This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vNHiMEZdd8DjXf6FIPioGw_Nz8s.roa File: vNHiMEZdd8DjXf6FIPioGw_Nz8s.roa (raw, json) Hash identifier: ZsaxU7fC3YaA3paCfQTFF+K5ZI93iI4NhTUJczYUy2E= Subject key identifier: BC:D1:E2:30:46:5D:77:C0:E3:5D:FE:85:20:F8:A8:1B:0F:CD:CF:CB Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019AB110BC8F70638415851C3523D8A3892B Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vNHiMEZdd8DjXf6FIPioGw_Nz8s.roa Signing time: Sun 23 Nov 2025 14:14:15 +0000 ROA not before: Sun 23 Nov 2025 14:14:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59867 IP address blocks: 31.133.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:10:bc:8f:70:63:84:15:85:1c:35:23:d8:a3:89:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 23 14:14:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bcd1e230465d77c0e35dfe8520f8a81b0fcdcfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:b3:d9:f2:ba:6b:2e:8b:6b:de:41:cd:c6: 3c:b8:13:58:88:20:30:7c:30:83:2f:b9:b4:c5:73: 46:d0:8e:6d:e1:14:0a:fa:36:a8:0d:5e:9f:87:a7: d1:0a:76:7c:6d:20:5a:87:2f:8f:47:e4:91:63:d2: ec:cb:1d:dc:d0:e8:c1:53:ee:59:46:3a:c8:99:58: 47:b7:94:4a:0e:f3:06:d8:4e:41:6b:f6:60:d3:87: b5:09:60:0b:b1:66:01:e6:03:ba:39:07:18:00:9e: 05:f1:af:19:84:f1:4d:b7:7e:8a:94:df:86:a6:79: 01:2b:80:ff:8a:42:e5:3b:6d:4d:8a:dc:46:12:39: 0e:31:4e:dd:66:b2:3c:d4:11:09:45:69:52:de:62: 3c:5f:c1:1f:d8:ea:28:8b:0a:0a:df:25:a7:a5:49: 4c:17:c7:7d:11:4c:d8:ea:3f:d7:89:fe:45:22:6d: 64:b8:e5:ca:71:c5:4e:3c:3e:b8:68:56:a2:c2:4f: a7:24:9b:46:79:f5:74:9f:59:51:d1:5f:1d:20:65: 6e:6d:46:6e:a8:dd:1a:20:b0:54:1a:4f:9c:15:f3: 6b:1e:4f:e3:ef:9f:5b:97:4a:06:70:3d:f7:2b:f6: 65:e3:c6:5d:88:9b:6a:b7:a6:c3:fa:c3:7b:c1:c7: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D1:E2:30:46:5D:77:C0:E3:5D:FE:85:20:F8:A8:1B:0F:CD:CF:CB X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vNHiMEZdd8DjXf6FIPioGw_Nz8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.36.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:bb:35:4f:04:33:17:de:5e:e0:b5:f8:1d:2e:da:33:f1:7d: 02:66:a0:4c:c0:c0:df:a9:7e:f3:79:30:61:99:46:0b:cf:cd: b5:ab:52:42:74:af:12:65:93:23:c2:6d:71:9c:e1:68:85:a0: ee:b8:04:b3:28:d2:6f:e0:e5:f3:e0:22:e3:08:43:0f:fd:2a: 5c:15:96:00:77:90:69:64:f0:84:07:e2:9a:e2:72:58:ca:b5: 45:bb:7d:cb:df:ef:3c:54:b6:42:88:95:0e:e3:c1:d4:d9:d4: e9:b1:2f:30:51:9b:1c:8d:b6:e1:09:b2:2a:90:8c:aa:2f:90: 59:84:d7:d5:5b:e2:c6:48:db:ca:81:0e:17:60:f7:21:90:c3: d6:3b:35:f5:c7:eb:34:48:45:d0:b7:9f:ff:8e:f7:80:94:e5: 70:cb:7d:a2:c1:e5:c9:cf:44:11:dc:3b:c4:46:1d:ae:d7:e1: e2:cf:c6:4c:d5:d9:8a:66:44:d7:69:58:91:97:d4:3a:5d:fb: da:6d:0c:ed:8d:ad:a4:57:f9:36:da:bd:e1:b4:e2:f1:72:af: e0:62:d7:b0:3d:38:a1:0c:9a:27:89:66:c8:a7:24:ea:6b:55: bd:05:1e:de:b4:a7:fd:3d:85:3a:ea:95:67:6c:03:b5:6c:18: 10:9a:17:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqxELyPcGOEFYUcNSPYo4krMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTIzMTQxNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2QxZTIzMDQ2NWQ3N2MwZTM1ZGZlODUyMGY4YTgxYjBmY2RjZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Gz2fK6ay6La95BzcY8uBNYiCAw fDCDL7m0xXNG0I5t4RQK+jaoDV6fh6fRCnZ8bSBahy+PR+SRY9Lsyx3c0OjBU+5Z RjrImVhHt5RKDvMG2E5Ba/Zg04e1CWALsWYB5gO6OQcYAJ4F8a8ZhPFNt36KlN+G pnkBK4D/ikLlO21NitxGEjkOMU7dZrI81BEJRWlS3mI8X8Ef2OooiwoK3yWnpUlM F8d9EUzY6j/Xif5FIm1kuOXKccVOPD64aFaiwk+nJJtGefV0n1lR0V8dIGVubUZu qN0aILBUGk+cFfNrHk/j759bl0oGcD33K/Zl48ZdiJtqt6bD+sN7wcfWPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzR4jBGXXfA413+hSD4qBsPzc/LMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvdk5IaU1FWmRkOERqWGY2RklQaW9Hd19OejhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH4UkMA0G CSqGSIb3DQEBCwUAA4IBAQAcuzVPBDMX3l7gtfgdLtoz8X0CZqBMwMDfqX7zeTBh mUYLz821q1JCdK8SZZMjwm1xnOFohaDuuASzKNJv4OXz4CLjCEMP/SpcFZYAd5Bp ZPCEB+Ka4nJYyrVFu33L3+88VLZCiJUO48HU2dTpsS8wUZscjbbhCbIqkIyqL5BZ hNfVW+LGSNvKgQ4XYPchkMPWOzX1x+s0SEXQt5//jveAlOVwy32iweXJz0QR3DvE Rh2u1+Hiz8ZM1dmKZkTXaViRl9Q6XfvabQztja2kV/k22r3htOLxcq/gYtewPTih DJoniWbIpyTqa1W9BR7etKf9PYU66pVnbAO1bBgQmhdH -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:52 2025 by rpki-client