This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/daVp811knSp1vAQ4VaSwB16wNuQ.roa File: daVp811knSp1vAQ4VaSwB16wNuQ.roa (raw, json) Hash identifier: iy8xMmMHNxJK9Q7iUdfrNXSZrKuA7PPo2zxoT8FZYdE= Subject key identifier: 75:A5:69:F3:5D:64:9D:2A:75:BC:04:38:55:A4:B0:07:5E:B0:36:E4 Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Certificate serial: 019B02F6878FAC4CF3E5C207BD0302BAF280 Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/daVp811knSp1vAQ4VaSwB16wNuQ.roa Signing time: Tue 09 Dec 2025 11:54:29 +0000 ROA not before: Tue 09 Dec 2025 11:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 196969 IP address blocks: 195.54.184.0/22 maxlen: 22 195.54.184.0/23 maxlen: 23 195.54.184.0/24 maxlen: 24 195.54.185.0/24 maxlen: 24 195.54.186.0/23 maxlen: 23 195.54.186.0/24 maxlen: 24 195.54.187.0/24 maxlen: 24 195.54.188.0/23 maxlen: 23 195.54.188.0/24 maxlen: 24 195.54.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:f6:87:8f:ac:4c:f3:e5:c2:07:bd:03:02:ba:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Validity Not Before: Dec 9 11:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75a569f35d649d2a75bc043855a4b0075eb036e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:e8:93:e5:33:6d:08:13:f3:89:e2:42:d3: 55:a1:cf:67:7e:29:b3:27:b9:04:b5:fb:92:d5:a1: 86:22:d4:b0:43:f9:92:1d:20:44:95:07:d0:c8:52: e3:73:5d:ca:56:e4:85:c8:7e:2d:f4:9f:b5:69:73: b1:8e:26:e7:26:f8:ac:29:6d:a5:08:4b:10:a4:17: 3c:86:ee:9a:e3:39:ca:5a:d4:d0:d1:e1:e8:db:db: 9d:e9:28:b5:15:ac:16:58:b5:5e:03:34:50:76:39: 72:72:c2:7e:33:cd:d7:25:81:72:ad:9f:bd:b7:3b: b7:72:d3:5e:00:87:e7:07:d6:73:41:e1:1f:75:ec: fa:96:22:09:78:29:4b:c9:93:26:ca:d2:d8:cf:01: 9d:5c:fa:4e:0e:8c:f8:75:a0:40:64:c9:14:71:cd: 0d:b9:08:e7:44:a9:92:b0:44:f3:48:8c:25:0b:5f: b9:24:a5:88:8f:4d:95:28:be:14:47:e0:fd:42:10: 29:4e:6a:b5:f0:09:e8:a4:3c:f2:37:3e:99:f3:f8: 2d:51:dd:08:72:d3:10:4f:d3:5e:72:b5:d0:5e:52: ca:ed:35:55:d7:c4:f6:b6:a9:87:b7:db:23:54:f3: 8a:98:df:db:21:f5:aa:0a:82:a6:97:93:c8:d4:da: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A5:69:F3:5D:64:9D:2A:75:BC:04:38:55:A4:B0:07:5E:B0:36:E4 X509v3 Authority Key Identifier: keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/daVp811knSp1vAQ4VaSwB16wNuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.184.0-195.54.189.255 Signature Algorithm: sha256WithRSAEncryption a3:82:d5:3c:aa:e9:2b:08:75:31:f7:be:d7:c0:0d:6f:00:c8: a6:f6:99:d8:db:90:62:42:de:86:20:e2:dc:4b:5f:75:25:d9: d6:b5:9a:5e:98:60:35:25:05:62:8f:7b:75:d9:49:54:73:5c: 25:38:27:61:18:07:63:c7:c5:02:bf:4b:7d:12:60:c2:2d:5b: ed:c1:7c:48:d2:d8:9d:a1:98:e3:cd:f8:c1:72:96:f1:43:a8: 8d:a5:fd:50:4a:af:7a:c1:3e:6c:7e:6a:cb:d5:f4:32:d1:9e: 7a:9e:b1:69:68:05:e2:60:da:8d:9f:83:fb:83:a3:c4:0b:80: a3:1f:4a:c1:38:a5:26:08:1b:60:86:6e:fb:4b:a3:65:a4:81: 64:9e:94:e3:e4:0f:dc:ca:a5:af:38:4a:79:cf:5b:6b:80:86: 0b:4e:3d:9c:42:ee:43:4a:b1:09:5b:5e:1a:18:10:3d:37:7f: 8d:9e:95:2b:80:3f:44:3b:25:19:79:73:01:27:bb:c2:38:eb: 5d:71:9a:3a:7d:15:e1:24:44:58:20:62:f2:07:44:8f:a4:bd: 30:e8:fb:50:0f:de:bc:19:88:2b:6b:c0:de:30:e7:de:00:ae: 90:19:3e:01:ff:33:44:9d:71:76:c4:0d:ad:ef:5b:d3:34:8b: 01:0d:82:da -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZsC9oePrEzz5cIHvQMCuvKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGYwMDhjMWNjY2E2MmU2ZmMzNTZkNjM0MjA1NWE2Mjdk YzZjZjIwHhcNMjUxMjA5MTE1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWE1NjlmMzVkNjQ5ZDJhNzViYzA0Mzg1NWE0YjAwNzVlYjAzNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj7ok+UzbQgT84niQtNVoc9nfimz J7kEtfuS1aGGItSwQ/mSHSBElQfQyFLjc13KVuSFyH4t9J+1aXOxjibnJvisKW2l CEsQpBc8hu6a4znKWtTQ0eHo29ud6Si1FawWWLVeAzRQdjlycsJ+M83XJYFyrZ+9 tzu3ctNeAIfnB9ZzQeEfdez6liIJeClLyZMmytLYzwGdXPpODoz4daBAZMkUcc0N uQjnRKmSsETzSIwlC1+5JKWIj02VKL4UR+D9QhApTmq18AnopDzyNz6Z8/gtUd0I ctMQT9NecrXQXlLK7TVV18T2tqmHt9sjVPOKmN/bIfWqCoKml5PI1NoR6wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHWlafNdZJ0qdbwEOFWksAdesDbkMB8GA1UdIwQY MBaAFMIPAIwczKYub8NW1jQgVaYn3GzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUt N2Q3ZmNlNWRiMDVjLzEvZGFWcDgxMWtuU3AxdkFRNFZhU3dCMTZ3TnVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUtN2Q3ZmNlNWRiMDVj LzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPDNrgD BAHDNrwwDQYJKoZIhvcNAQELBQADggEBAKOC1Tyq6SsIdTH3vtfADW8AyKb2mdjb kGJC3oYg4txLX3Ul2da1ml6YYDUlBWKPe3XZSVRzXCU4J2EYB2PHxQK/S30SYMIt W+3BfEjS2J2hmOPN+MFylvFDqI2l/VBKr3rBPmx+asvV9DLRnnqesWloBeJg2o2f g/uDo8QLgKMfSsE4pSYIG2CGbvtLo2WkgWSelOPkD9zKpa84SnnPW2uAhgtOPZxC 7kNKsQlbXhoYED03f42elSuAP0Q7JRl5cwEnu8I4611xmjp9FeEkRFggYvIHRI+k vTDo+1AP3rwZiCtrwN4w594ArpAZPgH/M0SdcXbEDa3vW9M0iwENgto= -----END CERTIFICATE-----Generated at Thu Dec 18 17:55:14 2025 by rpki-client