This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vliKZaSIov7ra7oMtOXo3pmSa_0.roa File: vliKZaSIov7ra7oMtOXo3pmSa_0.roa (raw, json) Hash identifier: AlmCVWWv9Xl539mX2jpyekktTbSaEDqWKWKYo9HGa3I= Subject key identifier: BE:58:8A:65:A4:88:A2:FE:EB:6B:BA:0C:B4:E5:E8:DE:99:92:6B:FD Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b Certificate serial: 019A834D14196B6F12FAB0652EA6D085CE0F Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vliKZaSIov7ra7oMtOXo3pmSa_0.roa Signing time: Fri 14 Nov 2025 16:57:37 +0000 ROA not before: Fri 14 Nov 2025 16:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212913 IP address blocks: 2001:67c:af4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:4d:14:19:6b:6f:12:fa:b0:65:2e:a6:d0:85:ce:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b Validity Not Before: Nov 14 16:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be588a65a488a2feeb6bba0cb4e5e8de99926bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:cf:a2:88:b5:dc:07:50:09:ae:fe:dc:cb: 33:5c:16:fb:b4:0b:8b:84:f6:68:da:8f:58:9c:62: 97:3e:28:a6:87:fb:9b:62:b2:1f:cf:eb:21:af:ca: 4a:39:5d:48:a5:8e:93:3b:a9:31:c5:8f:fd:a6:2c: 94:bf:d4:0f:f4:90:4d:6f:d6:a6:69:2f:78:a2:3c: 68:46:c2:92:21:a5:e4:cb:5a:b0:89:af:a1:f6:eb: 20:ae:7b:29:b6:ac:5e:b5:ec:87:0f:9b:02:04:9a: 71:34:b9:4f:62:a6:0c:34:b4:ff:b0:cf:93:a6:55: 4b:07:d6:42:5c:36:42:94:1c:2e:fb:94:e3:d1:5f: 37:95:c2:3e:99:4d:6e:a5:eb:c9:4e:92:aa:71:ce: 27:4b:14:65:cf:6b:cb:05:10:3f:20:8f:99:2e:7e: fb:84:d4:95:81:6e:75:a1:81:bb:20:fd:26:d7:cd: b1:a7:89:1a:ac:42:f4:68:de:78:85:7f:76:8e:28: e4:2e:6c:4b:d3:01:5c:98:b8:0f:63:3a:07:0a:16: 5b:a1:61:d3:02:5d:51:58:8c:e1:e0:03:0e:b1:94: 4f:c6:63:28:a5:2e:ec:8d:4d:f4:03:5f:32:28:17: 52:57:56:1d:34:3f:8e:17:63:22:0e:7c:35:44:c9: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:58:8A:65:A4:88:A2:FE:EB:6B:BA:0C:B4:E5:E8:DE:99:92:6B:FD X509v3 Authority Key Identifier: keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vliKZaSIov7ra7oMtOXo3pmSa_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:af4::/48 Signature Algorithm: sha256WithRSAEncryption d1:8c:ab:ef:2e:f0:9d:b0:7b:68:e4:07:30:c4:6a:9f:20:6a: 73:66:09:cf:05:6b:ee:0e:23:d3:c9:17:57:32:34:64:a2:a5: 0d:f4:e2:29:73:bf:28:57:0b:bd:35:4d:db:76:48:c6:72:9f: 7f:87:74:3c:62:f1:47:3a:c4:c9:da:cc:ce:d5:44:7e:64:c7: 03:a9:06:29:a9:30:d5:8a:13:45:17:f2:35:32:cd:2e:4f:33: 33:d0:a9:f0:8b:9f:05:4b:2d:45:cd:a1:e6:2e:ed:dd:da:1d: de:21:42:5c:13:50:49:09:e9:b3:33:12:1e:b8:0e:73:d2:ff: 6d:cf:98:42:fd:e1:f9:29:94:ca:ac:57:1e:6b:64:50:57:7d: 30:49:be:5a:29:fa:c8:a5:89:30:04:b6:59:18:39:c0:dd:f9: 84:1a:28:f9:d2:21:58:07:aa:4f:70:8a:ca:85:11:57:83:8b: 4c:81:98:95:e7:6f:fb:71:dc:80:08:57:67:96:57:52:86:d7: 60:6d:76:06:b5:15:3a:56:d2:c7:49:9d:85:78:03:16:42:ec: 8a:10:52:b1:85:50:79:56:e2:16:e0:60:64:f0:e9:3b:8f:af: 2d:df:40:dd:bc:82:f1:40:35:21:63:18:7a:89:0c:00:0e:a6: ca:ac:36:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqDTRQZa28S+rBlLqbQhc4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy MGMzNWIwHhcNMjUxMTE0MTY1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTU4OGE2NWE0ODhhMmZlZWI2YmJhMGNiNGU1ZThkZTk5OTI2YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5jPooi13AdQCa7+3MszXBb7tAuL hPZo2o9YnGKXPiimh/ubYrIfz+shr8pKOV1IpY6TO6kxxY/9piyUv9QP9JBNb9am aS94ojxoRsKSIaXky1qwia+h9usgrnsptqxeteyHD5sCBJpxNLlPYqYMNLT/sM+T plVLB9ZCXDZClBwu+5Tj0V83lcI+mU1upevJTpKqcc4nSxRlz2vLBRA/II+ZLn77 hNSVgW51oYG7IP0m182xp4karEL0aN54hX92jijkLmxL0wFcmLgPYzoHChZboWHT Al1RWIzh4AMOsZRPxmMopS7sjU30A18yKBdSV1YdND+OF2MiDnw1RMmJIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL5YimWkiKL+62u6DLTl6N6Zkmv9MB8GA1UdIwQY MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct MDY5NjA2NDQxNTE0LzEvdmxpS1phU0lvdjdyYTdvTXRPWG8zcG1TYV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0 LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAr0 MA0GCSqGSIb3DQEBCwUAA4IBAQDRjKvvLvCdsHto5AcwxGqfIGpzZgnPBWvuDiPT yRdXMjRkoqUN9OIpc78oVwu9NU3bdkjGcp9/h3Q8YvFHOsTJ2szO1UR+ZMcDqQYp qTDVihNFF/I1Ms0uTzMz0Knwi58FSy1FzaHmLu3d2h3eIUJcE1BJCemzMxIeuA5z 0v9tz5hC/eH5KZTKrFcea2RQV30wSb5aKfrIpYkwBLZZGDnA3fmEGij50iFYB6pP cIrKhRFXg4tMgZiV52/7cdyACFdnlldShtdgbXYGtRU6VtLHSZ2FeAMWQuyKEFKx hVB5VuIW4GBk8Ok7j68t30DdvILxQDUhYxh6iQwADqbKrDZb -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:19 2025 by rpki-client