This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/vKn82l16VjLcws3vWmstSLyeRWc.roa File: vKn82l16VjLcws3vWmstSLyeRWc.roa (raw, json) Hash identifier: 69t8lHqeYhq+/2Zvm3uALN86FxM4aXQbhwTdxmIef8M= Subject key identifier: BC:A9:FC:DA:5D:7A:56:32:DC:C2:CD:EF:5A:6B:2D:48:BC:9E:45:67 Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df Certificate serial: 019A97A003CFC19310B2A3E2642863B7C9C0 Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/vKn82l16VjLcws3vWmstSLyeRWc.roa Signing time: Tue 18 Nov 2025 15:40:37 +0000 ROA not before: Tue 18 Nov 2025 15:40:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35319 IP address blocks: 91.222.36.0/22 maxlen: 22 91.226.44.0/23 maxlen: 23 185.137.216.0/23 maxlen: 23 185.137.218.0/23 maxlen: 23 185.181.16.0/22 maxlen: 22 185.252.92.0/22 maxlen: 22 195.140.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:a0:03:cf:c1:93:10:b2:a3:e2:64:28:63:b7:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df Validity Not Before: Nov 18 15:40:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bca9fcda5d7a5632dcc2cdef5a6b2d48bc9e4567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:e9:d4:ac:1d:29:bf:cb:ec:6c:d2:07:7b: e6:a7:92:b2:60:15:04:9f:4a:27:97:51:99:56:27: ae:a2:de:b8:e2:c4:f0:e1:ee:f0:62:10:c0:3d:a8: dd:65:91:2f:ad:40:01:e1:f7:6b:99:14:ce:a0:4a: fd:91:f7:8c:9d:d4:c2:2f:07:6b:bc:4b:45:ca:d0: 9c:f4:18:b3:4f:9e:0b:9e:56:9b:28:8d:03:82:0e: 79:85:f5:bd:10:6d:99:ce:cd:6c:5a:1d:0b:4d:7f: 1e:41:6e:b1:73:2e:f5:51:0f:ed:35:b7:76:cf:2f: f6:30:76:83:59:ea:99:ae:89:86:28:c5:97:82:80: d6:d3:eb:ef:ad:ea:01:86:5e:9d:85:11:c1:98:2d: a6:66:53:61:b0:2a:ab:9e:f7:40:98:be:11:ad:7d: 08:ad:9f:44:b0:b0:28:c1:b6:1b:d5:fc:a3:ca:43: 7b:21:ac:86:9c:1c:5b:1f:87:bf:3f:cd:d1:23:52: c9:e8:fa:60:42:5f:2a:1c:10:89:37:5e:88:0a:d3: 97:fe:61:3c:4f:30:c0:61:eb:aa:37:51:88:e7:78: f8:f9:c8:ab:b2:80:41:3f:6e:f9:65:18:02:0c:4a: d3:ea:b9:c9:7b:fe:78:f3:b2:fc:7e:2f:ba:0c:d7: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A9:FC:DA:5D:7A:56:32:DC:C2:CD:EF:5A:6B:2D:48:BC:9E:45:67 X509v3 Authority Key Identifier: keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/vKn82l16VjLcws3vWmstSLyeRWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.36.0/22 91.226.44.0/23 185.137.216.0/22 185.181.16.0/22 185.252.92.0/22 195.140.160.0/22 Signature Algorithm: sha256WithRSAEncryption 88:ff:84:15:41:ba:35:03:e8:7f:89:f6:60:42:ea:d0:2a:5e: fa:a5:4d:a6:b0:e8:8a:43:bd:9f:f8:6a:66:f3:29:b8:d2:95: