This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VvA2VVyh6PYbV01VN4lP089Ne6g.roa File: VvA2VVyh6PYbV01VN4lP089Ne6g.roa (raw, json) Hash identifier: oU2muTEaFBWHq+m7AZ6X7IM9MPHLVTiM4kry/GKVUpE= Subject key identifier: 56:F0:36:55:5C:A1:E8:F6:1B:57:4D:55:37:89:4F:D3:CF:4D:7B:A8 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019AEF7C938DD33100699CF7F965B86CA18D Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VvA2VVyh6PYbV01VN4lP089Ne6g.roa Signing time: Fri 05 Dec 2025 17:08:30 +0000 ROA not before: Fri 05 Dec 2025 17:08:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23061 IP address blocks: 158.173.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:7c:93:8d:d3:31:00:69:9c:f7:f9:65:b8:6c:a1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Dec 5 17:08:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=56f036555ca1e8f61b574d5537894fd3cf4d7ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:8a:5a:d7:c8:e1:67:49:c4:2c:ef:db:c5: d8:89:27:9e:f0:36:7d:e1:81:f8:2e:1b:57:bd:2f: fc:0a:28:7b:e0:0d:68:03:30:8f:10:46:a6:8e:76: 3a:eb:87:34:1b:a2:39:8b:e0:ab:06:cb:47:bf:b6: b6:dc:1c:7b:6b:61:11:da:86:ad:ec:3b:c7:d6:01: 98:83:49:c0:7a:15:9a:b5:66:fc:39:fe:2f:0c:18: 0e:10:57:e7:46:17:3e:e6:29:e3:74:90:f9:cf:1e: 8f:ef:13:37:c7:76:b4:f0:61:46:20:f4:e2:0b:c3: 61:02:59:a3:7a:3a:dc:84:cc:09:89:dc:eb:9e:83: 6f:a2:cf:fe:d2:fc:b5:6a:e3:d6:f8:5a:8c:e7:41: 2d:77:fc:72:c4:06:46:5d:b1:19:42:24:6e:d3:ce: 1b:7f:d7:5a:6e:0a:85:67:01:d7:8d:38:83:b3:f3: 9a:a6:dd:48:ad:7c:37:d3:fb:ed:48:6c:6e:48:9c: cb:12:91:55:bd:fd:d8:0a:3b:47:55:7e:01:26:2c: 79:6a:27:7e:2c:7c:88:56:e1:c2:c5:16:d9:f5:95: 4f:6b:19:b6:56:4d:d9:44:0c:87:9f:08:cf:27:a6: f0:2b:ac:0a:18:58:8d:cb:97:1e:0e:fc:3e:34:02: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:36:55:5C:A1:E8:F6:1B:57:4D:55:37:89:4F:D3:CF:4D:7B:A8 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VvA2VVyh6PYbV01VN4lP089Ne6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.230.0/23 Signature Algorithm: sha256WithRSAEncryption 75:d2:44:52:6c:df:92:7a:00:1b:dc:61:6b:17:10:43:97:1c: 12:44:b8:6e:5f:0e:f5:33:09:4e:8b:d9:83:77:ea:4d:95:07: d0:1f:c0:aa:39:85:77:db:01:b8:ff:31:a2:52:70:13:ab:a8: 3a:56:fc:de:66:50:17:84:dc:0d:97:20:71:69:19:8c:d0:db: 59:2b:49:42:55:55:ea:9f:31:91:91:48:8b:82:b2:38:68:31: 40:d1:74:8a:45:73:88:7b:dd:10:62:18:c1:12:f6:0f:21:4c: 0d:13:00:98:f6:8e:b8:50:b3:eb:76:04:84:c9:79:4e:fa:82: 81:b9:88:d4:0c:13:45:0d:30:1c:ee:0b:65:6f:ae:77:9f:fe: 68:65:cb:46:38:a6:c1:3a:bf:57:28:9d:75:11:d1:13:b7:5f: 7f:40:47:4c:fe:06:eb:e9:8b:ed:ec:62:49:18:68:b8:dc:74: 18:8e:ef:a1:56:17:7d:84:a5:0c:e8:2d:86:50:eb:2f:b7:d7: 3f:2f:b9:4e:e3:b9:8f:06:c2:6b:6b:6e:4e:fb:d2:e8:1b:ec: 6e:97:06:0c:08:e4:62:ef:95:ec:ae:d0:c0:fd:65:e3:73:7d: ab:e1:52:64:3e:f3:46:28:3c:5e:e1:47:a1:0d:6c:29:7d:d3: 8e:fc:f3:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrvfJON0zEAaZz3+WW4bKGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMjA1MTcwODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmYwMzY1NTVjYTFlOGY2MWI1NzRkNTUzNzg5NGZkM2NmNGQ3YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V+KWtfI4WdJxCzv28XYiSee8DZ9 4YH4LhtXvS/8Cih74A1oAzCPEEamjnY664c0G6I5i+CrBstHv7a23Bx7a2ER2oat 7DvH1gGYg0nAehWatWb8Of4vDBgOEFfnRhc+5injdJD5zx6P7xM3x3a08GFGIPTi C8NhAlmjejrchMwJidzrnoNvos/+0vy1auPW+FqM50Etd/xyxAZGXbEZQiRu084b f9dabgqFZwHXjTiDs/Oapt1IrXw30/vtSGxuSJzLEpFVvf3YCjtHVX4BJix5aid+ LHyIVuHCxRbZ9ZVPaxm2Vk3ZRAyHnwjPJ6bwK6wKGFiNy5ceDvw+NALweQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFbwNlVcoej2G1dNVTeJT9PPTXuoMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvVnZBMlZWeWg2UFliVjAxVk40bFAwODlOZTZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnq3mMA0G CSqGSIb3DQEBCwUAA4IBAQB10kRSbN+SegAb3GFrFxBDlxwSRLhuXw71MwlOi9mD d+pNlQfQH8CqOYV32wG4/zGiUnATq6g6VvzeZlAXhNwNlyBxaRmM0NtZK0lCVVXq nzGRkUiLgrI4aDFA0XSKRXOIe90QYhjBEvYPIUwNEwCY9o64ULPrdgSEyXlO+oKB uYjUDBNFDTAc7gtlb653n/5oZctGOKbBOr9XKJ11EdETt19/QEdM/gbr6Yvt7GJJ GGi43HQYju+hVhd9hKUM6C2GUOsvt9c/L7lO47mPBsJra25O+9LoG+xulwYMCORi 75XsrtDA/WXjc32r4VJkPvNGKDxe4UehDWwpfdOO/PMz -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:15 2025 by rpki-client