This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/VniS5GV6pMehwAD691_j3TcBoAA.roa File: VniS5GV6pMehwAD691_j3TcBoAA.roa (raw, json) Hash identifier: +vOLB8fvZmysfQ2OW1z955SFLMU+xQAMgao9QD3s580= Subject key identifier: 56:78:92:E4:65:7A:A4:C7:A1:C0:00:FA:F7:5F:E3:DD:37:01:A0:00 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019ABFD06133BE821436E76081691E5F89CB Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/VniS5GV6pMehwAD691_j3TcBoAA.roa Signing time: Wed 26 Nov 2025 10:58:15 +0000 ROA not before: Wed 26 Nov 2025 10:58:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3255 IP address blocks: 45.158.244.0/24 maxlen: 24 45.158.245.0/24 maxlen: 24 45.158.246.0/24 maxlen: 24 46.174.122.0/24 maxlen: 24 91.214.208.0/24 maxlen: 24 91.214.209.0/24 maxlen: 24 176.120.97.0/24 maxlen: 24 176.120.100.0/24 maxlen: 24 176.120.101.0/24 maxlen: 24 176.120.105.0/24 maxlen: 24 176.120.106.0/24 maxlen: 24 176.120.108.0/24 maxlen: 24 176.120.109.0/24 maxlen: 24 176.120.110.0/24 maxlen: 24 176.120.111.0/24 maxlen: 24 185.96.190.0/24 maxlen: 24 185.200.113.0/24 maxlen: 24 185.200.114.0/24 maxlen: 24 185.200.115.0/24 maxlen: 24 185.228.76.0/22 maxlen: 22 188.191.32.0/20 maxlen: 20 193.41.184.0/22 maxlen: 22 195.69.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:d0:61:33:be:82:14:36:e7:60:81:69:1e:5f:89:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Nov 26 10:58:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=567892e4657aa4c7a1c000faf75fe3dd3701a000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:79:1a:3d:29:ac:d8:8b:ac:4b:2d:ed:95: 4d:db:f5:c7:fb:28:28:4e:fc:c6:c7:c9:a1:bf:20: dd:25:dd:38:5c:4c:42:54:22:a0:da:1b:71:d6:a2: d2:18:7c:8c:e9:47:46:22:ba:7b:34:69:fd:72:97: cc:2c:5e:d0:2a:8e:2a:34:e1:57:8d:68:ba:71:86: 1e:31:61:fe:d8:62:7b:12:41:40:44:fc:fe:5c:de: 83:de:d5:5a:5c:9a:71:aa:2c:1a:5c:1d:22:de:d6: 54:0b:ea:12:77:a0:2b:a7:64:70:af:f9:97:4f:09: 42:81:91:45:64:24:16:9c:82:9d:20:37:4c:5c:34: 5f:08:31:6b:51:cb:e9:dd:42:34:4a:a0:0f:9d:34: a3:81:d5:38:d8:af:3d:47:dd:f7:3e:4d:cf:eb:d7: e3:4c:77:c6:0a:28:6c:80:65:85:06:2d:77:83:c5: 38:a5:48:ee:24:b5:52:1b:de:55:e6:7e:94:72:3e: 6b:e8:ce:89:36:88:f3:33:88:b0:b8:56:25:f4:77: 4e:3e:ed:04:ec:ed:7e:ad:fb:92:8e:52:74:98:e0: 29:da:a1:a3:15:ca:6b:ba:af:de:0a:75:42:11:51: 4f:43:16:fc:1e:1a:8f:f7:95:66:5e:29:36:9b:d5: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:78:92:E4:65:7A:A4:C7:A1:C0:00:FA:F7:5F:E3:DD:37:01:A0:00 X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/VniS5GV6pMehwAD691_j3TcBoAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.244.0-45.158.246.255 