This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/vpuxeaHDeU0YuoI4VZ-AbH6xUG8.roa File: vpuxeaHDeU0YuoI4VZ-AbH6xUG8.roa (raw, json) Hash identifier: eIEFy1yDoK+25Rit4ml59XB1+5/uDD/+W5x8ZUibOIY= Subject key identifier: BE:9B:B1:79:A1:C3:79:4D:18:BA:82:38:55:9F:80:6C:7E:B1:50:6F Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb Certificate serial: 019AE59528EAC0883136EB8E9DD0C4B57F7C Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/vpuxeaHDeU0YuoI4VZ-AbH6xUG8.roa Signing time: Wed 03 Dec 2025 18:59:09 +0000 ROA not before: Wed 03 Dec 2025 18:59:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213398 IP address blocks: 62.164.144.0/24 maxlen: 24 89.23.124.0/24 maxlen: 24 89.40.30.0/24 maxlen: 24 91.234.235.0/24 maxlen: 24 194.164.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:95:28:ea:c0:88:31:36:eb:8e:9d:d0:c4:b5:7f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb Validity Not Before: Dec 3 18:59:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be9bb179a1c3794d18ba8238559f806c7eb1506f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:59:41:be:05:fb:6c:9c:a2:e6:28:af:9e: 9e:32:0e:0d:9a:b9:1d:91:6b:bb:4d:67:96:22:81: 2a:fc:a7:83:2b:4a:53:83:03:67:a2:b4:7b:ad:4c: ae:7d:94:d1:63:67:ba:de:cd:09:bb:f0:48:10:c5: f4:02:07:14:31:39:e7:72:b6:91:a5:aa:a8:c6:7c: 49:ff:66:0d:89:62:0c:5b:8f:c2:99:24:01:7f:f5: 12:4c:c3:1f:8c:d0:b2:2c:8d:81:18:94:5a:94:1b: df:a2:e8:4f:92:d9:b4:47:70:a6:c2:20:da:0d:30: b7:0e:b8:7d:28:9c:e4:cd:dc:65:2a:79:37:28:a2: d6:95:60:eb:01:9c:9e:f2:43:ed:b7:29:25:fc:bc: d6:92:94:f2:6c:cf:82:80:d4:0e:ef:28:8c:ea:0c: 2a:27:c1:b8:8a:3a:b7:f9:a9:49:91:6d:78:d4:0f: ac:17:d1:14:a2:5c:9e:8c:fe:9f:11:a5:96:cd:0e: c2:0e:a2:1d:39:33:f6:bb:86:e9:24:ca:1a:e4:88: 52:65:0f:c7:4d:7b:22:65:4b:7c:a6:26:33:5f:82: be:98:85:8a:9c:db:6e:3e:62:aa:5a:51:f9:7e:79: ea:8b:9a:1c:7f:77:84:96:64:ad:25:ca:68:09:f7: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9B:B1:79:A1:C3:79:4D:18:BA:82:38:55:9F:80:6C:7E:B1:50:6F X509v3 Authority Key Identifier: keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/vpuxeaHDeU0YuoI4VZ-AbH6xUG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.144.0/24 89.23.124.0/24 89.40.30.0/24 91.234.235.0/24 194.164.224.0/24 Signature Algorithm: sha256WithRSAEncryption 72:06:e0:4b:b3:a8:7c:63:24:df:d2:ef:2b:8a:6b:1a:93:9a: 11:0d:fe:ee:c8:99:aa:0e:3c:96:20:5d:4e:f7:06:87:0d:33: 