This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/4_S-VpcaJ-dsPDdYImdSZM32e8U.roa File: 4_S-VpcaJ-dsPDdYImdSZM32e8U.roa (raw, json) Hash identifier: 1hjmdXa5Q0sUuajrWvcZ3QxX+b+38dKLCgIK//YJGng= Subject key identifier: E3:F4:BE:56:97:1A:27:E7:6C:3C:37:58:22:67:52:64:CD:F6:7B:C5 Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b Certificate serial: 019A834D13776EB6BEE01947C37D6306DE17 Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/4_S-VpcaJ-dsPDdYImdSZM32e8U.roa Signing time: Fri 14 Nov 2025 16:57:37 +0000 ROA not before: Fri 14 Nov 2025 16:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35196 IP address blocks: 2001:67c:af4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:4d:13:77:6e:b6:be:e0:19:47:c3:7d:63:06:de:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b Validity Not Before: Nov 14 16:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e3f4be56971a27e76c3c375822675264cdf67bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:0b:d4:ee:ce:cf:7d:c5:c6:74:8b:29:1b: be:e3:49:f7:7a:7b:76:8d:2b:be:21:6b:25:be:d2: ac:6e:ac:b4:69:59:02:ae:a2:ca:8e:c1:0d:f6:03: 7b:16:af:05:86:e8:0b:cb:2d:47:dd:81:04:62:d2: a7:54:3d:2c:62:63:8b:ad:79:f9:5b:22:6d:a9:ed: bc:87:2e:fc:3d:5a:68:00:53:97:61:34:6e:83:51: 88:b5:7e:a1:02:06:13:3e:f7:74:53:6a:35:a1:cf: ed:4a:c1:ac:38:6c:3a:2b:26:9e:13:ef:ad:f2:b7: a2:23:b6:cf:99:f0:c2:8e:84:95:bf:45:d4:83:b3: 6f:82:eb:14:87:5b:12:d1:d6:9f:17:19:1a:35:a4: d3:bb:03:3f:15:24:51:4a:b1:3e:2c:84:b9:3a:6f: 12:9a:ae:da:9c:f6:8f:2b:37:b7:47:9d:1b:6f:80: 7f:31:a1:a5:3d:f8:d9:ee:07:36:a0:c4:93:b0:75: 15:67:ca:8e:40:15:ef:fa:68:4d:3f:12:6b:33:07: 83:05:3b:37:56:4f:ec:82:3e:15:3e:85:af:79:d1: c6:66:39:62:a4:ba:13:cd:a7:82:40:24:d5:09:e5: c9:3b:63:0c:8c:ce:17:e2:0b:22:b4:2a:30:8b:71: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F4:BE:56:97:1A:27:E7:6C:3C:37:58:22:67:52:64:CD:F6:7B:C5 X509v3 Authority Key Identifier: keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/4_S-VpcaJ-dsPDdYImdSZM32e8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:af4::/48 Signature Algorithm: sha256WithRSAEncryption 25:08:45:95:bb:dd:0b:88:c5:58:36:44:81:68:12:08:1b:5c: b6:1b:85:1a:cd:bd:d5:33:b8:73:a2:97:10:8f:da:66:0b:c1: ad:ae:c7:07:af:64:4a:f2:f2:53:f5:b8:d5:58:65:98:ca:8c: 11:f3:a2:f2:e7:1c:01:3d:25:dc:01:31:0e:f5:03:e6:15:ad: e5:6c:b0:cc:57:57:8b:2f:38:0e:6c:fa:f3:4e:3f:eb:c8:2b: c6:79:df:c0:c7:ca:9d:84:42:c1:71:87:09:b9:fa:d0:d0:ae: 47:c2:18:59:e8:85:dd:90:e5:6e:55:a7:36:63:91:7f:ed:27: 74:11:85:20:28:f0:75:00:03:ba:b7:9c:1f:ad:65:8d:c8:e5: f0:95:da:bb:f4:7e:77:0a:02:18:e9:66:eb:f4:9e:9f:56:9e: a1:e2:fc:95:61:17:6e:d8:31:e9:b3:aa:ba:43:ff:d9:84:84: 07:6b:04:2d:d5:29:df:ea:65:58:00:54:7d:a5:77:99:32:f6: f6:a7:44:a4:8a:a2:e1:58:2e:fc:c7:81:4a:30:ee:ab:1d:69: 7b:fd:98:68:7b:e4:4a:11:5e:e1:e5:ef:c6:f2:8c:63:18:a6: 5c:1f:00:92:f4:ee:10:cd:56:04:3d:a9:93:68:d7:20:69:94: 14:da:25:66 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqDTRN3bra+4BlHw31jBt4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy MGMzNWIwHhcNMjUxMTE0MTY1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Y0YmU1Njk3MWEyN2U3NmMzYzM3NTgyMjY3NTI2NGNkZjY3YmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTUL1O7Oz33FxnSLKRu+40n3ent2 jSu+IWslvtKsbqy0aVkCrqLKjsEN9gN7Fq8FhugLyy1H3YEEYtKnVD0sYmOLrXn5 WyJtqe28hy78PVpoAFOXYTRug1GItX6hAgYTPvd0U2o1oc/tSsGsOGw6KyaeE++t 8reiI7bPmfDCjoSVv0XUg7NvgusUh1sS0dafFxkaNaTTuwM/FSRRSrE+LIS5Om8S mq7anPaPKze3R50bb4B/MaGlPfjZ7gc2oMSTsHUVZ8qOQBXv+mhNPxJrMweDBTs3 Vk/sgj4VPoWvedHGZjlipLoTzaeCQCTVCeXJO2MMjM4X4gsitCowi3HAlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOP0vlaXGifnbDw3WCJnUmTN9nvFMB8GA1UdIwQY MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct MDY5NjA2NDQxNTE0LzEvNF9TLVZwY2FKLWRzUERkWUltZFNaTTMyZThVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0 LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAr0 MA0GCSqGSIb3DQEBCwUAA4IBAQAlCEWVu90LiMVYNkSBaBIIG1y2G4Uazb3VM7hz opcQj9pmC8GtrscHr2RK8vJT9bjVWGWYyowR86Ly5xwBPSXcATEO9QPmFa3lbLDM V1eLLzgObPrzTj/ryCvGed/Ax8qdhELBcYcJufrQ0K5HwhhZ6IXdkOVuVac2Y5F/ 7Sd0EYUgKPB1AAO6t5wfrWWNyOXwldq79H53CgIY6Wbr9J6fVp6h4vyVYRdu2DHp s6q6Q//ZhIQHawQt1Snf6mVYAFR9pXeZMvb2p0SkiqLhWC78x4FKMO6rHWl7/Zho e+RKEV7h5e/G8oxjGKZcHwCS9O4QzVYEPamTaNcgaZQU2iVm -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:40 2025 by rpki-client