clUQ6UdLVqbiN4Gq1PYb3gCz9 5WmQeT9oIfs8TgRtYkYPLW8RyFA6jJOTvRqX+4wAG0N4KH92Mm0sp6dStscGfNJb s9AmavbV3GzLZWP6uhQK0uDCUcxUmI2BnnQW9Ykug7Th -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:18 2025 by rpki-client