This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/vQdExQLdiUm5HPW2ned19BID9dw.roa File: vQdExQLdiUm5HPW2ned19BID9dw.roa (raw, json) Hash identifier: 8R/4iMjA1jkjQuW17H+B8/zEgk5IKMSv1XvcdZ37ua0= Subject key identifier: BD:07:44:C5:02:DD:89:49:B9:1C:F5:B6:9D:E7:75:F4:12:03:F5:DC Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019A7390C180947DC13D361B39ACEEA8CF01 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/vQdExQLdiUm5HPW2ned19BID9dw.roa Signing time: Tue 11 Nov 2025 15:37:37 +0000 ROA not before: Tue 11 Nov 2025 15:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51713 IP address blocks: 69.72.248.0/24 maxlen: 24 77.95.113.0/24 maxlen: 24 93.113.110.0/23 maxlen: 23 93.114.86.0/23 maxlen: 23 93.114.184.0/23 maxlen: 23 93.114.234.0/23 maxlen: 23 176.56.56.0/21 maxlen: 21 185.17.180.0/22 maxlen: 22 185.65.40.0/22 maxlen: 22 185.164.196.0/22 maxlen: 22 188.212.34.0/23 maxlen: 23 192.250.224.0/24 maxlen: 24 192.250.234.0/24 maxlen: 24 192.250.239.0/24 maxlen: 24 195.250.23.0/24 maxlen: 24 198.38.80.0/24 maxlen: 24 198.38.82.0/24 maxlen: 24 198.38.92.0/24 maxlen: 24 209.42.16.0/24 maxlen: 24 209.42.17.0/24 maxlen: 24 209.42.18.0/24 maxlen: 24 209.42.19.0/24 maxlen: 24 209.42.20.0/24 maxlen: 24 209.42.21.0/24 maxlen: 24 209.42.22.0/24 maxlen: 24 209.42.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:90:c1:80:94:7d:c1:3d:36:1b:39:ac:ee:a8:cf:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Nov 11 15:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd0744c502dd8949b91cf5b69de775f41203f5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:e7:16:33:dc:7e:ff:d9:69:b2:5c:44:1a: 0b:25:ca:17:9f:b4:ed:28:82:98:48:3a:3a:35:bc: d2:fb:a1:24:38:b7:87:c4:5d:78:e3:0c:8c:dd:e5: 25:03:dc:b4:08:2f:4a:24:c7:c9:14:58:4b:78:95: 5b:4a:0b:93:07:56:96:4f:b8:9a:c6:9c:e9:bf:14: 25:09:b7:a1:54:94:07:81:06:47:2d:38:30:0e:3f: a8:d3:28:1f:16:af:32:ed:67:71:25:a6:07:b1:51: 9d:1d:fe:3f:05:bb:87:c3:e2:2c:d6:97:09:1b:43: 4b:0d:46:f4:a0:7e:4c:86:c9:17:92:2b:2d:82:a8: 9a:0c:a5:ed:a1:58:14:8f:1e:8b:8d:99:b5:fb:50: f3:cf:ae:8a:b5:6d:d9:92:45:18:c8:db:7e:f1:f8: 22:59:e1:45:ef:a1:92:fc:ed:36:d5:f5:21:d3:fb: e7:7a:bc:ce:7e:bb:20:c6:ca:32:ba:b6:48:51:1d: 03:e9:90:d6:41:d3:24:c9:2c:97:96:01:e9:cb:03: df:a9:4a:2a:92:0b:a4:6f:bc:4e:ae:11:30:28:20: eb:f5:cd:fc:10:ee:eb:fc:bc:5b:4e:04:cc:61:be: 64:3c:19:0a:5a:a9:9b:67:da:d7:0c:71:3a:e3:b3: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:44:C5:02:DD:89:49:B9:1C:F5:B6:9D:E7:75:F4:12:03:F5:DC X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/vQdExQLdiUm5HPW2ned19BID9dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.72.248.0/24 