This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/VK0aXUAVFuqP7ZxYJCeKoudyERE.roa File: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (raw, json) Hash identifier: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU= Subject key identifier: 54:AD:1A:5D:40:15:16:EA:8F:ED:9C:58:24:27:8A:A2:E7:72:11:11 Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Certificate serial: 019B7DC88EC7A03F1D4013275B9C1AE421BC Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/VK0aXUAVFuqP7ZxYJCeKoudyERE.roa Signing time: Fri 02 Jan 2026 08:17:34 +0000 ROA not before: Fri 02 Jan 2026 08:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 926 IP address blocks: 37.10.116.0/24 maxlen: 24 185.184.229.0/24 maxlen: 24 2a13:9440::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:8e:c7:a0:3f:1d:40:13:27:5b:9c:1a:e4:21:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Validity Not Before: Jan 2 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54ad1a5d401516ea8fed9c5824278aa2e7721111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:43:b6:40:49:57:34:aa:27:a4:5d:f0:cc: cd:e1:d5:74:0a:63:d7:aa:54:9d:c2:67:68:a0:3a: 59:45:d1:a1:6a:9b:c2:83:dd:61:23:24:d3:ab:ef: 20:a4:54:57:07:1e:6a:0b:e3:65:25:9d:3e:97:a2: dc:de:f9:79:87:e5:d9:5f:95:cb:69:53:65:d1:2b: 3e:1c:dd:4b:0c:54:d5:ba:e7:81:5d:f9:34:ed:12: e3:b6:8e:99:f9:d6:07:e3:39:8e:96:75:47:60:fd: 00:c5:bc:91:6a:73:cb:07:a1:39:b0:2a:b3:00:1b: 85:43:08:5c:10:de:c6:fd:ae:24:e7:91:ec:76:92: a4:97:8c:7b:74:99:ea:72:c0:a4:f8:25:0e:6d:3d: 00:ee:dc:a7:38:8f:2c:65:b0:e7:1f:36:1a:23:c0: b8:95:7c:4c:bf:b9:b4:2a:f6:78:b9:42:91:16:4b: 78:53:b5:76:2a:5c:47:6e:b0:00:b6:b4:eb:06:1e: 49:43:e1:8c:69:1d:8e:2f:87:80:e2:19:45:49:44: 04:8b:48:0b:9f:c8:ac:24:f9:56:4b:9d:bd:f3:b8: d1:0f:df:e2:49:72:97:7d:61:0c:51:3c:e1:3f:79: b7:d0:89:4d:9f:f6:af:71:9d:27:d9:e1:04:d1:a5: 1c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AD:1A:5D:40:15:16:EA:8F:ED:9C:58:24:27:8A:A2:E7:72:11:11 X509v3 Authority Key Identifier: keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/VK0aXUAVFuqP7ZxYJCeKoudyERE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.10.116.0/24 185.184.229.0/24 IPv6: 2a13:9440::/29 Signature Algorithm: sha256WithRSAEncryption 50:9b:56:35:f0:79:22:65:35:a4:af:00:ff:68:1b:0a:30:45: 13:e7:5e:92:b1:10:3a:eb:38:b2:52:c2:31:f2:23:d7:5c:3e: ec:11:58:5c:59:b1:ce:ea:9e:6d:f0:4d:82:51:e1:1b:8f:fc: 1b:cd:21:b0:d2:19:3b:46:ea:f9:c2:88:c6:34:53:89:5a:25: 41:c6:4f:6c:25:ac:39:a0:89:1a:97:59:aa:e0:71:53:2e:92: 0a:18:2e:c0:71:17:09:d1:78:e6:75:90:ff:56:29:1d:29:5f: ac:a9:24:99:d7:4e:f3:7a:ef:59:6c:01:fa:79:33:38:3b:38: a8:6a:02:52:09:d3:0d:53:ca:db:7c:ab:40:98:ec:60:84:ec: 07:e9:9f:3b:d2:a9:90:ec:c8:0d:d2:0d:02:b7:ec:ee:62:13: 63:0b:5f:11:21:93:11:ef:17:b1:e8:33:9d:6d:94:14:57:53: 73:b2:c4:fb:07:f5:e3:ca:39:68:2e:95:a9:71:32:00:1c:01: 2c:61:d4:52:d0:78:c7:9a:db:40:bc:86:de:1c:a9:eb:23:5d: 39:c5:04:b0:07:f6:31:c2:33:6e:6e:49:f5:aa:0a:41:c4:c0: 59:74:76:72:55:9b:00:be:ea:c6:9e:4d:b9:2b:f4:f0:67:89: 82:b5:bf:f3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yI7HoD8dQBMnW5wa5CG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy NTQ0MjkwHhcNMjYwMTAyMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGFkMWE1ZDQwMTUxNmVhOGZlZDljNTgyNDI3OGFhMmU3NzIxMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteZDtkBJVzSqJ6Rd8MzN4dV0CmPX qlSdwmdooDpZRdGhapvCg91hIyTTq+8gpFRXBx5qC+NlJZ0+l6Lc3vl5h+XZX5XL aVNl0Ss+HN1LDFTVuueBXfk07RLjto6Z+dYH4zmOlnVHYP0AxbyRanPLB6E5sCqz ABuFQwhcEN7G/a4k55HsdpKkl4x7dJnqcsCk+CUObT0A7tynOI8sZbDnHzYaI8C4 lXxMv7m0KvZ4uUKRFkt4U7V2KlxHbrAAtrTrBh5JQ+GMaR2OL4eA4hlFSUQEi0gL n8isJPlWS52987jRD9/iSXKXfWEMUTzhP3m30IlNn/avcZ0n2eEE0aUcGwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFStGl1AFRbqj+2cWCQniqLnchERMB8GA1UdIwQY MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt NTZmYWRjOTJlNDAwLzEvVkswYVhVQVZGdXFQN1p4WUpDZUtvdWR5RVJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAJQp0AwQA ubjlMA0EAgACMAcDBQMqE5RAMA0GCSqGSIb3DQEBCwUAA4IBAQBQm1Y18HkiZTWk rwD/aBsKMEUT516SsRA66ziyUsIx8iPXXD7sEVhcWbHO6p5t8E2CUeEbj/wbzSGw 0hk7Rur5wojGNFOJWiVBxk9sJaw5oIkal1mq4HFTLpIKGC7AcRcJ0XjmdZD/Vikd KV+sqSSZ107zeu9ZbAH6eTM4OzioagJSCdMNU8rbfKtAmOxghOwH6Z870qmQ7MgN 0g0Ct+zuYhNjC18RIZMR7xex6DOdbZQUV1NzssT7B/XjyjloLpWpcTIAHAEsYdRS 0HjHmttAvIbeHKnrI105xQSwB/YxwjNubkn1qgpBxMBZdHZyVZsAvurGnk25K/Tw Z4mCtb/z -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:12 2026 by rpki-client