46.174.122.0/24 91.214.208.0/23 176.120.97.0/24 176.120.100.0/23 176.120.105.0-176.120.106.255 176.120.108.0/22 185.96.190.0/24 185.200.113.0-185.200.115.255 185.228.76.0/22 188.191.32.0/20 193.41.184.0/22 195.69.246.0/24 Signature Algorithm: sha256WithRSAEncryption 38:3c:2f:01:d0:f0:d4:7d:6f:26:12:02:a1:f2:e4:e1:b2:67: ec:0b:a2:5a:ae:03:fd:80:d9:71:ad:13:a3:66:4f:14:b4:ba: 7b:87:c3:b4:8f:18:9f:87:88:85:84:c6:af:9f:4b:5d:50:08: 13:eb:06:37:c8:09:47:df:dc:55:82:a0:03:b2:96:bd:d6:51: a4:e9:cc:6c:1f:f3:ff:27:c4:d0:57:33:2c:31:fd:9d:a2:45: 78:b6:f4:ce:7f:65:d9:32:79:e4:a8:6a:fb:53:a0:54:cd:9e: 01:17:b2:70:46:68:a4:13:c0:37:63:02:c1:08:28:99:fe:d6: 11:6a:90:8a:f7:ed:13:db:36:94:b0:fe:8b:e7:2a:94:dd:41: bf:a7:0c:97:a8:d6:3e:56:8c:c6:c3:54:d5:b6:0a:c0:b1:07: 50:ed:97:90:08:47:28:f2:2d:de:a1:ce:66:3d:0f:8a:2a:f9: 33:7c:1d:2f:3c:74:af:e9:21:07:89:70:4c:52:85:40:5b:ed: 42:2d:9d:73:da:bd:37:4a:32:ad:60:32:3d:78:fd:b1:a2:86: 6f:8c:6b:85:15:53:4c:80:80:8a:f6:92:fa:03:cc:5a:56:b6: 68:7d:70:00:86:27:f1:9a:b0:76:bb:bb:c9:8b:ff:b3:0a:b1: 30:cb:63:8e -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZq/0GEzvoIUNudggWkeX4nLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjUxMTI2MTA1ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Njc4OTJlNDY1N2FhNGM3YTFjMDAwZmFmNzVmZTNkZDM3MDFhMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nx5Gj0prNiLrEst7ZVN2/XH+ygo TvzGx8mhvyDdJd04XExCVCKg2htx1qLSGHyM6UdGIrp7NGn9cpfMLF7QKo4qNOFX jWi6cYYeMWH+2GJ7EkFARPz+XN6D3tVaXJpxqiwaXB0i3tZUC+oSd6Arp2Rwr/mX TwlCgZFFZCQWnIKdIDdMXDRfCDFrUcvp3UI0SqAPnTSjgdU42K89R933Pk3P69fj THfGCihsgGWFBi13g8U4pUjuJLVSG95V5n6Ucj5r6M6JNojzM4iwuFYl9HdOPu0E 7O1+rfuSjlJ0mOAp2qGjFcpruq/eCnVCEVFPQxb8HhqP95VmXik2m9UulwIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFFZ4kuRleqTHocAA+vdf4903AaAAMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvVm5pUzVHVjZwTWVod0FENjkxX2ozVGNCb0FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmMAwDBAItnvQD BAAtnvYDBAAurnoDBAFb1tADBACweGEDBAGweGQwDAMEALB4aQMEALB4agMEArB4 bAMEALlgvjAMAwQAuchxAwQCuchwAwQCueRMAwQEvL8gAwQCwSm4AwQAw0X2MA0G CSqGSIb3DQEBCwUAA4IBAQA4PC8B0PDUfW8mEgKh8uThsmfsC6JargP9gNlxrROj Zk8UtLp7h8O0jxifh4iFhMavn0tdUAgT6wY3yAlH39xVgqADspa91lGk6cxsH/P/ J8TQVzMsMf2dokV4tvTOf2XZMnnkqGr7U6BUzZ4BF7JwRmikE8A3YwLBCCiZ/tYR apCK9+0T2zaUsP6L5yqU3UG/pwyXqNY+VozGw1TVtgrAsQdQ7ZeQCEco8i3eoc5m PQ+KKvkzfB0vPHSv6SEHiXBMUoVAW+1CLZ1z2r03SjKtYDI9eP2xooZvjGuFFVNM gICK9pL6A8xaVrZofXAAhifxmrB2u7vJi/+zCrEwy2OO -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:57 2025 by rpki-client