This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/vkLy7286dxrhKN8_vNXJRiO43tI.roa File: vkLy7286dxrhKN8_vNXJRiO43tI.roa (raw, json) Hash identifier: zEYD3rV5MA0KRfFUZNuyB8fBP2X5IdnwsvbIbCutsO4= Subject key identifier: BE:42:F2:EF:6F:3A:77:1A:E1:28:DF:3F:BC:D5:C9:46:23:B8:DE:D2 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB58A9814717503334C71016C72D5A Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/vkLy7286dxrhKN8_vNXJRiO43tI.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212036 IP address blocks: 2.187.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:58:a9:81:47:17:50:33:34:c7:10:16:c7:2d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be42f2ef6f3a771ae128df3fbcd5c94623b8ded2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:60:f2:91:89:0c:42:da:df:36:aa:b0:05: b5:ab:9e:4e:f3:f4:ba:8e:72:39:55:c3:76:9f:f4: 9a:64:19:1c:5f:50:5a:08:18:9f:3d:63:fb:50:36: 39:f7:2f:83:96:a0:e3:25:8c:b0:94:31:61:5c:72: cb:14:61:c5:24:a1:23:ea:8c:87:19:83:eb:b2:a7: 7a:d9:6f:0d:ac:ed:8a:8d:a0:e9:e9:24:bb:e1:99: df:cd:7c:18:b9:7f:99:1d:96:75:f1:22:0c:85:aa: d7:69:e9:e2:0d:1d:a5:6c:78:c5:9d:4b:9e:8b:aa: 5c:1a:ea:c3:99:13:c2:37:c9:aa:9a:e2:6e:6e:2e: 5d:f0:2d:ee:90:21:84:1b:99:92:71:13:58:64:7c: 05:0c:ec:7d:81:9b:ef:59:56:a7:c7:c6:24:34:41: 04:3e:5f:97:09:d9:4f:ab:15:bb:d6:ce:47:f5:ab: 6b:b8:5b:c1:30:d1:ab:a9:22:0f:02:f6:a3:4c:6e: 12:24:e0:5e:42:8d:ab:19:1a:7b:b6:d6:ee:cb:ed: 6e:f0:06:fb:4e:b0:fa:80:ed:74:69:bb:d1:09:c0: 31:fe:00:ef:5c:d6:1c:da:57:3d:fa:ce:d7:bb:ec: 1e:37:8b:6d:f1:b1:d5:cc:c8:9c:aa:bc:83:14:92: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:42:F2:EF:6F:3A:77:1A:E1:28:DF:3F:BC:D5:C9:46:23:B8:DE:D2 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/vkLy7286dxrhKN8_vNXJRiO43tI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.187.14.0/24 Signature Algorithm: sha256WithRSAEncryption 44:89:f0:45:a6:a2:64:2c:13:26:fb:23:e0:07:31:8f:5b:cb: 41:69:57:4f:d0:56:88:2b:91:1a:89:1a:59:c0:aa:91:39:2d: 7e:f9:e9:f0:92:af:0b:4b:ec:a9:30:20:e4:4e:a6:a6:6f:3b: d7:f7:72:c6:3c:05:f7:a5:1f:f8:e8:aa:97:15:36:08:73:9b: 98:1f:b1:42:bd:c1:27:6b:6a:59:10:bb:26:6f:ff:9b:0f:2f: 95:b9:45:4d:e2:4c:a7:c5:5e:ec:8d:03:80:2e:72:ea:21:59: df:fe:e7:95:15:b6:57:83:ca:cd:c3:f2:02:0d:45:43:58:7c: f6:9e:04:6e:b0:c5:fa:3f:41:a1:f4:8c:2d:ec:75:36:92:e7: bf:82:3b:28:1c:ff:0d:c0:01:8f:36:9d:a7:d4:4f:72:a3:ab: da:fe:a9:ab:11:3b:f1:9f:82:7f:de:b1:02:a8:e3:c2:64:f8: 1f:98:72:b4:cc:e0:f5:c3:66:8d:90:0b:05:ba:5d:18:fd:57: fd:e9:c8:bc:55:b7:82:2c:45:fc:c3:8c:c8:db:64:0d:98:4d: 83:60:f3:c3:f5:b3:21:33:bc:c6:99:0e:1b:21:a8:8a:6a:a2: fc:63:c6:11:bf:90:dc:b4:16:23:26:a1:4d:30:6d:96:95:a1: 72:f5:3a:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261ipgUcXUDM0xxAWxy1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQyZjJlZjZmM2E3NzFhZTEyOGRmM2ZiY2Q1Yzk0NjIzYjhkZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx1g8pGJDELa3zaqsAW1q55O8/S6 jnI5VcN2n/SaZBkcX1BaCBifPWP7UDY59y+DlqDjJYywlDFhXHLLFGHFJKEj6oyH GYPrsqd62W8NrO2KjaDp6SS74ZnfzXwYuX+ZHZZ18SIMharXaeniDR2lbHjFnUue i6pcGurDmRPCN8mqmuJubi5d8C3ukCGEG5mScRNYZHwFDOx9gZvvWVanx8YkNEEE Pl+XCdlPqxW71s5H9atruFvBMNGrqSIPAvajTG4SJOBeQo2rGRp7ttbuy+1u8Ab7 TrD6gO10abvRCcAx/gDvXNYc2lc9+s7Xu+weN4tt8bHVzMicqryDFJLjNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5C8u9vOnca4SjfP7zVyUYjuN7SMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvdmtMeTcyODZkeHJoS044X3ZOWEpSaU80M3RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAArsOMA0G CSqGSIb3DQEBCwUAA4IBAQBEifBFpqJkLBMm+yPgBzGPW8tBaVdP0FaIK5EaiRpZ wKqROS1++enwkq8LS+ypMCDkTqambzvX93LGPAX3pR/46KqXFTYIc5uYH7FCvcEn a2pZELsmb/+bDy+VuUVN4kynxV7sjQOALnLqIVnf/ueVFbZXg8rNw/ICDUVDWHz2 ngRusMX6P0Gh9Iwt7HU2kue/gjsoHP8NwAGPNp2n1E9yo6va/qmrETvxn4J/3rEC qOPCZPgfmHK0zOD1w2aNkAsFul0Y/Vf96ci8VbeCLEX8w4zI22QNmE2DYPPD9bMh M7zGmQ4bIaiKaqL8Y8YRv5DctBYjJqFNMG2WlaFy9Tox -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:38 2026 by rpki-client