This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/nMkEmJ51wxGZCh8yEkXwS1N3iAs.roa File: nMkEmJ51wxGZCh8yEkXwS1N3iAs.roa (raw, json) Hash identifier: 28RMWY33rrxPKF667SNzPxBMXl2tl3acI2LPVuAYmGg= Subject key identifier: 9C:C9:04:98:9E:75:C3:11:99:0A:1F:32:12:45:F0:4B:53:77:88:0B Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Certificate serial: 019ACAB93A8D125B4D5AA1F08A1AF08F2CF6 Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/nMkEmJ51wxGZCh8yEkXwS1N3iAs.roa Signing time: Fri 28 Nov 2025 13:48:48 +0000 ROA not before: Fri 28 Nov 2025 13:48:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51333 IP address blocks: 185.58.4.0/22 maxlen: 24 188.65.80.0/21 maxlen: 24 188.65.80.0/24 maxlen: 24 188.65.81.0/24 maxlen: 24 188.65.83.0/24 maxlen: 24 188.65.84.0/24 maxlen: 24 188.65.85.0/24 maxlen: 24 188.65.86.0/24 maxlen: 24 188.65.87.0/24 maxlen: 24 194.36.72.0/22 maxlen: 24 2a02:6120::/29 maxlen: 29 2a0c:bdc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:b9:3a:8d:12:5b:4d:5a:a1:f0:8a:1a:f0:8f:2c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79 Validity Not Before: Nov 28 13:48:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9cc904989e75c311990a1f321245f04b5377880b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:7a:12:a1:66:25:5a:f1:6f:fd:01:9d:80: 66:b0:fa:cd:d1:af:8b:25:e4:d1:c3:aa:99:20:9d: b5:99:81:b2:ec:69:6c:07:22:9a:1d:2d:ff:c2:65: d1:c1:26:ef:b1:d7:27:93:57:8b:2a:ad:8c:2a:e9: 73:cd:3d:cb:bf:55:9f:10:b1:b8:ce:c2:dc:59:c2: 8e:c6:2a:e1:23:7b:35:52:ab:fe:8b:d8:88:31:8e: 1d:7f:5b:03:d4:c8:7e:2d:76:96:4b:a8:68:76:58: 14:ab:9e:dc:88:93:69:d7:bb:8f:3d:18:14:42:3a: 7c:2f:4d:9b:41:df:50:9a:82:ed:42:e7:9e:12:c7: 6a:d7:71:7c:1e:12:8b:30:a3:0d:c1:a2:09:d2:04: c6:58:ec:d8:0d:07:ac:dd:6a:b1:45:55:cd:43:97: 72:df:53:0c:9a:b7:c1:55:1e:2d:5e:5f:bb:b8:71: c9:2b:1f:fb:7f:f0:db:b7:c3:33:c7:7f:78:c2:b7: 51:2d:b2:26:a5:8a:9f:32:01:62:2f:bb:b8:58:ac: a1:ca:8e:aa:e7:ed:1f:b8:df:de:32:96:7c:69:0f: aa:a5:ab:2e:c2:fe:8b:52:75:ea:d9:3f:fc:4b:32: 74:09:9e:4b:87:97:8b:b7:b3:3e:9f:09:86:9a:e6: 86:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C9:04:98:9E:75:C3:11:99:0A:1F:32:12:45:F0:4B:53:77:88:0B X509v3 Authority Key Identifier: keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/nMkEmJ51wxGZCh8yEkXwS1N3iAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.58.4.0/22 188.65.80.0/21 