This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sVFvhPTGE9TJuahYWEfjn7dKcz0.roa File: sVFvhPTGE9TJuahYWEfjn7dKcz0.roa (raw, json) Hash identifier: b1XGfoCyRED2I19jdWEet6IajDI1EqYMguVUPLWpFuE= Subject key identifier: B1:51:6F:84:F4:C6:13:D4:C9:B9:A8:58:58:47:E3:9F:B7:4A:73:3D Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019ADEC5ADFDF32C8611345EC3E3A81D8376 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sVFvhPTGE9TJuahYWEfjn7dKcz0.roa Signing time: Tue 02 Dec 2025 11:14:48 +0000 ROA not before: Tue 02 Dec 2025 11:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212558 IP address blocks: 104.222.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:c5:ad:fd:f3:2c:86:11:34:5e:c3:e3:a8:1d:83:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Dec 2 11:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1516f84f4c613d4c9b9a8585847e39fb74a733d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:fa:65:0c:86:f2:9d:b3:18:60:7e:95:4d: 14:cf:0f:5d:bd:45:84:4e:cd:db:cc:fd:1d:f1:85: e1:73:03:b1:31:10:99:49:68:80:49:94:2e:6b:48: ea:66:49:ae:8e:4b:76:e9:da:ca:55:f7:2d:03:15: 61:37:6a:4a:86:ab:31:1c:37:69:36:5a:e3:03:20: b3:be:fc:22:00:b5:33:0c:59:1e:88:59:91:bc:11: 64:fc:7c:21:48:c4:4c:89:83:f7:f7:87:3b:03:fd: 9a:23:40:e5:22:f4:4d:c3:7d:63:54:b8:a3:5b:11: 4e:8c:44:2d:ca:87:49:8f:95:0a:83:14:51:12:3c: 28:d2:47:79:1b:eb:e8:57:77:97:b1:8f:35:28:32: 4c:20:e9:33:2f:55:4f:22:b3:27:65:70:ee:6b:c1: 8a:73:23:2d:93:dd:8f:3a:10:2e:f6:23:3a:58:8d: 6e:28:37:33:bf:ab:2f:75:16:02:10:b6:29:af:c4: 35:c0:87:fb:b4:91:b0:5a:84:4b:d5:e0:d9:95:ba: 11:77:25:29:b2:70:33:c8:b2:44:3f:6d:e0:fd:86: c7:5c:9c:05:14:27:e5:88:ca:5c:56:40:4c:ab:6e: cd:e8:79:e4:4e:e7:4b:20:55:31:2d:5c:3e:a3:f5: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:51:6F:84:F4:C6:13:D4:C9:B9:A8:58:58:47:E3:9F:B7:4A:73:3D X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/sVFvhPTGE9TJuahYWEfjn7dKcz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.222.178.0/24 Signature Algorithm: sha256WithRSAEncryption 50:47:ba:a0:75:77:51:86:14:04:df:94:c5:27:79:8e:47:ff: 09:2b:e5:83:09:61:36:e8:c5:8e:b3:eb:4d:7c:09:bf:46:d9: 16:d4:8a:d6:c3:5d:64:bc:74:6f:95:7e:67:21:1d:29:ab:ff: 57:b6:ee:53:23:e9:56:a4:05:10:29:96:2e:da:c8:0c:fb:b8: 1e:c6:da:f4:07:5f:7e:0f:6b:cb:06:37:ec:01:82:ad:6f:6c: 8e:dd:48:8e:74:59:43:c3:1f:81:e4:d6:44:5a:18:f7:c4:06: 40:e4:be:eb:87:33:d5:ef:49:8e:64:91:0c:3f:2f:e5:80:dd: bc:ad:f5:2f:63:fc:14:9f:4a:e0:d9:4a:79:52:2c:d6:9f:63: ad:ca:63:f8:b2:f4:7a:98:a9:f2:9a:6c:11:d4:c6:2a:67:27: b4:dd:f9:9d:54:e4:48:15:0b:ae:a4:fb:3b:74:29:e8:a9:0e: 52:73:1a:08:ed:12:7b:7e:a2:2c:2a:db:ed:62:46:dc:e8:33: b6:2d:47:bc:dd:dc:d9:d4:3e:87:e6:66:ac:87:97:b6:bc:13: 33:a4:07:34:84:ac:96:70:00:e2:c9:fd:94:e1:b8:38:aa:1f: 01:2a:27:32:bb:74:8b:91:c9:26:72:49:7f:f7:fe:b7:be:f6: 68:38:f3:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrexa398yyGETRew+OoHYN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjUxMjAyMTExNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTUxNmY4NGY0YzYxM2Q0YzliOWE4NTg1ODQ3ZTM5ZmI3NGE3MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UD6ZQyG8p2zGGB+lU0Uzw9dvUWE Ts3bzP0d8YXhcwOxMRCZSWiASZQua0jqZkmujkt26drKVfctAxVhN2pKhqsxHDdp NlrjAyCzvvwiALUzDFkeiFmRvBFk/HwhSMRMiYP394c7A/2aI0DlIvRNw31jVLij WxFOjEQtyodJj5UKgxRREjwo0kd5G+voV3eXsY81KDJMIOkzL1VPIrMnZXDua8GK cyMtk92POhAu9iM6WI1uKDczv6svdRYCELYpr8Q1wIf7tJGwWoRL1eDZlboRdyUp snAzyLJEP23g/YbHXJwFFCfliMpcVkBMq27N6HnkTudLIFUxLVw+o/USLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFRb4T0xhPUybmoWFhH45+3SnM9MB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvc1ZGdmhQVEdFOVRKdWFoWVdFZmpuN2RLY3owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaN6yMA0G CSqGSIb3DQEBCwUAA4IBAQBQR7qgdXdRhhQE35TFJ3mOR/8JK+WDCWE26MWOs+tN fAm/RtkW1IrWw11kvHRvlX5nIR0pq/9Xtu5TI+lWpAUQKZYu2sgM+7gextr0B19+ D2vLBjfsAYKtb2yO3UiOdFlDwx+B5NZEWhj3xAZA5L7rhzPV70mOZJEMPy/lgN28 rfUvY/wUn0rg2Up5UizWn2OtymP4svR6mKnymmwR1MYqZye03fmdVORIFQuupPs7 dCnoqQ5ScxoI7RJ7fqIsKtvtYkbc6DO2LUe83dzZ1D6H5mash5e2vBMzpAc0hKyW cADiyf2U4bg4qh8BKicyu3SLkckmckl/9/63vvZoOPP3 -----END CERTIFICATE-----Generated at Sun Dec 7 06:45:20 2025 by rpki-client