This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/vZVAzO1comLh9rD--AKOhaNfFxQ.roa File: vZVAzO1comLh9rD--AKOhaNfFxQ.roa (raw, json) Hash identifier: H/PssdlCji8ajNbZih50zN0dew5cG4Cssgd64RB/Rhg= Subject key identifier: BD:95:40:CC:ED:5C:A2:62:E1:F6:B0:FE:F8:02:8E:85:A3:5F:17:14 Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d Certificate serial: 019AA5D5005A37617F7AF21616EC6AD0C339 Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/vZVAzO1comLh9rD--AKOhaNfFxQ.roa Signing time: Fri 21 Nov 2025 09:53:11 +0000 ROA not before: Fri 21 Nov 2025 09:53:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208972 IP address blocks: 178.210.160.0/24 maxlen: 24 178.210.161.0/24 maxlen: 24 178.210.162.0/24 maxlen: 24 178.210.165.0/24 maxlen: 24 178.210.166.0/24 maxlen: 24 178.210.168.0/24 maxlen: 24 178.210.170.0/24 maxlen: 24 178.210.171.0/24 maxlen: 24 178.210.172.0/24 maxlen: 24 178.210.173.0/24 maxlen: 24 178.210.174.0/24 maxlen: 24 178.210.175.0/24 maxlen: 24 178.210.176.0/24 maxlen: 24 178.210.177.0/24 maxlen: 24 178.210.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:d5:00:5a:37:61:7f:7a:f2:16:16:ec:6a:d0:c3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d Validity Not Before: Nov 21 09:53:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd9540cced5ca262e1f6b0fef8028e85a35f1714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2a:82:2f:bc:d4:9e:e3:61:51:cd:1a:70:3b: 52:f7:bd:88:c4:2d:d9:f9:bd:72:fb:75:3c:9e:3c: a8:36:19:1c:9b:7b:ef:e3:8e:af:e2:a3:80:6b:3e: 80:ef:18:e2:3c:19:45:83:b7:84:86:36:51:ca:26: 2c:8d:ac:d6:58:8b:85:1d:95:8a:27:9b:17:2a:1d: 0d:fe:b4:6c:02:e7:2d:5c:13:ca:c6:3b:36:1f:2f: a8:91:95:ad:18:c1:d2:fa:8a:fb:fe:a7:92:fd:4a: 79:61:56:2c:82:62:8e:dd:7b:c9:f0:8a:02:86:9a: e9:71:a5:61:4f:a9:9a:86:54:cb:62:32:a1:49:f9: 3e:a7:be:ea:dc:9e:55:b3:ce:af:71:7a:7f:82:7e: bb:fe:64:38:89:b6:03:29:ac:53:88:24:78:b8:48: f6:60:42:af:36:9c:00:b3:7b:df:3e:ba:b0:62:85: 81:66:75:e6:dd:57:6a:4b:cc:4a:42:7d:81:0b:59: a9:1c:31:e1:25:a1:f2:4b:50:fd:83:cd:78:8e:d7: 2f:82:20:fd:18:94:27:42:fe:28:27:12:a4:f9:e2: 41:a4:9d:24:98:6b:64:31:88:f4:d9:a0:af:d6:06: e3:6d:b7:a2:2f:d7:13:41:3e:d6:2f:49:37:f4:11: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:95:40:CC:ED:5C:A2:62:E1:F6:B0:FE:F8:02:8E:85:A3:5F:17:14 X509v3 Authority Key Identifier: keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/vZVAzO1comLh9rD--AKOhaNfFxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.160.0-178.210.162.255 