77.95.113.0/24 93.113.110.0/23 93.114.86.0/23 93.114.184.0/23 93.114.234.0/23 176.56.56.0/21 185.17.180.0/22 185.65.40.0/22 185.164.196.0/22 188.212.34.0/23 192.250.224.0/24 192.250.234.0/24 192.250.239.0/24 195.250.23.0/24 198.38.80.0/24 198.38.82.0/24 198.38.92.0/24 209.42.16.0/21 Signature Algorithm: sha256WithRSAEncryption 75:09:e7:eb:0c:9f:a0:4a:4b:56:37:14:53:8d:2d:8c:80:54: 5d:9a:ff:e7:0e:b5:57:8a:5f:bf:fb:e8:54:4f:42:24:12:c6: f1:f1:5b:51:47:11:43:93:49:6c:c9:c6:e3:54:ce:87:f0:66: 23:46:56:32:6c:c3:23:fb:bb:d6:fb:35:40:89:42:fa:0c:bc: b9:ec:bc:f2:c9:fd:a7:7f:57:8e:75:36:6f:12:39:81:f1:6b: 71:00:53:0c:3d:72:1f:d5:f4:bc:6e:bf:75:df:a0:da:99:dc: 12:ff:5e:b7:51:81:d5:f5:18:56:b6:bb:ce:5b:ed:97:7f:4a: 63:4a:6b:f5:8c:e8:b1:18:67:85:45:ad:7f:fe:d2:bb:cd:90: 4b:bc:90:a9:c3:a7:d4:da:f9:05:02:ee:1e:8c:53:54:ee:64: d0:f4:3b:f3:19:8b:9d:79:13:69:be:49:d4:9e:5a:5f:62:37: 9a:4c:9e:7d:31:b6:f1:b4:b7:b7:e4:ec:f8:a5:dd:6b:04:21: d5:8c:b8:95:39:32:f0:66:3d:ae:46:52:9d:b0:31:49:4d:f1: a6:d8:80:57:df:b7:a3:8b:94:02:65:21:96:3a:5d:61:18:aa: 97:46:cc:6c:ec:3f:a9:04:1e:10:56:3b:72:61:6f:e1:09:a8: 04:1a:0e:5a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZpzkMGAlH3BPTYbOazuqM8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjUxMTExMTUzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDA3NDRjNTAyZGQ4OTQ5YjkxY2Y1YjY5ZGU3NzVmNDEyMDNmNWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3nFjPcfv/ZabJcRBoLJcoXn7Tt KIKYSDo6NbzS+6EkOLeHxF144wyM3eUlA9y0CC9KJMfJFFhLeJVbSguTB1aWT7ia xpzpvxQlCbehVJQHgQZHLTgwDj+o0ygfFq8y7WdxJaYHsVGdHf4/BbuHw+Is1pcJ G0NLDUb0oH5MhskXkistgqiaDKXtoVgUjx6LjZm1+1Dzz66KtW3ZkkUYyNt+8fgi WeFF76GS/O021fUh0/vnerzOfrsgxsoyurZIUR0D6ZDWQdMkySyXlgHpywPfqUoq kgukb7xOrhEwKCDr9c38EO7r/LxbTgTMYb5kPBkKWqmbZ9rXDHE647NMtQIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFL0HRMUC3YlJuRz1tp3ndfQSA/XcMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvdlFkRXhRTGRpVW01SFBXMm5lZDE5QklEOWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAEVI+AME AE1fcQMEAV1xbgMEAV1yVgMEAV1yuAMEAV1y6gMEA7A4OAMEArkRtAMEArlBKAME ArmkxAMEAbzUIgMEAMD64AMEAMD66gMEAMD67wMEAMP6FwMEAMYmUAMEAMYmUgME AMYmXAMEA9EqEDANBgkqhkiG9w0BAQsFAAOCAQEAdQnn6wyfoEpLVjcUU40tjIBU XZr/5w61V4pfv/voVE9CJBLG8fFbUUcRQ5NJbMnG41TOh/BmI0ZWMmzDI/u71vs1 QIlC+gy8uey88sn9p39XjnU2bxI5gfFrcQBTDD1yH9X0vG6/dd+g2pncEv9et1GB 1fUYVra7zlvtl39KY0pr9YzosRhnhUWtf/7Su82QS7yQqcOn1Nr5BQLuHoxTVO5k 0PQ78xmLnXkTab5J1J5aX2I3mkyefTG28bS3t+Ts+KXdawQh1Yy4lTky8GY9rkZS nbAxSU3xptiAV9+3o4uUAmUhljpdYRiql0bMbOw/qQQeEFY7cmFv4QmoBBoOWg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:00:23 2025 by rpki-client