This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Vn3N2K8vUmpzpb7aHJxP7a4cI_Y.roa File: Vn3N2K8vUmpzpb7aHJxP7a4cI_Y.roa (raw, json) Hash identifier: 6EnaepVuemYAM0UjuUfy+J1VA+Rh+UYSQtrRPuxamIk= Subject key identifier: 56:7D:CD:D8:AF:2F:52:6A:73:A5:BE:DA:1C:9C:4F:ED:AE:1C:23:F6 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019ADEB44865EBBEDE40828D84A4D6829E2D Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Vn3N2K8vUmpzpb7aHJxP7a4cI_Y.roa Signing time: Tue 02 Dec 2025 10:55:48 +0000 ROA not before: Tue 02 Dec 2025 10:55:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13186 IP address blocks: 213.192.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:b4:48:65:eb:be:de:40:82:8d:84:a4:d6:82:9e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Dec 2 10:55:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=567dcdd8af2f526a73a5beda1c9c4fedae1c23f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:97:68:bb:43:9c:f5:17:6a:eb:cf:8f:03: 48:5a:28:20:f5:97:bc:b5:1f:19:de:a2:2c:47:b2: 54:94:91:f2:9d:e9:f6:5f:e2:ad:2c:c2:23:fc:b9: 42:cb:92:cf:9b:8a:2d:17:b6:ac:58:e6:16:3e:99: 0f:f2:a4:46:91:81:00:86:61:1d:cb:6b:7c:e0:34: 91:c2:d7:1b:a5:37:3a:7e:8e:fe:4d:f9:48:f9:59: 87:89:dc:82:64:58:6d:21:0d:62:cb:ea:01:87:a9: 28:34:c0:66:cd:6a:a7:dc:17:f0:cd:d1:38:c1:f7: 6e:f8:1b:e2:98:3d:ba:37:0f:f5:78:28:e9:20:e4: 86:3f:d9:ad:6a:ef:ae:d7:52:34:b6:e0:4a:90:fc: a6:8f:bd:b4:a6:9b:8f:76:7b:76:fb:0e:5d:3f:51: e9:22:de:9d:5c:d8:1e:eb:67:58:11:9e:cb:61:8b: ad:7b:56:f6:3a:1d:6e:1e:06:61:d8:5e:7b:cf:dd: d7:89:fd:19:19:a4:69:b7:4d:34:ab:c6:70:e3:51: 47:e8:7a:77:ed:95:1d:1c:15:c1:ee:9a:98:c6:42: 30:79:44:99:3f:e5:39:2c:a6:d6:66:fa:68:b3:d7: 40:94:3c:4d:6f:6b:41:d3:3e:42:9d:00:2f:fd:33: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7D:CD:D8:AF:2F:52:6A:73:A5:BE:DA:1C:9C:4F:ED:AE:1C:23:F6 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/Vn3N2K8vUmpzpb7aHJxP7a4cI_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.192.254.0/24 Signature Algorithm: sha256WithRSAEncryption 55:60:fe:ba:0b:2b:08:d0:f1:16:b7:8f:8c:cf:34:45:42:13: 71:86:85:a8:cc:12:34:a5:4a:33:f2:92:6d:d4:a0:84:ce:9d: 88:bf:8c:6e:0f:50:36:42:b9:f3:28:78:4e:f0:70:c6:aa:d0: d6:2d:f3:d3:7c:c2:59:3b:56:6f:18:81:e9:17:59:05:4b:ad: da:1a:4c:0b:50:82:90:98:1c:7c:e3:5d:d2:78:65:c3:b3:8c: b0:2f:6c:e0:3c:49:7f:aa:32:8e:aa:35:cd:26:52:48:ac:d2: d7:9c:c6:4a:74:c5:49:cb:fc:4b:71:28:11:b4:29:a2:4a:2d: b6:e4:73:a6:86:26:6d:3c:f3:72:15:19:71:cd:ef:4a:3c:69: 1c:17:86:75:ed:09:58:86:d4:b0:41:d1:4c:7b:b1:89:7c:10: 11:72:91:41:22:5f:49:99:be:45:31:3f:a6:94:c9:64:59:74: 28:82:9c:9e:36:da:a2:f5:47:21:c2:5f:d1:ff:4e:52:f9:83: 7e:d8:59:29:93:74:ef:cd:51:af:bc:b3:83:83:b1:7a:f5:22: 4d:4e:2b:10:12:85:36:a5:82:c1:0c:96:24:e7:e8:61:d6:00: 78:99:1f:d1:e4:30:3e:c8:0d:93:8b:e7:56:17:3e:9c:71:9a: 93:92:84:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZretEhl677eQIKNhKTWgp4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjUxMjAyMTA1NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjdkY2RkOGFmMmY1MjZhNzNhNWJlZGExYzljNGZlZGFlMWMyM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKeXaLtDnPUXauvPjwNIWigg9Ze8 tR8Z3qIsR7JUlJHynen2X+KtLMIj/LlCy5LPm4otF7asWOYWPpkP8qRGkYEAhmEd y2t84DSRwtcbpTc6fo7+TflI+VmHidyCZFhtIQ1iy+oBh6koNMBmzWqn3BfwzdE4 wfdu+BvimD26Nw/1eCjpIOSGP9mtau+u11I0tuBKkPymj720ppuPdnt2+w5dP1Hp It6dXNge62dYEZ7LYYute1b2Oh1uHgZh2F57z93Xif0ZGaRpt000q8Zw41FH6Hp3 7ZUdHBXB7pqYxkIweUSZP+U5LKbWZvpos9dAlDxNb2tB0z5CnQAv/TPpnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFZ9zdivL1Jqc6W+2hycT+2uHCP2MB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvVm4zTjJLOHZVbXB6cGI3YUhKeFA3YTRjSV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cD+MA0G CSqGSIb3DQEBCwUAA4IBAQBVYP66CysI0PEWt4+MzzRFQhNxhoWozBI0pUoz8pJt 1KCEzp2Iv4xuD1A2QrnzKHhO8HDGqtDWLfPTfMJZO1ZvGIHpF1kFS63aGkwLUIKQ mBx8413SeGXDs4ywL2zgPEl/qjKOqjXNJlJIrNLXnMZKdMVJy/xLcSgRtCmiSi22 5HOmhiZtPPNyFRlxze9KPGkcF4Z17QlYhtSwQdFMe7GJfBARcpFBIl9Jmb5FMT+m lMlkWXQogpyeNtqi9Uchwl/R/05S+YN+2Fkpk3TvzVGvvLODg7F69SJNTisQEoU2 pYLBDJYk5+hh1gB4mR/R5DA+yA2Ti+dWFz6ccZqTkoQH -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:22 2025 by rpki-client