23:05:66:f5:01:4c:46:8e:47:ca:b1:20:cd:3f:9b:d7:8f:75: ae:98:8c:5f:f5:ec:b2:57:9d:e4:10:c1:60:ef:06:c1:02:ed: db:0b:db:83:e7:5e:86:9e:31:eb:9e:19:36:10:4d:52:66:fa: 3d:59:78:a6:6c:9c:98:a6:8d:56:98:b5:ee:d8:7c:db:d2:cd: d5:1e:97:2c:4d:cf:a2:dd:d1:9d:5e:3a:e9:d9:df:26:be:97: 7e:cb:06:87:fb:0c:67:cc:02:c2:1c:42:df:e6:0c:64:fe:52: 73:c3:16:59:6c:21:b7:c8:26:b4:40:8b:d2:d0:2e:fc:54:3d: cd:fb:4b:b5:67:44:92:ad:8f:e2:41:35:bd:63:47:7e:89:92: 8c:57:46:e5:cd:82:5a:84:07:ec:bb:d5:ab:3a:ee:08:94:7e: eb:03:c9:db:77:ae:8d:6c:df:eb:d6:b2:d4:d8:c5:0f:43:93: b1:6a:2f:99:01:5e:fe:8b:77:8d:d4:71:ed:7e:01:37:89:ba: 91:4c:80:11:1c:76:4e:5d:67:98:69:8c:3d:49:08:41:94:55: ca:bc:2d:99 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrllSjqwIgxNuuOndDEtX98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2QyMTQ0ZGQxYjcxNGU5ZTNjYTA5MDFmZTY3NTA0YmY0 NTdlZWIwHhcNMjUxMjAzMTg1OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTliYjE3OWExYzM3OTRkMThiYTgyMzg1NTlmODA2YzdlYjE1MDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhRZQb4F+2ycouYor56eMg4Nmrkd kWu7TWeWIoEq/KeDK0pTgwNnorR7rUyufZTRY2e63s0Ju/BIEMX0AgcUMTnncraR paqoxnxJ/2YNiWIMW4/CmSQBf/USTMMfjNCyLI2BGJRalBvfouhPktm0R3CmwiDa DTC3Drh9KJzkzdxlKnk3KKLWlWDrAZye8kPttykl/LzWkpTybM+CgNQO7yiM6gwq J8G4ijq3+alJkW141A+sF9EUolyejP6fEaWWzQ7CDqIdOTP2u4bpJMoa5IhSZQ/H TXsiZUt8piYzX4K+mIWKnNtuPmKqWlH5fnnqi5ocf3eElmStJcpoCfc+iwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFL6bsXmhw3lNGLqCOFWfgGx+sVBvMB8GA1UdIwQY MBaAFFV9IUTdG3FOnjygkB/mdQS/RX7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlgwaFJOMGJjVTZlUEtDUUgtWjFCTDlGZnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xZjA4MzEtZmM2Yi00ODY1LWE4YTgt ZWRmNDJkNWM0ODFmLzEvdnB1eGVhSERlVTBZdW9JNFZaLUFiSDZ4VUc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xZjA4MzEtZmM2Yi00ODY1LWE4YTgtZWRmNDJkNWM0ODFm LzEvVlgwaFJOMGJjVTZlUEtDUUgtWjFCTDlGZnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPqSQAwQA WRd8AwQAWSgeAwQAW+rrAwQAwqTgMA0GCSqGSIb3DQEBCwUAA4IBAQByBuBLs6h8 YyTf0u8rimsak5oRDf7uyJmqDjyWIF1O9waHDTMjBWb1AUxGjkfKsSDNP5vXj3Wu mIxf9eyyV53kEMFg7wbBAu3bC9uD516GnjHrnhk2EE1SZvo9WXimbJyYpo1WmLXu 2Hzb0s3VHpcsTc+i3dGdXjrp2d8mvpd+ywaH+wxnzALCHELf5gxk/lJzwxZZbCG3 yCa0QIvS0C78VD3N+0u1Z0SSrY/iQTW9Y0d+iZKMV0blzYJahAfsu9WrOu4IlH7r A8nbd66NbN/r1rLU2MUPQ5Oxai+ZAV7+i3eN1HHtfgE3ibqRTIARHHZOXWeYaYw9 SQhBlFXKvC2Z -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:54 2025 by rpki-client