This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VOVVJpYy81zYk3m2SqtRJyzMIkM.roa File: VOVVJpYy81zYk3m2SqtRJyzMIkM.roa (raw, json) Hash identifier: 5JJxdt+n9aFDUrN29lk7KeyaobdTm03QXxv2iN/1C+E= Subject key identifier: 54:E5:55:26:96:32:F3:5C:D8:93:79:B6:4A:AB:51:27:2C:CC:22:43 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B216206A16809760AA13F1F1B5EF93A18 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VOVVJpYy81zYk3m2SqtRJyzMIkM.roa Signing time: Mon 15 Dec 2025 09:40:30 +0000 ROA not before: Mon 15 Dec 2025 09:40:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64267 IP address blocks: 77.93.142.0/24 maxlen: 24 89.213.229.0/24 maxlen: 24 217.145.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:62:06:a1:68:09:76:0a:a1:3f:1f:1b:5e:f9:3a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 15 09:40:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54e555269632f35cd89379b64aab51272ccc2243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fc:fc:7b:f7:ca:6a:6d:04:24:0b:be:3f:23: ec:ba:75:a5:29:e1:48:88:b8:b9:12:a6:3d:63:9b: d7:b4:aa:89:e5:36:51:8a:4a:27:c3:84:8f:f0:77: 9f:67:00:4e:e5:df:b6:ab:c8:65:2a:54:a1:72:f8: 3c:5e:1a:e0:29:8a:c2:15:e3:b4:2b:2e:bd:95:80: 9a:84:ec:e7:3d:63:33:92:b4:95:98:69:c8:f9:18: 2f:d7:52:e9:d0:46:9d:0d:fc:66:19:67:41:ca:c8: 2b:41:03:0e:95:8e:69:fa:4c:7d:6b:44:4c:a7:ba: 4e:2b:e3:fb:84:55:a2:4d:98:35:a9:d7:40:61:2f: 06:c4:82:ce:07:41:0b:3c:60:e2:6d:e6:c2:a2:aa: b8:ad:f8:04:6a:cd:a7:ee:30:e3:09:19:eb:f8:14: d3:ed:1b:64:cc:f5:cd:79:59:f8:8d:d6:08:9b:14: 37:48:c3:15:a3:71:e4:ff:48:03:85:b8:b9:3f:5a: a0:69:ad:ec:03:31:88:14:15:cb:29:b3:53:4c:59: 82:8f:bc:8f:d5:31:da:55:a9:f5:df:ab:61:8d:6c: c5:82:aa:cf:7d:bb:aa:6d:88:52:42:5d:e6:52:ca: 21:95:a7:94:19:0e:4b:18:f1:0c:84:7a:65:08:f6: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E5:55:26:96:32:F3:5C:D8:93:79:B6:4A:AB:51:27:2C:CC:22:43 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VOVVJpYy81zYk3m2SqtRJyzMIkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.142.0/24 89.213.229.0/24 217.145.71.0/24 Signature Algorithm: sha256WithRSAEncryption 04:e5:8b:eb:50:3e:9a:a6:c8:33:37:d6:28:1b:d1:28:35:d2: a7:05:1d:a1:f7:75:c5:9a:16:ba:1b:8c:37:ba:b8:8d:62:69: 7e:75:39:64:a6:5f:2c:62:b9:be:e6:4f:1b:c4:37:df:7f:3a: a7:2f:dc:5e:c6:5c:81:84:55:9c:40:92:ac:fa:e7:4a:97:5c: 57:01:01:9f:0e:38:75:21:cf:f8:89:a9:9e:f2:44:03:aa:2b: 71:5a:59:c7:e6:92:6b:cd:fb:e6:f6:39:18:46:4d:12:ca:2e: 7b:c9:1c:04:96:74:0c:0e:5d:49:1d:e5:fb:04:7d:eb:0e:9a: ba:b4:e9:bd:fe:92:91:03:52:ad:38:5a:46:17:ca:7d:3b:77: b8:a3:68:32:eb:05:d2:70:1f:95:83:99:65:fa:88:c6:84:60: de:07:5e:d8:35:d0:69:9c:bc:b9:d9:cc:0c:40:00:18:86:fb: 12:fb:83:27:30:b9:58:60:1c:29:82:b4:04:64:65:ea:99:54: 4f:ec:d0:e5:46:32:b6:57:7d:f2:be:bf:e0:54:ed:e1:69:0c: 77:df:71:80:4c:99:8d:be:0c:ca:9f:25:b4:64:07:a0:4a:2d: 57:35:8d:9e:47:1b:42:3c:b5:fd:a7:bc:33:78:de:f9:bf:1d: f3:3b:c5:09 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZshYgahaAl2CqE/Hxte+ToYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjE1MDk0MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGU1NTUyNjk2MzJmMzVjZDg5Mzc5YjY0YWFiNTEyNzJjY2MyMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPz8e/fKam0EJAu+PyPsunWlKeFI iLi5EqY9Y5vXtKqJ5TZRikonw4SP8HefZwBO5d+2q8hlKlShcvg8XhrgKYrCFeO0 Ky69lYCahOznPWMzkrSVmGnI+Rgv11Lp0EadDfxmGWdBysgrQQMOlY5p+kx9a0RM p7pOK+P7hFWiTZg1qddAYS8GxILOB0ELPGDibebCoqq4rfgEas2n7jDjCRnr+BTT 7RtkzPXNeVn4jdYImxQ3SMMVo3Hk/0gDhbi5P1qgaa3sAzGIFBXLKbNTTFmCj7yP 1THaVan136thjWzFgqrPfbuqbYhSQl3mUsohlaeUGQ5LGPEMhHplCPY8MQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFTlVSaWMvNc2JN5tkqrUScszCJDMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvVk9WVkpwWXk4MXpZazNtMlNxdFJKeXpNSWtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATV2OAwQA WdXlAwQA2ZFHMA0GCSqGSIb3DQEBCwUAA4IBAQAE5YvrUD6apsgzN9YoG9EoNdKn BR2h93XFmha6G4w3uriNYml+dTlkpl8sYrm+5k8bxDfffzqnL9xexlyBhFWcQJKs +udKl1xXAQGfDjh1Ic/4iame8kQDqitxWlnH5pJrzfvm9jkYRk0Syi57yRwElnQM Dl1JHeX7BH3rDpq6tOm9/pKRA1KtOFpGF8p9O3e4o2gy6wXScB+Vg5ll+ojGhGDe B17YNdBpnLy52cwMQAAYhvsS+4MnMLlYYBwpgrQEZGXqmVRP7NDlRjK2V33yvr/g VO3haQx333GATJmNvgzKnyW0ZAegSi1XNY2eRxtCPLX9p7wzeN75vx3zO8UJ -----END CERTIFICATE-----Generated at Wed Dec 17 18:06:54 2025 by rpki-client