This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vnDIFlpveB9QduKvbWhYvA-tAlY.roa File: vnDIFlpveB9QduKvbWhYvA-tAlY.roa (raw, json) Hash identifier: A5Ig9zm93/ZaEcPyv1j7seH/R5vVgXPnGrSLQQGQYe0= Subject key identifier: BE:70:C8:16:5A:6F:78:1F:50:76:E2:AF:6D:68:58:BC:0F:AD:02:56 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019A6B03B9A9F49A1EA3EC7005A29700D2D6 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vnDIFlpveB9QduKvbWhYvA-tAlY.roa Signing time: Sun 09 Nov 2025 23:46:37 +0000 ROA not before: Sun 09 Nov 2025 23:46:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8274 IP address blocks: 31.133.46.0/24 maxlen: 24 176.124.20.0/23 maxlen: 23 176.124.20.0/24 maxlen: 24 176.124.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6b:03:b9:a9:f4:9a:1e:a3:ec:70:05:a2:97:00:d2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 9 23:46:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be70c8165a6f781f5076e2af6d6858bc0fad0256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:43:bc:e7:82:df:74:07:bf:a7:83:b4:c0: 45:76:39:39:38:72:67:04:47:d7:11:a0:ff:00:98: 55:25:62:fe:ab:55:66:b6:85:2a:1f:d9:0e:22:d5: 29:28:6b:7a:ed:94:1e:a3:77:a3:12:ed:fe:a8:4a: f5:b4:ff:fc:ca:da:bb:b5:5d:f2:f5:d8:0b:b2:b1: de:44:ba:8f:8c:d5:ea:c4:62:35:e6:6b:f9:54:46: 72:45:da:d5:e8:0e:bd:64:4b:63:ac:cf:fb:b4:de: 64:c9:d0:c8:c3:b6:3c:5d:4c:07:a1:4f:8e:3c:7c: e5:dc:63:70:d4:0f:7a:53:a2:d4:06:1f:6a:fc:1c: e2:df:1a:ba:18:a0:cb:91:cc:b8:5e:12:16:68:3f: 54:b2:03:66:3b:ba:82:e7:a2:2a:ec:f6:3e:3b:e4: c0:76:42:03:d4:fb:4a:2f:28:83:0c:76:f2:6b:38: 06:68:75:ea:f1:3b:ba:24:ac:72:86:b6:6d:c4:fe: 9a:b4:35:d4:47:83:65:e3:94:5f:ab:57:ed:59:15: 52:52:1c:b6:2f:fe:e1:df:01:03:0f:6e:2e:0a:c1: cc:71:45:0b:19:ae:d2:99:2e:cc:c1:1e:52:bc:9d: 35:31:b8:4c:a1:c0:00:16:b0:68:76:fb:27:45:0b: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:70:C8:16:5A:6F:78:1F:50:76:E2:AF:6D:68:58:BC:0F:AD:02:56 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/vnDIFlpveB9QduKvbWhYvA-tAlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.46.0/24 176.124.20.0/23 Signature Algorithm: sha256WithRSAEncryption 66:5d:5e:65:91:2c:84:c3:bb:c9:39:c9:ad:ac:98:57:1a:2e: e8:0a:b3:88:23:3d:ea:0c:19:4a:cd:a3:ae:5d:bc:1b:74:b0: 25:5d:67:04:53:c7:66:cf:8a:d8:c7:86:d6:c4:78:44:b8:48: 71:a5:04:a9:bb:8a:15:87:7a:16:3b:42:f6:f0:2c:ec:79:8b: b9:29:b1:fc:d5:df:7d:51:ed:2b:2d:80:66:c6:dc:e0:c4:31: bd:13:f1:0f:f8:ed:10:22:cc:0e:8d:85:8d:66:51:28:6d:42: 44:ff:8f:0a:7c:13:a2:c6:a1:d7:3a:e4:01:5d:da:83:55:65: 78:03:e0:8b:52:fa:48:39:c0:65:b3:44:9c:15:a1:51:8a:a3: d3:48:3d:3c:e9:66:03:bd:71:ad:22:78:ba:4a:b6:0a:54:2a: 1f:9d:ec:04:b8:6c:de:9a:03:9f:1b:f5:bd:b1:d4:7f:d1:e9: a6:86:4b:04:8e:10:2d:1d:2f:cf:ea:e2:f9:97:02:ac:87:89: 9f:40:92:82:85:b5:2d:b8:11:e4:ba:62:f5:ef:e5:68:ad:14: 6e:34:71:a1:fb:48:57:9f:26:09:0b:7c:3e:22:50:25:5c:8e: 4e:58:3c:16:70:eb:7b:a8:84:9c:9c:0a:ae:09:c2:c8:57:19: a4:66:c8:f4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZprA7mp9Joeo+xwBaKXANLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTA5MjM0NjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTcwYzgxNjVhNmY3ODFmNTA3NmUyYWY2ZDY4NThiYzBmYWQwMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb5DvOeC33QHv6eDtMBFdjk5OHJn BEfXEaD/AJhVJWL+q1VmtoUqH9kOItUpKGt67ZQeo3ejEu3+qEr1tP/8ytq7tV3y 9dgLsrHeRLqPjNXqxGI15mv5VEZyRdrV6A69ZEtjrM/7tN5kydDIw7Y8XUwHoU+O PHzl3GNw1A96U6LUBh9q/Bzi3xq6GKDLkcy4XhIWaD9UsgNmO7qC56Iq7PY+O+TA dkID1PtKLyiDDHbyazgGaHXq8Tu6JKxyhrZtxP6atDXUR4Nl45Rfq1ftWRVSUhy2 L/7h3wEDD24uCsHMcUULGa7SmS7MwR5SvJ01MbhMocAAFrBodvsnRQtG6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL5wyBZab3gfUHbir21oWLwPrQJWMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvdm5ESUZscHZlQjlRZHVLdmJXaFl2QS10QWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH4UuAwQB sHwUMA0GCSqGSIb3DQEBCwUAA4IBAQBmXV5lkSyEw7vJOcmtrJhXGi7oCrOIIz3q DBlKzaOuXbwbdLAlXWcEU8dmz4rYx4bWxHhEuEhxpQSpu4oVh3oWO0L28CzseYu5 KbH81d99Ue0rLYBmxtzgxDG9E/EP+O0QIswOjYWNZlEobUJE/48KfBOixqHXOuQB XdqDVWV4A+CLUvpIOcBls0ScFaFRiqPTSD086WYDvXGtIni6SrYKVCofnewEuGze mgOfG/W9sdR/0emmhksEjhAtHS/P6uL5lwKsh4mfQJKChbUtuBHkumL17+VorRRu NHGh+0hXnyYJC3w+IlAlXI5OWDwWcOt7qIScnAquCcLIVxmkZsj0 -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:28 2025 by rpki-client