This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/vkmHksTk2X_wYTTmgl1Mrke_JDU.roa File: vkmHksTk2X_wYTTmgl1Mrke_JDU.roa (raw, json) Hash identifier: L3fqolgCblfEQxdP1Qw8u55OLqHgFH3b7OhIuw6QCpc= Subject key identifier: BE:49:87:92:C4:E4:D9:7F:F0:61:34:E6:82:5D:4C:AE:47:BF:24:35 Certificate issuer: /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a Certificate serial: 019B76EAC93ECCB8744B32731DD74429669F Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/vkmHksTk2X_wYTTmgl1Mrke_JDU.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197846 IP address blocks: 31.222.0.0/21 maxlen: 21 31.222.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c9:3e:cc:b8:74:4b:32:73:1d:d7:44:29:66:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be498792c4e4d97ff06134e6825d4cae47bf2435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:3c:d1:cc:70:20:e8:ee:96:05:67:dd:07: 96:db:86:66:80:a8:67:74:52:bd:c1:d3:b3:31:72: 09:97:06:00:1f:01:14:7a:7c:47:89:97:c9:e2:2c: 71:fb:c3:4a:0e:5f:54:ef:93:40:48:a8:ca:a4:d5: 81:d0:2e:d1:69:fd:ee:73:50:3c:53:57:61:06:d3: 75:55:fa:81:bb:b4:2c:a7:8f:8c:2d:68:7a:e8:22: 51:b5:8c:6b:89:81:a3:57:3c:56:e1:ab:17:f9:3e: 37:c4:88:b9:1c:7a:a3:d2:d0:c1:58:40:70:f9:59: e5:a2:48:75:b2:bc:e0:5c:05:8d:81:5e:8a:c4:a6: 51:9c:65:03:8e:f5:b5:9d:6c:33:fc:a8:6f:2c:ca: a9:02:59:bc:31:59:20:00:f1:91:45:26:1d:03:30: 80:a1:73:f8:af:c7:16:f7:4f:c2:f7:25:6a:11:28: 25:4a:64:57:7c:98:d2:0e:dc:77:5d:db:a1:27:66: 77:ce:ac:b8:65:a8:4a:6c:11:38:ba:ab:e1:91:17: 92:8b:f6:0e:0d:7c:47:04:ca:70:12:2e:06:83:35: 35:bd:65:a1:0b:54:f8:c0:f1:3e:62:ac:50:97:f3: 8a:a6:87:b5:8b:81:8d:ff:a4:ef:91:78:d0:44:87: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:87:92:C4:E4:D9:7F:F0:61:34:E6:82:5D:4C:AE:47:BF:24:35 X509v3 Authority Key Identifier: keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/vkmHksTk2X_wYTTmgl1Mrke_JDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.0.0/20 Signature Algorithm: sha256WithRSAEncryption 62:0d:8a:de:d6:10:a5:94:51:4b:d3:fb:eb:c0:4d:16:fa:53: 97:6d:e8:fb:0b:a2:c3:ec:90:a3:95:38:3f:da:4a:11:84:e1: 4a:79:03:06:a9:83:07:94:a0:bc:35:bb:e3:50:51:a7:64:5e: 2b:a3:f4:67:e0:42:04:c7:e9:03:26:21:f3:2d:46:f6:52:06: 7e:aa:7e:b8:01:1b:5a:2a:66:3e:94:81:3d:65:17:fa:e0:6a: 96:b7:26:23:9a:a2:9f:67:9b:9e:6d:dd:16:bc:df:2f:a8:02: 32:d6:17:46:27:74:bb:51:24:78:0f:1e:6f:4f:d4:85:de:f4: 21:c5:de:bd:57:43:1a:e2:f6:26:ce:2c:28:cb:4f:eb:a0:2b: c6:c0:58:b0:05:d6:8e:08:0e:27:0a:ec:eb:3d:26:8b:2e:5f: f3:2e:ee:77:a3:35:b4:78:0d:e6:2f:22:40:17:41:bf:12:af: cd:13:a3:5a:8b:1a:e3:f4:57:66:23:9b:33:da:5e:4f:e5:71: 3f:ae:95:57:71:1e:9f:aa:5d:3a:1e:b8:4e:16:af:2c:19:4b: 23:fd:12:a4:e4:08:4f:f2:38:f1:6a:20:5b:cf:3a:52:0d:f8: a6:7e:39:8e:64:2c:89:bc:85:37:25:fb:b2:c8:31:de:77:16: a2:0c:51:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26sk+zLh0SzJzHddEKWafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDBiODYxYWZiMTI1YjhiYzEzOTY5ZDBiNDk3MzRjZTg0 NGJkNmEwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQ5ODc5MmM0ZTRkOTdmZjA2MTM0ZTY4MjVkNGNhZTQ3YmYyNDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g080cxwIOjulgVn3QeW24ZmgKhn dFK9wdOzMXIJlwYAHwEUenxHiZfJ4ixx+8NKDl9U75NASKjKpNWB0C7Raf3uc1A8 U1dhBtN1VfqBu7Qsp4+MLWh66CJRtYxriYGjVzxW4asX+T43xIi5HHqj0tDBWEBw +Vnlokh1srzgXAWNgV6KxKZRnGUDjvW1nWwz/KhvLMqpAlm8MVkgAPGRRSYdAzCA oXP4r8cW90/C9yVqESglSmRXfJjSDtx3XduhJ2Z3zqy4ZahKbBE4uqvhkReSi/YO DXxHBMpwEi4GgzU1vWWhC1T4wPE+YqxQl/OKpoe1i4GN/6TvkXjQRIciTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5Jh5LE5Nl/8GE05oJdTK5HvyQ1MB8GA1UdIwQY MBaAFFfQuGGvsSW4vBOWnQtJc0zoRL1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wOWVlNjYtNjY3ZS00Y2Q0LWI0ZmEt Zjg2MmZkZmEzYjkzLzEvdmttSGtzVGsyWF93WVRUbWdsMU1ya2VfSkRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8wOWVlNjYtNjY3ZS00Y2Q0LWI0ZmEtZjg2MmZkZmEzYjkz LzEvVjlDNFlhLXhKYmk4RTVhZEMwbHpUT2hFdldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEH94AMA0G CSqGSIb3DQEBCwUAA4IBAQBiDYre1hCllFFL0/vrwE0W+lOXbej7C6LD7JCjlTg/ 2koRhOFKeQMGqYMHlKC8NbvjUFGnZF4ro/Rn4EIEx+kDJiHzLUb2UgZ+qn64ARta KmY+lIE9ZRf64GqWtyYjmqKfZ5uebd0WvN8vqAIy1hdGJ3S7USR4Dx5vT9SF3vQh xd69V0Ma4vYmziwoy0/roCvGwFiwBdaOCA4nCuzrPSaLLl/zLu53ozW0eA3mLyJA F0G/Eq/NE6Naixrj9FdmI5sz2l5P5XE/rpVXcR6fql06HrhOFq8sGUsj/RKk5AhP 8jjxaiBbzzpSDfimfjmOZCyJvIU3JfuyyDHedxaiDFGo -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:47 2026 by rpki-client