This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/vP0VJrJmKW9-lmRN_sGvd9GiOjQ.roa File: vP0VJrJmKW9-lmRN_sGvd9GiOjQ.roa (raw, json) Hash identifier: olwIbl5Siou5wUh96CRmMWnDTZ9SiZIYbaP5/hjT0zA= Subject key identifier: BC:FD:15:26:B2:66:29:6F:7E:96:64:4D:FE:C1:AF:77:D1:A2:3A:34 Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019AEFCFE16E422593F2CBD0BB086246F9B3 Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/vP0VJrJmKW9-lmRN_sGvd9GiOjQ.roa Signing time: Fri 05 Dec 2025 18:39:29 +0000 ROA not before: Fri 05 Dec 2025 18:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8254 IP address blocks: 46.28.71.0/24 maxlen: 24 85.90.197.0/24 maxlen: 24 85.90.198.0/24 maxlen: 24 217.12.204.0/24 maxlen: 24 2a12:6fc3::/32 maxlen: 32 2a12:6fc4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:cf:e1:6e:42:25:93:f2:cb:d0:bb:08:62:46:f9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Dec 5 18:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bcfd1526b266296f7e96644dfec1af77d1a23a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cb:f7:5e:95:d6:3a:4a:ec:e4:30:bb:65:bc: c5:03:c2:b3:19:a4:f2:2a:e1:6a:11:32:c4:fe:db: 24:2f:3b:a0:84:45:4c:ee:a3:86:96:94:07:48:e1: c5:fe:1d:9f:40:89:7d:07:b6:a6:71:06:c1:63:1d: 24:9f:0e:dc:cd:31:8e:83:27:fd:d0:2f:4a:3a:c8: 2e:bb:68:0d:88:1b:e4:1c:29:a3:85:d2:80:c9:b9: 05:49:6d:4d:14:26:52:87:9c:be:a6:98:b9:ae:7d: 86:d5:ea:a1:5c:20:55:13:93:08:62:19:10:15:f1: 11:51:be:5d:c4:52:88:42:8e:7d:67:89:41:dd:b7: 9e:bf:23:e9:bb:91:91:0a:64:e6:82:b9:e4:b2:21: 2c:24:d1:d7:bf:4b:73:e4:f4:19:13:c6:ca:a1:de: fa:55:3f:33:d2:74:8e:09:ac:32:8d:a4:fd:f1:9e: 72:66:a6:ce:e7:58:06:fa:d1:64:84:39:e7:85:9e: f6:4f:45:09:28:cf:51:63:26:7a:a3:57:da:7d:ec: 9e:5e:ce:f1:81:fb:ed:8b:de:a6:19:f3:e6:bd:04: 94:75:ee:ed:19:19:ec:ef:dd:de:71:b3:1c:2a:d3: 80:ff:9c:51:10:c3:22:a2:35:dc:c3:bd:d4:9f:19: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FD:15:26:B2:66:29:6F:7E:96:64:4D:FE:C1:AF:77:D1:A2:3A:34 X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/vP0VJrJmKW9-lmRN_sGvd9GiOjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.71.0/24 85.90.197.0-85.90.198.255 217.12.204.0/24 IPv6: 2a12:6fc3::-2a12:6fc4:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 55:ba:a6:97:7f:73:3c:dc:ec:1c:ab:ed:1f:c6:25:c7:ce:59: d8:89:fd:8c:27:0b:d4:05:fa:b8:ed:b8:be:62:5d:15:ac:26: 34:27:cc:7d:9a:87:a4:8e:c1:b6:9b:8d:8e:c0:3f:e0:b7:5b: f5:ff:9b:26:3a:71:70:65:c8:57:f4:e4:ee:ff:db:3c:03:c2: 2d:72:70:aa:84:1c:2e:57:da:11:9c:83:fb:a3:4c:db:9f:78: fb:7a:0a:1a:f8:fc:ab:55:70:dc:36:3d:c6:b9:24:af:fd:ba: 9b:1a:bd:14:d9:02:af:4a:b1:ec:45:8e:3c:67:69:5a:08:e6: f8:8b:07:9a:f4:11:bf:9d:bf:80:e1:ad:4f:ae:9c:81:7d:4e: 7a:45:40:90:12:71:8e:52:4b:ee:b6:06:c0:8d:53:d0:f3:25: 6d:ab:9a:7c:b3:3f:d5:f9:1b:f2:f4:74:c3:ef:e8:b2:18:fb: 1a:fc:41:b9:f2:94:9f:7e:7d:f6:cf:b2:c7:7f:3c:07:f3:23: 86:fc:0f:61:92:e4:7d:17:3d:8e:7a:35:99:60:b2:04:75:da: 0c:ef:a4:c5:03:be:7f:93:ec:a7:b4:4b:46:5d:fc:d6:36:cd: 6d:68:bb:87:b7:c5:17:a2:a2:55:5a:55:4f:0b:c6:c4:6d:80: bd:d0:2f:37 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZrvz+FuQiWT8svQuwhiRvmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjUxMjA1MTgzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2ZkMTUyNmIyNjYyOTZmN2U5NjY0NGRmZWMxYWY3N2QxYTIzYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mv3XpXWOkrs5DC7ZbzFA8KzGaTy KuFqETLE/tskLzughEVM7qOGlpQHSOHF/h2fQIl9B7amcQbBYx0knw7czTGOgyf9 0C9KOsguu2gNiBvkHCmjhdKAybkFSW1NFCZSh5y+ppi5rn2G1eqhXCBVE5MIYhkQ FfERUb5dxFKIQo59Z4lB3beevyPpu5GRCmTmgrnksiEsJNHXv0tz5PQZE8bKod76 VT8z0nSOCawyjaT98Z5yZqbO51gG+tFkhDnnhZ72T0UJKM9RYyZ6o1fafeyeXs7x gfvti96mGfPmvQSUde7tGRns793ecbMcKtOA/5xREMMiojXcw73UnxkovwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFLz9FSayZilvfpZkTf7Br3fRojo0MB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEvdlAwVkpySm1LVzktbG1STl9zR3ZkOUdpT2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAgBAIAATAaAwQALhxHMAwD BABVWsUDBABVWsYDBADZDMwwFgQCAAIwEDAOAwUAKhJvwwMFACoSb8QwDQYJKoZI hvcNAQELBQADggEBAFW6ppd/czzc7Byr7R/GJcfOWdiJ/YwnC9QF+rjtuL5iXRWs JjQnzH2ah6SOwbabjY7AP+C3W/X/myY6cXBlyFf05O7/2zwDwi1ycKqEHC5X2hGc g/ujTNufePt6Chr4/KtVcNw2Pca5JK/9upsavRTZAq9KsexFjjxnaVoI5viLB5r0 Eb+dv4DhrU+unIF9TnpFQJAScY5SS+62BsCNU9DzJW2rmnyzP9X5G/L0dMPv6LIY +xr8QbnylJ9+ffbPssd/PAfzI4b8D2GS5H0XPY56NZlgsgR12gzvpMUDvn+T7Ke0 S0Zd/NY2zW1ou4e3xReiolVaVU8LxsRtgL3QLzc= -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:12 2025 by rpki-client