194.36.72.0/22 IPv6: 2a02:6120::/29 2a0c:bdc0::/29 Signature Algorithm: sha256WithRSAEncryption 92:c9:f8:a9:0e:33:93:7b:87:c6:05:b4:5e:aa:29:b1:3b:b3: 78:78:0b:7f:21:63:b4:93:92:4f:07:19:60:82:88:13:dd:eb: 75:3b:3f:24:67:d9:b3:13:27:55:5d:82:90:ed:1a:de:b0:17: 01:24:fd:56:36:27:df:53:98:3e:7e:cc:69:21:cf:51:4d:85: b1:0e:c1:e9:74:88:08:37:aa:e0:c9:c0:d5:9e:17:95:89:cc: 19:1c:7d:24:50:c1:b9:fc:11:e8:2f:ce:ce:ae:04:b2:33:51: 9b:72:11:8d:c3:31:46:fd:05:c3:47:77:82:41:5c:f2:34:3c: 71:52:04:94:00:e0:42:5e:6f:84:38:cf:28:0a:80:26:dc:ba: c7:2f:ed:21:d2:e7:fd:97:e7:f3:01:76:2f:20:70:c8:19:b3: d2:58:33:a0:b7:a5:72:8d:29:d2:d7:9e:ee:6f:c8:1c:51:2b: 21:60:b7:d3:47:25:f7:29:69:86:be:7c:e6:85:c8:04:cd:0e: f9:9d:07:94:73:27:3e:0c:40:05:51:7f:4e:e8:0c:d8:2a:87: e7:d8:3a:db:b4:2d:0a:2d:fe:6b:cf:f8:26:be:f9:96:ed:1f: bb:1a:87:c1:66:f8:02:7b:2c:d0:ca:3e:b2:09:03:3a:c6:d2: a9:ef:20:b8 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZrKuTqNEltNWqHwihrwjyz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj ZTBhNzkwHhcNMjUxMTI4MTM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2M5MDQ5ODllNzVjMzExOTkwYTFmMzIxMjQ1ZjA0YjUzNzc4ODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq96EqFmJVrxb/0BnYBmsPrN0a+L JeTRw6qZIJ21mYGy7GlsByKaHS3/wmXRwSbvsdcnk1eLKq2MKulzzT3Lv1WfELG4 zsLcWcKOxirhI3s1Uqv+i9iIMY4df1sD1Mh+LXaWS6hodlgUq57ciJNp17uPPRgU Qjp8L02bQd9QmoLtQueeEsdq13F8HhKLMKMNwaIJ0gTGWOzYDQes3WqxRVXNQ5dy 31MMmrfBVR4tXl+7uHHJKx/7f/Dbt8Mzx394wrdRLbImpYqfMgFiL7u4WKyhyo6q 5+0fuN/eMpZ8aQ+qpasuwv6LUnXq2T/8SzJ0CZ5Lh5eLt7M+nwmGmuaGKwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFJzJBJiedcMRmQofMhJF8EtTd4gLMB8GA1UdIwQY MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt NmYxZmVjZTg3Yzg5LzEvbk1rRW1KNTF3eEdaQ2g4eUVrWHdTMU4zaUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5 LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCuToEAwQD vEFQAwQCwiRIMBQEAgACMA4DBQMqAmEgAwUDKgy9wDANBgkqhkiG9w0BAQsFAAOC AQEAksn4qQ4zk3uHxgW0XqopsTuzeHgLfyFjtJOSTwcZYIKIE93rdTs/JGfZsxMn VV2CkO0a3rAXAST9VjYn31OYPn7MaSHPUU2FsQ7B6XSICDeq4MnA1Z4XlYnMGRx9 JFDBufwR6C/Ozq4EsjNRm3IRjcMxRv0Fw0d3gkFc8jQ8cVIElADgQl5vhDjPKAqA Jty6xy/tIdLn/Zfn8wF2LyBwyBmz0lgzoLelco0p0tee7m/IHFErIWC300cl9ylp hr585oXIBM0O+Z0HlHMnPgxABVF/TugM2CqH59g627QtCi3+a8/4Jr75lu0fuxqH wWb4Anss0Mo+sgkDOsbSqe8guA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:13:52 2025 by rpki-client