This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/VK85rpozFq-WBREloOuqHfpQLVI.roa File: VK85rpozFq-WBREloOuqHfpQLVI.roa (raw, json) Hash identifier: VLGfCYG/IdB8dymdqFgTGB3V6ioYoYPUTJ+uFq78shw= Subject key identifier: 54:AF:39:AE:9A:33:16:AF:96:05:11:25:A0:EB:AA:1D:FA:50:2D:52 Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034 Certificate serial: 019B7834E9ADE13A682DBC372DD8B8E607AB Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/VK85rpozFq-WBREloOuqHfpQLVI.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29632 IP address blocks: 62.205.128.0/19 maxlen: 19 62.205.128.0/20 maxlen: 20 62.205.132.0/24 maxlen: 24 62.205.134.0/24 maxlen: 24 62.205.144.0/20 maxlen: 20 62.205.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e9:ad:e1:3a:68:2d:bc:37:2d:d8:b8:e6:07:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54af39ae9a3316af96051125a0ebaa1dfa502d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:21:15:11:f7:dd:24:d5:7f:02:7d:e2:bf: 39:45:50:1e:0b:a4:da:c8:ee:6d:05:de:9f:83:16: 90:59:15:04:a4:db:06:84:b6:7e:49:a5:7c:40:c1: 07:23:0c:37:3e:2d:10:c6:4a:5f:68:68:48:20:5b: d3:f7:f0:8d:a9:28:17:c5:4a:1d:7f:0e:90:53:5a: fc:53:08:55:2c:e5:9b:91:de:b5:79:6a:94:39:85: f2:6c:f5:00:14:60:ae:f3:3c:91:c7:8b:7d:93:5f: 5c:b9:1f:11:f4:93:03:18:46:8a:2f:ff:0a:14:33: 11:10:5a:d6:5f:70:fe:76:f0:c3:18:bc:2c:9c:77: cd:e7:a0:d4:3c:ec:fd:d9:27:26:05:0f:9e:32:9c: 85:15:6e:c0:66:c8:ac:89:ce:57:20:ea:d7:27:d7: c8:15:b6:00:60:35:a8:27:de:51:8f:b5:72:2a:b3: 3c:e3:69:eb:2d:eb:c4:a2:b0:27:ff:89:eb:e7:49: 70:97:15:52:41:e5:cf:21:d7:48:8a:92:bb:77:a3: 00:36:b7:26:ab:a3:bb:60:c2:4a:bf:c3:d4:ec:26: a9:6a:29:bd:6b:5d:2c:40:25:f6:14:b1:ec:2f:26: 88:24:17:be:85:f5:e4:a3:58:aa:67:56:32:14:cd: ec:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AF:39:AE:9A:33:16:AF:96:05:11:25:A0:EB:AA:1D:FA:50:2D:52 X509v3 Authority Key Identifier: keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/VK85rpozFq-WBREloOuqHfpQLVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.205.128.0/19 Signature Algorithm: sha256WithRSAEncryption 7b:9f:97:76:50:9b:c1:c3:76:d5:7a:d6:4f:45:ab:de:dc:bf: 50:20:ac:a9:5b:21:81:69:03:10:fa:5f:79:9e:fd:6e:0a:93: cf:73:71:a7:75:92:df:a5:9c:33:07:95:14:bd:bd:4b:4c:c5: 9e:9d:df:67:98:d6:b0:6c:3c:b2:6f:41:22:b5:79:d1:cf:81: 9b:b9:e6:37:30:d3:20:1a:eb:71:cd:14:2e:51:40:29:35:c3: 26:ba:e0:d0:21:93:b0:c3:91:0d:11:d7:57:27:3d:ad:ba:e5: a6:b2:57:fb:cd:9c:ed:53:fc:22:7f:97:13:ab:73:c2:d9:c6: 3c:d1:c1:ea:08:66:17:fc:01:5e:f8:c4:36:b4:a6:20:bf:1a: 1f:41:8b:1c:c8:f7:9a:d0:dc:df:3c:84:cd:22:88:c0:a4:38: ce:b1:32:0e:54:ff:97:e3:59:1d:60:c7:28:0f:17:b7:e2:d9: 50:61:59:b2:1e:24:79:53:9e:4e:d2:8b:07:2e:78:97:cb:5b: e1:03:f6:89:f4:fa:07:03:f1:25:ad:3b:de:85:b7:a9:2a:ca: 08:f8:04:42:9d:6c:73:85:07:12:b6:55:94:58:d9:23:00:d0: 14:16:ea:a6:15:79:03:6e:40:4b:4b:d1:ee:3e:c3:02:47:c8: 07:a7:36:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NOmt4TpoLbw3Ldi45gerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0 ZGIwMzQwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGFmMzlhZTlhMzMxNmFmOTYwNTExMjVhMGViYWExZGZhNTAyZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXEhFRH33STVfwJ94r85RVAeC6Ta yO5tBd6fgxaQWRUEpNsGhLZ+SaV8QMEHIww3Pi0QxkpfaGhIIFvT9/CNqSgXxUod fw6QU1r8UwhVLOWbkd61eWqUOYXybPUAFGCu8zyRx4t9k19cuR8R9JMDGEaKL/8K FDMREFrWX3D+dvDDGLwsnHfN56DUPOz92ScmBQ+eMpyFFW7AZsisic5XIOrXJ9fI FbYAYDWoJ95Rj7VyKrM842nrLevEorAn/4nr50lwlxVSQeXPIddIipK7d6MANrcm q6O7YMJKv8PU7Capaim9a10sQCX2FLHsLyaIJBe+hfXko1iqZ1YyFM3shQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFSvOa6aMxavlgURJaDrqh36UC1SMB8GA1UdIwQY MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt NDJiYmYxYTZhNjViLzEvVks4NXJwb3pGcS1XQlJFbG9PdXFIZnBRTFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPs2AMA0G CSqGSIb3DQEBCwUAA4IBAQB7n5d2UJvBw3bVetZPRave3L9QIKypWyGBaQMQ+l95 nv1uCpPPc3GndZLfpZwzB5UUvb1LTMWend9nmNawbDyyb0EitXnRz4GbueY3MNMg GutxzRQuUUApNcMmuuDQIZOww5ENEddXJz2tuuWmslf7zZztU/wif5cTq3PC2cY8 0cHqCGYX/AFe+MQ2tKYgvxofQYscyPea0NzfPITNIojApDjOsTIOVP+X41kdYMco Dxe34tlQYVmyHiR5U55O0osHLniXy1vhA/aJ9PoHA/ElrTvehbepKsoI+ARCnWxz hQcStlWUWNkjANAUFuqmFXkDbkBLS9HuPsMCR8gHpzYE -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:28 2026 by rpki-client