This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nvIlFul-bVeJdBIRWmWFX5m65f8.roa File: nvIlFul-bVeJdBIRWmWFX5m65f8.roa (raw, json) Hash identifier: TBm0SB13dE8e28nokLH79RnbfldjRjh+MzTJXgvJIDU= Subject key identifier: 9E:F2:25:16:E9:7E:6D:57:89:74:12:11:5A:65:85:5F:99:BA:E5:FF Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A6EB3A2D7802B4BDCF2838807A869F188 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nvIlFul-bVeJdBIRWmWFX5m65f8.roa Signing time: Mon 10 Nov 2025 16:57:37 +0000 ROA not before: Mon 10 Nov 2025 16:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205397 IP address blocks: 185.99.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:b3:a2:d7:80:2b:4b:dc:f2:83:88:07:a8:69:f1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 10 16:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ef22516e97e6d57897412115a65855f99bae5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:66:98:d5:9e:0d:e7:7f:6a:58:95:bc:ae: c1:8d:c4:39:e1:78:d2:77:89:11:0f:1d:df:0c:b7: 6a:61:bd:4e:f7:16:b5:d4:67:5a:09:06:9b:ae:02: 35:c9:01:72:23:95:eb:f9:11:cc:9f:e0:10:35:3e: a9:48:10:ec:bf:36:aa:5d:17:be:ab:7e:57:80:2a: ac:2a:db:8d:5d:d3:c0:e8:84:ec:e0:c4:de:81:b6: 70:6c:83:fe:48:e0:35:68:5e:1a:72:45:b4:16:f3: 59:db:b0:3e:33:a7:e2:ac:b3:a4:77:05:e6:ff:98: 82:73:85:d5:b1:16:e9:bf:47:1e:3f:9f:02:04:31: 44:9b:f7:97:8f:6d:bf:a8:7b:ce:c9:d0:9b:53:22: b9:63:33:36:6f:5b:4d:bb:ee:98:0b:61:cf:9b:49: 8e:98:cf:e5:e8:f5:48:6e:50:35:d1:c6:bd:7c:7d: 26:99:f4:4c:a4:93:93:78:6f:41:3e:f8:cf:ec:a8: da:39:a4:19:72:87:ea:0c:13:fa:28:2b:64:48:f8: 3f:1e:2b:07:55:22:86:13:11:da:48:3a:1b:83:63: a1:39:14:3d:84:32:63:fb:5b:2b:bd:e6:b3:98:02: 4f:c2:ed:92:5d:7a:da:9f:bf:6e:23:cd:e0:04:ab: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F2:25:16:E9:7E:6D:57:89:74:12:11:5A:65:85:5F:99:BA:E5:FF X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nvIlFul-bVeJdBIRWmWFX5m65f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.98.0/24 Signature Algorithm: sha256WithRSAEncryption 97:e0:94:65:ea:c2:8b:e6:86:db:8d:9e:60:bb:e3:34:24:79: 52:c4:1b:5a:0e:7d:20:e1:03:5d:42:f9:c1:b4:c3:49:c8:9f: 06:53:31:dd:38:eb:82:32:a4:47:90:f3:69:59:0c:a4:4a:c2: bb:5e:99:4c:1c:02:00:c7:77:b4:ec:fc:05:99:38:74:39:2b: ca:d8:ff:5b:fc:80:30:7b:2e:bd:ac:bc:4e:3e:cd:27:21:cf: af:57:e8:05:4d:49:42:9b:99:74:23:af:26:3a:ce:c5:ff:24: d3:34:0c:d5:a0:4c:88:e4:b2:15:44:38:9d:e2:19:d8:12:6a: 9d:94:22:ee:65:ba:fe:81:b3:ee:bd:57:b9:75:dd:6f:2e:06: e0:ee:4a:e3:61:43:2c:99:51:a0:4f:09:44:f5:37:35:6f:32: be:99:69:54:c6:37:96:ef:ca:23:cf:08:28:ea:f4:23:83:d7: 3a:fb:f7:28:77:84:ed:56:4f:df:77:82:bb:47:f4:9b:ec:06: 27:38:8a:e4:29:f3:d5:63:a5:b5:de:a7:be:16:4a:7d:d5:00: 0d:24:91:04:e7:65:ad:4b:e5:b2:fa:15:71:93:db:bd:08:42: fe:0f:90:8b:b6:23:16:ac:46:21:90:b5:84:2a:c6:39:5e:3b: 37:d7:74:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpus6LXgCtL3PKDiAeoafGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTEwMTY1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWYyMjUxNmU5N2U2ZDU3ODk3NDEyMTE1YTY1ODU1Zjk5YmFlNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4JmmNWeDed/aliVvK7BjcQ54XjS d4kRDx3fDLdqYb1O9xa11GdaCQabrgI1yQFyI5Xr+RHMn+AQNT6pSBDsvzaqXRe+ q35XgCqsKtuNXdPA6ITs4MTegbZwbIP+SOA1aF4ackW0FvNZ27A+M6firLOkdwXm /5iCc4XVsRbpv0ceP58CBDFEm/eXj22/qHvOydCbUyK5YzM2b1tNu+6YC2HPm0mO mM/l6PVIblA10ca9fH0mmfRMpJOTeG9BPvjP7KjaOaQZcofqDBP6KCtkSPg/HisH VSKGExHaSDobg2OhORQ9hDJj+1srveazmAJPwu2SXXran79uI83gBKswKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ7yJRbpfm1XiXQSEVplhV+ZuuX/MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvbnZJbEZ1bC1iVmVKZEJJUldtV0ZYNW02NWY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWNiMA0G CSqGSIb3DQEBCwUAA4IBAQCX4JRl6sKL5obbjZ5gu+M0JHlSxBtaDn0g4QNdQvnB tMNJyJ8GUzHdOOuCMqRHkPNpWQykSsK7XplMHAIAx3e07PwFmTh0OSvK2P9b/IAw ey69rLxOPs0nIc+vV+gFTUlCm5l0I68mOs7F/yTTNAzVoEyI5LIVRDid4hnYEmqd lCLuZbr+gbPuvVe5dd1vLgbg7krjYUMsmVGgTwlE9Tc1bzK+mWlUxjeW78ojzwgo 6vQjg9c6+/cod4TtVk/fd4K7R/Sb7AYnOIrkKfPVY6W13qe+Fkp91QANJJEE52Wt S+Wy+hVxk9u9CEL+D5CLtiMWrEYhkLWEKsY5Xjs313QT -----END CERTIFICATE-----Generated at Sat Dec 6 21:26:38 2025 by rpki-client