This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vQeju5IXNjEoWBC9ET0ksVohAAw.roa File: vQeju5IXNjEoWBC9ET0ksVohAAw.roa (raw, json) Hash identifier: vNUoX8dzp8vlCht08az7kkkn7Bm6tbtsihn+s5TebwA= Subject key identifier: BD:07:A3:BB:92:17:36:31:28:58:10:BD:11:3D:24:B1:5A:21:00:0C Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019AC918AABF9009F6312ED48C34D92D0277 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vQeju5IXNjEoWBC9ET0ksVohAAw.roa Signing time: Fri 28 Nov 2025 06:13:48 +0000 ROA not before: Fri 28 Nov 2025 06:13:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55410 IP address blocks: 31.171.156.0/24 maxlen: 24 31.171.157.0/24 maxlen: 24 31.171.158.0/24 maxlen: 24 31.171.159.0/24 maxlen: 24 65.38.101.0/24 maxlen: 24 65.38.113.0/24 maxlen: 24 65.79.182.0/24 maxlen: 24 66.179.58.0/24 maxlen: 24 66.179.85.0/24 maxlen: 24 66.179.151.0/24 maxlen: 24 67.217.229.0/24 maxlen: 24 167.160.99.0/24 maxlen: 24 167.160.100.0/24 maxlen: 24 167.160.101.0/24 maxlen: 24 167.160.102.0/24 maxlen: 24 167.160.103.0/24 maxlen: 24 167.160.104.0/24 maxlen: 24 167.160.105.0/24 maxlen: 24 167.160.106.0/24 maxlen: 24 167.160.107.0/24 maxlen: 24 167.160.108.0/24 maxlen: 24 167.160.109.0/24 maxlen: 24 167.160.110.0/24 maxlen: 24 167.160.111.0/24 maxlen: 24 167.160.112.0/24 maxlen: 24 167.160.113.0/24 maxlen: 24 167.160.114.0/24 maxlen: 24 167.160.115.0/24 maxlen: 24 167.160.116.0/24 maxlen: 24 167.160.117.0/24 maxlen: 24 216.183.116.0/24 maxlen: 24 216.183.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:18:aa:bf:90:09:f6:31:2e:d4:8c:34:d9:2d:02:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Nov 28 06:13:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd07a3bb92173631285810bd113d24b15a21000c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:04:ac:de:29:39:de:c3:5a:0c:7f:03:7a: e0:00:1d:7d:0b:40:c6:e7:1c:64:94:fa:91:8e:4c: 17:a1:97:1e:34:ff:9b:4c:f3:7f:6c:63:af:d5:05: 4f:72:c9:a3:3a:c9:c9:3c:cf:46:d7:43:ab:8c:ed: 4c:45:33:48:6c:26:7a:36:be:8b:18:df:86:0e:19: cb:aa:e2:58:0b:69:7d:4a:70:76:91:f1:0d:2a:e9: b9:89:2d:fa:76:ce:37:4c:eb:40:0a:ac:89:79:2a: 59:0e:d1:bb:af:6d:57:ae:48:18:77:e4:1e:9d:dd: e4:0d:f6:1a:a3:4f:e8:20:73:88:3f:c8:39:10:21: 1a:7b:fb:29:cc:87:c8:43:b2:8b:1d:f7:c5:7f:98: af:5b:74:f5:a2:c5:bb:df:ab:22:ff:7a:c6:04:70: 70:8c:da:ce:02:fa:9e:d4:26:70:f6:d2:87:e6:81: 9c:38:1a:8b:b6:c1:c2:73:3e:4f:8b:44:7f:7c:41: 30:68:f8:ba:43:57:be:52:64:01:f8:21:c1:68:11: 0e:54:e3:54:d8:35:32:4b:07:82:a6:a2:85:95:60: 67:f1:4e:af:8f:48:55:58:30:51:7c:5a:b2:a9:13: 92:f4:5d:1b:54:ba:21:a7:ac:a8:39:12:16:23:21: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:07:A3:BB:92:17:36:31:28:58:10:BD:11:3D:24:B1:5A:21:00:0C X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vQeju5IXNjEoWBC9ET0ksVohAAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.156.0/22 65.38.101.0/24 65.38.113.0/24 65.79.182.0/24 66.179.58.0/24 66.179.85.0/24 66.179.151.0/24 67.217.229.0/24 167.160.99.0-167.160.117.255 216.183.116.0/24 216.183.121.