cb:40:8f:05:61:00:7b:19:bf:01:05:c1:1a:cc:1c:9e:3a:89: 7a:c8:25:69:47:fe:eb:08:81:6a:0d:20:81:68:ce:1e:79:ca: c4:cc:e5:9c:99:c7:10:bb:ac:43:e6:d3:3a:8d:44:6a:48:88: d6:6f:3e:1e:42:71:23:3d:87:c5:16:f4:b6:c3:a0:f0:0e:52: c8:bf:b3:9e:ce:e2:0c:24:b7:1d:a5:bd:ea:0e:bc:7a:bd:ff: 2b:6f:84:46:9d:9b:ed:a9:8f:e5:5a:40:29:4e:97:c5:21:cc: c3:9d:2c:45:86:1c:9a:d7:c5:e9:2d:b3:28:36:4d:b9:80:a4: d2:0f:ca:87:61:18:c6:4a:ba:b5:af:07:d1:22:1c:c5:25:fc: d4:91:18:b3:31:03:c0:0d:09:7a:58:4d:7d:e2:e6:e8:55:ee: ad:57:a0:32:14:fa:fa:ac:36:d9:ea:12:f0:e0:78:b8:73:a4: 52:b3:ad:6c:98:b9:d4:7a:dc:6e:12:20:6e:f9:8b:52:08:fc: b0:ab:9f:19:1e:14:32:bd:4b:46:33:11:74:f0:93:51:7c:db: c9:b3:7c:dd -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZqXoAPPwZMQsqPiZChjt8nAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MGQ4YWI2YWEyYzcyZjA3OTc1NWY3NmNmMDEyMGFhNWRk ZGM3ZGYwHhcNMjUxMTE4MTU0MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2E5ZmNkYTVkN2E1NjMyZGNjMmNkZWY1YTZiMmQ0OGJjOWU0NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFrp1KwdKb/L7GzSB3vmp5KyYBUE n0onl1GZVieuot644sTw4e7wYhDAPajdZZEvrUAB4fdrmRTOoEr9kfeMndTCLwdr vEtFytCc9BizT54LnlabKI0Dgg55hfW9EG2Zzs1sWh0LTX8eQW6xcy71UQ/tNbd2 zy/2MHaDWeqZromGKMWXgoDW0+vvreoBhl6dhRHBmC2mZlNhsCqrnvdAmL4RrX0I rZ9EsLAowbYb1fyjykN7IayGnBxbH4e/P83RI1LJ6PpgQl8qHBCJN16ICtOX/mE8 TzDAYeuqN1GI53j4+cirsoBBP275ZRgCDErT6rnJe/5487L8fi+6DNc4bwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLyp/NpdelYy3MLN71prLUi8nkVnMB8GA1UdIwQY MBaAFIgNiraqLHLweXVfds8BIKpd3cffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUEyS3Rxb3NjdkI1ZFY5Mnp3RWdxbDNkeDk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jODRjZDMtNjcyYi00NGIyLThjZTAt NDAyODk0NzlhYzA1LzEvdktuODJsMTZWakxjd3Mzdldtc3RTTHllUldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9jODRjZDMtNjcyYi00NGIyLThjZTAtNDAyODk0NzlhYzA1 LzEvaUEyS3Rxb3NjdkI1ZFY5Mnp3RWdxbDNkeDk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCW94kAwQB W+IsAwQCuYnYAwQCubUQAwQCufxcAwQCw4ygMA0GCSqGSIb3DQEBCwUAA4IBAQCI /4QVQbo1A+h/ifZgQurQKl76pU2msOiKQ72f+Gpm8ym40pXLQI8FYQB7Gb8BBcEa zByeOol6yCVpR/7rCIFqDSCBaM4eecrEzOWcmccQu6xD5tM6jURqSIjWbz4eQnEj PYfFFvS2w6DwDlLIv7OezuIMJLcdpb3qDrx6vf8rb4RGnZvtqY/lWkApTpfFIczD nSxFhhya18XpLbMoNk25gKTSD8qHYRjGSrq1rwfRIhzFJfzUkRizMQPADQl6WE19 4uboVe6tV6AyFPr6rDbZ6hLw4Hi4c6RSs61smLnUetxuEiBu+YtSCPywq58ZHhQy vUtGMxF08JNRfNvJs3zd -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:15 2025 by rpki-client