This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/vGAiVBVNdJYslblkvqm01Ww4NSA.roa File: vGAiVBVNdJYslblkvqm01Ww4NSA.roa (raw, json) Hash identifier: +AJCCz11UPuNvZqhCS6Ls1F8jMG1vWB6IEnro+dLoOY= Subject key identifier: BC:60:22:54:15:4D:74:96:2C:95:B9:64:BE:A9:B4:D5:6C:38:35:20 Certificate issuer: /CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1 Certificate serial: 019AB8C786914B579DF71DE2124F91F73310 Authority key identifier: 62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/vGAiVBVNdJYslblkvqm01Ww4NSA.roa Signing time: Tue 25 Nov 2025 02:11:15 +0000 ROA not before: Tue 25 Nov 2025 02:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42357 IP address blocks: 185.218.196.0/24 maxlen: 24 194.140.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b8:c7:86:91:4b:57:9d:f7:1d:e2:12:4f:91:f7:33:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1 Validity Not Before: Nov 25 02:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bc602254154d74962c95b964bea9b4d56c383520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:8a:46:e4:e0:d5:72:cc:82:74:82:3c:9e: 86:14:9f:91:f8:69:c8:dd:43:61:2d:74:3b:91:e9: 48:41:a2:c0:cb:f9:c8:91:24:0d:85:06:e1:e2:b1: 8b:0c:de:9f:42:ab:d5:77:65:79:6e:4c:7f:06:99: 02:e1:64:dc:47:06:e5:8f:98:59:c0:a4:96:96:45: 62:af:a2:b7:b7:2f:d4:a3:02:e8:89:91:96:5f:3c: 83:0d:5b:4a:0c:5d:5a:df:f3:73:31:73:35:54:88: ef:2b:02:ab:f3:7a:e2:0f:2c:5e:ff:4b:87:9a:0e: b5:bd:38:d8:98:b7:69:ea:b1:11:d9:7b:1a:64:55: 6b:f9:a6:0a:f5:cc:e2:d3:cf:e1:a4:08:c9:50:51: f5:b6:09:e6:82:c3:f5:28:da:3e:c4:ad:93:85:84: c6:2d:97:48:3c:88:2a:26:59:65:b8:6c:1d:ee:0c: 77:84:a0:3b:87:0b:3a:32:04:9b:6c:8c:da:38:b7: 7e:60:f8:8f:97:8a:0e:be:df:15:d2:43:6a:08:53: 44:ed:d7:4f:96:f1:a8:d0:ef:e4:ec:85:db:b6:da: 20:d5:89:28:f9:4d:72:3a:94:a1:e8:62:6f:f6:de: 32:12:66:14:ce:59:63:b5:10:4a:14:90:21:30:f2: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:22:54:15:4D:74:96:2C:95:B9:64:BE:A9:B4:D5:6C:38:35:20 X509v3 Authority Key Identifier: keyid:62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/vGAiVBVNdJYslblkvqm01Ww4NSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.196.0/24 194.140.194.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:fb:e7:b7:0e:ce:d8:7a:f9:74:c6:dd:c0:8c:9b:f4:ca:2e: 29:6f:dc:5d:b6:d7:11:32:45:f1:c7:b3:3d:4c:ca:ad:69:f2: 97:e6:fd:30:dc:8c:64:14:44:81:79:02:1c:f4:75:ef:58:ef: 39:0d:1c:71:74:d3:c7:00:66:33:06:a7:c7:fc:72:1a:96:9f: 64:d1:6e:1f:f2:0e:94:63:be:63:88:95:49:31:64:2a:c9:0c: 22:ee:dd:f2:6b:30:37:e5:9f:3a:5c:c2:81:dd:72:7c:75:8c: dd:db:0c:bf:31:ac:cf:1f:04:de:e0:95:02:cf:99:7c:78:cc: f5:5f:dd:fb:8a:0b:d5:ac:00:88:26:15:a5:94:87:58:42:f4: 22:f8:00:e3:8b:6a:5b:fb:7c:95:b1:92:a9:5e:23:b7:39:0a: 2b:60:48:cc:19:fa:1c:93:e8:ec:77:06:9f:cc:4f:12:79:b4: 47:87:33:92:d7:6d:28:c2:67:88:f9:ad:6c:a8:53:98:c2:97: 47:ff:0c:07:b2:27:9e:46:cd:91:54:46:27:6b:62:33:dc:3b: 29:8e:83:64:2e:0e:82:87:1d:de:19:2b:f6:9c:2e:7f:64:67: ba:20:40:95:88:27:ab:c1:62:b1:45:59:40:fb:15:3e:ab:5f: 3a:7a:dc:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq4x4aRS1ed9x3iEk+R9zMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDFkNjc3ZTUzY2Q4NjAzNmVlMGZiMDYyOTA2Y2Q0MmZi YzFiZTEwHhcNMjUxMTI1MDIxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzYwMjI1NDE1NGQ3NDk2MmM5NWI5NjRiZWE5YjRkNTZjMzgzNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkouKRuTg1XLMgnSCPJ6GFJ+R+GnI 3UNhLXQ7kelIQaLAy/nIkSQNhQbh4rGLDN6fQqvVd2V5bkx/BpkC4WTcRwblj5hZ wKSWlkVir6K3ty/UowLoiZGWXzyDDVtKDF1a3/NzMXM1VIjvKwKr83riDyxe/0uH mg61vTjYmLdp6rER2XsaZFVr+aYK9czi08/hpAjJUFH1tgnmgsP1KNo+xK2ThYTG LZdIPIgqJllluGwd7gx3hKA7hws6MgSbbIzaOLd+YPiPl4oOvt8V0kNqCFNE7ddP lvGo0O/k7IXbttog1Yko+U1yOpSh6GJv9t4yEmYUzlljtRBKFJAhMPIFjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLxgIlQVTXSWLJW5ZL6ptNVsODUgMB8GA1UdIwQY MBaAFGLR1nflPNhgNu4PsGKQbNQvvBvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRIV2QtVTgyR0EyN2ctd1lwQnMxQy04Ry1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83NjRmZjItZDdlOC00MDYxLWJmZTYt M2NlZjk5NDBhNjk5LzEvdkdBaVZCVk5kSllzbGJsa3ZxbTAxV3c0TlNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83NjRmZjItZDdlOC00MDYxLWJmZTYtM2NlZjk5NDBhNjk5 LzEvWXRIV2QtVTgyR0EyN2ctd1lwQnMxQy04Ry1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudrEAwQA wozCMA0GCSqGSIb3DQEBCwUAA4IBAQAa++e3Ds7Yevl0xt3AjJv0yi4pb9xdttcR MkXxx7M9TMqtafKX5v0w3IxkFESBeQIc9HXvWO85DRxxdNPHAGYzBqfH/HIalp9k 0W4f8g6UY75jiJVJMWQqyQwi7t3yazA35Z86XMKB3XJ8dYzd2wy/MazPHwTe4JUC z5l8eMz1X937igvVrACIJhWllIdYQvQi+ADji2pb+3yVsZKpXiO3OQorYEjMGfoc k+jsdwafzE8SebRHhzOS120owmeI+a1sqFOYwpdH/wwHsieeRs2RVEYna2Iz3Dsp joNkLg6Chx3eGSv2nC5/ZGe6IECViCerwWKxRVlA+xU+q186etyO -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:36 2025 by rpki-client