178.210.165.0-178.210.166.255 178.210.168.0/24 178.210.170.0-178.210.178.255 Signature Algorithm: sha256WithRSAEncryption 4f:f7:e2:c7:07:89:dd:f7:2b:fd:e4:a4:fe:75:6e:52:15:4a: a7:89:7f:9b:48:fa:84:43:08:ed:54:7e:9d:78:c6:d2:15:05: 2a:b0:ed:4a:f3:8e:cd:c1:02:5f:ca:1c:74:c6:8d:9e:f9:f2: de:80:0c:bb:79:24:f5:91:f1:45:05:97:c4:1f:fb:64:da:bc: 97:7f:49:d6:f8:0c:f0:ba:dc:25:72:03:12:50:38:8c:f2:57: 27:57:db:f1:d5:1c:3a:2f:7b:de:6d:d3:b4:09:65:b6:86:3d: 2a:ac:e6:d5:84:8f:25:b8:e7:0c:05:df:53:bf:f8:67:5d:9f: 04:37:01:00:7b:0f:5d:e7:d5:9c:eb:2d:b4:7e:90:d9:75:66: 84:45:43:86:7a:80:81:a3:7b:8b:dc:44:24:28:7a:57:d6:15: f5:68:cb:f6:59:64:12:a5:21:3b:7b:44:3c:ec:a7:1c:32:82: 33:3a:0f:91:44:8d:b6:2c:2d:a0:38:37:ac:bb:db:51:5d:07: cf:c2:ea:24:2e:cf:28:b9:8a:5d:6a:ee:4e:4d:6a:32:8d:c5: 12:39:c3:bf:2a:df:93:91:14:a0:13:e0:b0:2d:1c:b0:08:39: 21:ec:3a:f8:62:22:7d:fb:d3:75:79:99:dc:a1:60:4e:dc:d5: 2d:f5:ae:71 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZql1QBaN2F/evIWFuxq0MM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz NTQzNWQwHhcNMjUxMTIxMDk1MzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDk1NDBjY2VkNWNhMjYyZTFmNmIwZmVmODAyOGU4NWEzNWYxNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iqCL7zUnuNhUc0acDtS972IxC3Z +b1y+3U8njyoNhkcm3vv446v4qOAaz6A7xjiPBlFg7eEhjZRyiYsjazWWIuFHZWK J5sXKh0N/rRsAuctXBPKxjs2Hy+okZWtGMHS+or7/qeS/Up5YVYsgmKO3XvJ8IoC hprpcaVhT6mahlTLYjKhSfk+p77q3J5Vs86vcXp/gn67/mQ4ibYDKaxTiCR4uEj2 YEKvNpwAs3vfPrqwYoWBZnXm3VdqS8xKQn2BC1mpHDHhJaHyS1D9g814jtcvgiD9 GJQnQv4oJxKk+eJBpJ0kmGtkMYj02aCv1gbjbbeiL9cTQT7WL0k39BF9nwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFL2VQMztXKJi4faw/vgCjoWjXxcUMB8GA1UdIwQY MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct NTA3MDExNTcwZWU2LzEvdlpWQXpPMWNvbUxoOXJELS1BS09oYU5mRnhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2 LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAWy0qAD BACy0qIwDAMEALLSpQMEALLSpgMEALLSqDAMAwQBstKqAwQAstKyMA0GCSqGSIb3 DQEBCwUAA4IBAQBP9+LHB4nd9yv95KT+dW5SFUqniX+bSPqEQwjtVH6deMbSFQUq sO1K847NwQJfyhx0xo2e+fLegAy7eST1kfFFBZfEH/tk2ryXf0nW+AzwutwlcgMS UDiM8lcnV9vx1Rw6L3vebdO0CWW2hj0qrObVhI8luOcMBd9Tv/hnXZ8ENwEAew9d 59Wc6y20fpDZdWaERUOGeoCBo3uL3EQkKHpX1hX1aMv2WWQSpSE7e0Q87KccMoIz Og+RRI22LC2gODesu9tRXQfPwuokLs8ouYpdau5OTWoyjcUSOcO/Kt+TkRSgE+Cw LRywCDkh7Dr4YiJ9+9N1eZncoWBO3NUt9a5x -----END CERTIFICATE-----Generated at Sat Dec 6 14:15:50 2025 by rpki-client