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:96:3e:c8:6f:32:0a:5a:ac:b4:89:46:c5:0e:35:df:80:7d: 58:43:26:e4:df:5d:04:2c:a4:51:c8:c9:d9:2b:15:bb:b4:d7: cc:26:a5:ee:17:fa:e0:45:59:29:72:74:a3:ff:3d:7d:75:50: a4:ab:47:81:04:eb:13:47:72:7d:f6:4a:4c:7e:fc:68:8b:3b: 9b:89:92:e9:58:9d:df:6f:2a:24:a9:78:ae:1c:c9:6b:3b:8e: 04:80:c0:c5:14:5b:a5:d0:e7:bf:d5:29:f2:b1:23:e3:0d:7d: c4:af:11:1d:dc:cf:65:20:f5:e5:08:a1:cf:10:fc:2f:0a:a0: bb:62:d2:af:94:21:02:cf:13:9e:49:5c:2f:b8:75:a5:02:1a: 2f:bb:1f:1f:2a:e9:31:01:74:8b:ab:d8:52:4d:23:84:37:1f: 90:d7:85:67:dc:4f:f5:6a:a2:bf:9c:0d:9d:bf:e1:b3:ae:99: e2:c3:1a:9e:20:c7:84:9e:07:30:f5:fb:a4:6a:32:f4:39:a3: 9e:08:85:14:b0:4e:46:32:54:04:61:2f:2d:06:67:e6:e4:a6: c0:45:f9:fc:76:bc:a0:20:6b:cc:22:10:c2:d1:78:bf:0d:b7: d3:f1:1e:85:1a:eb:cd:5f:20:fc:96:f5:96:20:ec:a7:17:7e: 80:5d:7c:7a -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZrJGKq/kAn2MS7UjDTZLQJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUxMTI4MDYxMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDA3YTNiYjkyMTczNjMxMjg1ODEwYmQxMTNkMjRiMTVhMjEwMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r8ErN4pOd7DWgx/A3rgAB19C0DG 5xxklPqRjkwXoZceNP+bTPN/bGOv1QVPcsmjOsnJPM9G10OrjO1MRTNIbCZ6Nr6L GN+GDhnLquJYC2l9SnB2kfENKum5iS36ds43TOtACqyJeSpZDtG7r21XrkgYd+Qe nd3kDfYao0/oIHOIP8g5ECEae/spzIfIQ7KLHffFf5ivW3T1osW736si/3rGBHBw jNrOAvqe1CZw9tKH5oGcOBqLtsHCcz5Pi0R/fEEwaPi6Q1e+UmQB+CHBaBEOVONU 2DUySweCpqKFlWBn8U6vj0hVWDBRfFqyqROS9F0bVLohp6yoORIWIyH93QIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFL0Ho7uSFzYxKFgQvRE9JLFaIQAMMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEvdlFlanU1SVhOakVvV0JDOUVUMGtzVm9oQUF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQCH6ucAwQA QSZlAwQAQSZxAwQAQU+2AwQAQrM6AwQAQrNVAwQAQrOXAwQAQ9nlMAwDBACnoGMD BAGnoHQDBADYt3QDBADYt3kwDQYJKoZIhvcNAQELBQADggEBAB6WPshvMgparLSJ RsUONd+AfVhDJuTfXQQspFHIydkrFbu018wmpe4X+uBFWSlydKP/PX11UKSrR4EE 6xNHcn32Skx+/GiLO5uJkulYnd9vKiSpeK4cyWs7jgSAwMUUW6XQ57/VKfKxI+MN fcSvER3cz2Ug9eUIoc8Q/C8KoLti0q+UIQLPE55JXC+4daUCGi+7Hx8q6TEBdIur 2FJNI4Q3H5DXhWfcT/Vqor+cDZ2/4bOumeLDGp4gx4SeBzD1+6RqMvQ5o54IhRSw TkYyVARhLy0GZ+bkpsBF+fx2vKAga8wiEMLReL8Nt9PxHoUa681fIPyW9ZYg7KcX foBdfHo= -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:17 2025 by rpki-client