This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/vQgvBo8k7hDdrGs4_E-mcIsRvTo.roa File: vQgvBo8k7hDdrGs4_E-mcIsRvTo.roa (raw, json) Hash identifier: nruWecuV93Z70AnDAf7d93G7uLJn4YXCw7HPwllFV6Q= Subject key identifier: BD:08:2F:06:8F:24:EE:10:DD:AC:6B:38:FC:4F:A6:70:8B:11:BD:3A Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Certificate serial: 019AEE4BE317BB9C67B31774AA293F131730 Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/vQgvBo8k7hDdrGs4_E-mcIsRvTo.roa Signing time: Fri 05 Dec 2025 11:35:42 +0000 ROA not before: Fri 05 Dec 2025 11:35:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25090 IP address blocks: 193.8.222.0/23 maxlen: 23 194.56.96.0/23 maxlen: 24 194.56.98.0/23 maxlen: 24 194.56.112.0/22 maxlen: 24 194.56.112.0/23 maxlen: 23 194.56.116.0/22 maxlen: 23 194.56.116.0/23 maxlen: 23 194.56.118.0/23 maxlen: 23 194.56.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:4b:e3:17:bb:9c:67:b3:17:74:aa:29:3f:13:17:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Validity Not Before: Dec 5 11:35:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd082f068f24ee10ddac6b38fc4fa6708b11bd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:2f:31:27:73:14:c2:58:5c:42:f8:e2:d5: 32:16:11:97:d9:5a:92:31:93:39:f3:de:df:b0:27: 6f:5d:29:e2:c1:c4:99:81:3a:02:a3:52:f8:b6:be: 2e:8e:ed:e8:da:34:29:b6:e8:1e:ca:38:d2:38:5b: 99:a3:ee:2d:c2:3b:28:ff:6d:75:cd:fe:21:69:c3: da:6e:3e:c2:b0:ca:ae:18:48:ae:0e:04:a6:47:2d: 0d:cf:3c:3f:53:b8:f2:cd:6e:c0:18:9e:d8:f6:ea: 97:41:ff:35:97:1f:ae:80:23:01:8d:d9:6a:de:c3: 77:75:6a:c3:09:4d:62:38:eb:52:c5:78:37:a0:95: 45:48:2a:a7:59:e0:8f:a4:7a:37:64:e7:99:8c:47: 5e:12:40:92:b6:43:58:94:ae:5a:6b:0b:1d:e8:97: 1d:12:da:f6:14:04:80:4c:04:dd:e9:45:0a:b9:53: 06:1a:25:1c:d4:76:3e:e8:b4:42:7c:6f:e8:0a:07: ce:39:bf:f2:36:c5:c9:8f:d2:ca:1c:77:d9:b6:54: a7:f3:08:0d:73:81:f5:ea:35:56:86:81:d0:13:3b: 35:09:dd:26:65:6d:c0:47:94:4b:10:34:bc:ca:c0: 5a:22:76:37:5d:e0:86:fd:7b:82:ea:77:69:dc:52: ae:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:08:2F:06:8F:24:EE:10:DD:AC:6B:38:FC:4F:A6:70:8B:11:BD:3A X509v3 Authority Key Identifier: keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/vQgvBo8k7hDdrGs4_E-mcIsRvTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.222.0/23 194.56.96.0/22 194.56.112.0-194.56.123.255 Signature Algorithm: sha256WithRSAEncryption 53:e0:34:9e:f5:fe:31:a0:c0:fc:97:d3:5c:5e:12:cb:1c:ee: d1:ce:77:28:cb:a4:fa:ce:b8:2e:91:bf:f4:ca:36:ef:30:6f: 3f:c2:c1:a5:c1:35:3d:61:a4:55:46:d6:33:99:5e:92:4b:fa: 8c:68:86:c3:f8:8d:ea:90:4e:37:5f:a6:d7:11:07:66:8f:78: c5:be:da:75:2b:42:38:3e:83:29:13:f9:b4:48:0d:0e:f7:51: 9e:20:07:f7:4a:4a:e0:84:6c:18:b0:a4:6c:6d:5c:74:f0:14: 36:41:78:a5:1e:84:80:b3:85:5d:2d:e6:97:2d:79:2c:41:21: f0:0b:06:24:39:41:01:ca:91:75:55:eb:b2:d8:63:d1:7e:d4: 03:0a:75:90:5a:66:93:bb:db:ba:d7:e5:7f:85:81:dc:c2:12: fc:eb:d2:a4:8c:86:a3:41:b3:35:80:3a:9e:33:21:2d:d4:da: d6:63:9b:47:80:70:6e:0e:04:50:eb:1d:7d:29:ff:e8:1e:8f: d4:86:20:88:ff:7c:c7:ff:9a:3b:0b:ed:12:a7:33:3f:6b:1b: 36:76:8a:b0:05:4c:fc:3d:48:4f:a4:d6:31:81:f1:ee:18:25: d1:ea:0b:8f:7b:c3:5b:1a:6a:04:da:fe:f7:73:49:e3:73:58: 52:6b:bc:b3 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZruS+MXu5xnsxd0qik/ExcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx NTkzZWYwHhcNMjUxMjA1MTEzNTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDA4MmYwNjhmMjRlZTEwZGRhYzZiMzhmYzRmYTY3MDhiMTFiZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmcvMSdzFMJYXEL44tUyFhGX2VqS MZM5897fsCdvXSniwcSZgToCo1L4tr4uju3o2jQptugeyjjSOFuZo+4twjso/211 zf4hacPabj7CsMquGEiuDgSmRy0Nzzw/U7jyzW7AGJ7Y9uqXQf81lx+ugCMBjdlq 3sN3dWrDCU1iOOtSxXg3oJVFSCqnWeCPpHo3ZOeZjEdeEkCStkNYlK5aawsd6Jcd Etr2FASATATd6UUKuVMGGiUc1HY+6LRCfG/oCgfOOb/yNsXJj9LKHHfZtlSn8wgN c4H16jVWhoHQEzs1Cd0mZW3AR5RLEDS8ysBaInY3XeCG/XuC6ndp3FKuqQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFL0ILwaPJO4Q3axrOPxPpnCLEb06MB8GA1UdIwQY MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt YjEwYTgzMmJjYTQzLzEvdlFndkJvOGs3aERkckdzNF9FLW1jSXNSdlRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBwQjeAwQC wjhgMAwDBATCOHADBALCOHgwDQYJKoZIhvcNAQELBQADggEBAFPgNJ71/jGgwPyX 01xeEssc7tHOdyjLpPrOuC6Rv/TKNu8wbz/CwaXBNT1hpFVG1jOZXpJL+oxohsP4 jeqQTjdfptcRB2aPeMW+2nUrQjg+gykT+bRIDQ73UZ4gB/dKSuCEbBiwpGxtXHTw FDZBeKUehICzhV0t5pcteSxBIfALBiQ5QQHKkXVV67LYY9F+1AMKdZBaZpO727rX 5X+FgdzCEvzr0qSMhqNBszWAOp4zIS3U2tZjm0eAcG4OBFDrHX0p/+gej9SGIIj/ fMf/mjsL7RKnMz9rGzZ2irAFTPw9SE+k1jGB8e4YJdHqC497w1saagTa/vdzSeNz WFJrvLM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:21 2025 by rpki-client