This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/vtk0NYL8kgLZ9pXjVTmANhtyXlc.roa File: vtk0NYL8kgLZ9pXjVTmANhtyXlc.roa (raw, json) Hash identifier: ASiU/VZxh3GZFZYmlNltFl5dj/W+E1FulQvZXR6ONjM= Subject key identifier: BE:D9:34:35:82:FC:92:02:D9:F6:95:E3:55:39:80:36:1B:72:5E:57 Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6 Certificate serial: 019B791010E3AF25594F390DA041364D86D6 Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/vtk0NYL8kgLZ9pXjVTmANhtyXlc.roa Signing time: Thu 01 Jan 2026 10:17:34 +0000 ROA not before: Thu 01 Jan 2026 10:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 144.200.0.0/16 maxlen: 16 2a02:7dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:10:e3:af:25:59:4f:39:0d:a0:41:36:4d:86:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6 Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bed9343582fc9202d9f695e3553980361b725e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:46:3f:23:28:8b:8f:bf:b8:99:a6:32:a1: 4a:f7:ee:e7:75:a5:22:1f:ef:c8:e0:07:80:1a:c6: f5:6f:91:52:86:7f:4e:eb:00:7a:cf:46:2a:1e:ba: b6:5e:f5:5e:e4:07:81:96:a4:95:44:16:04:0e:c3: 7d:21:23:88:81:83:0d:35:26:78:fc:db:d1:13:17: 28:f8:5b:b9:92:be:c4:93:18:84:80:00:ec:75:87: 43:92:eb:62:85:4c:b0:84:56:b6:89:b8:96:00:5f: 72:97:33:31:1f:72:64:55:10:78:17:61:49:04:fc: 52:ec:81:76:86:73:28:f8:23:ef:03:69:d2:2d:9a: 39:f8:6a:c6:23:fe:30:24:5b:b7:aa:6d:d1:97:66: 74:bc:60:5e:fc:6d:bb:af:42:ed:9d:83:1a:32:54: ad:f1:b3:87:3f:11:c8:d5:34:47:16:54:c2:2f:f7: bc:dc:52:12:31:d2:66:5e:1d:2a:1c:04:52:d8:99: b9:11:d6:9c:b3:d5:63:92:8c:89:59:19:ce:f0:b0: 48:37:6b:66:b8:e5:3e:d2:db:8f:36:c9:af:15:48: 9f:e4:d5:22:48:fe:36:ca:5b:c2:19:80:6e:33:c3: d9:0f:c7:47:29:e7:91:e6:e5:fd:74:a3:d7:0e:56: 8a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:34:35:82:FC:92:02:D9:F6:95:E3:55:39:80:36:1B:72:5E:57 X509v3 Authority Key Identifier: keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/vtk0NYL8kgLZ9pXjVTmANhtyXlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.200.0.0/16 IPv6: 2a02:7dc0::/32 Signature Algorithm: sha256WithRSAEncryption 69:63:d9:bb:87:15:e7:b8:8f:b5:dc:25:95:9d:83:34:35:81: 21:9b:53:14:4d:8c:a5:fa:16:df:7f:5d:25:0c:38:77:93:06: 71:ea:3a:d4:e4:b7:f6:5d:c0:9e:0d:bd:41:fa:a2:9c:c7:b4: c5:42:45:7c:cf:7d:4d:5d:b6:f5:5a:92:fc:50:e7:b1:38:44: 7b:5c:90:4f:58:1b:24:5b:1c:3d:f8:4a:b9:f1:7d:3a:7f:b7: 61:de:a1:f4:32:29:d2:ba:a1:e3:d7:c6:7e:57:bd:fb:1e:b7: 78:45:6f:36:74:14:5d:d6:57:4b:19:c2:3d:98:41:60:66:ed: 8d:c4:80:ad:53:be:40:92:1b:15:30:51:ae:66:e7:ab:88:9a: 0e:52:ea:b9:1b:70:d1:b2:16:e3:3d:32:f2:d5:9d:8a:24:3c: 30:7e:80:90:ca:7b:7e:56:d2:cb:94:52:77:66:93:6c:aa:1d: 20:ec:30:77:75:c6:1f:1d:4f:87:d6:8c:d5:75:01:7d:1b:18: 39:83:9b:d1:df:2f:f2:1d:51:c2:ab:56:b8:e6:87:c1:1e:d3: c7:29:71:81:88:32:30:81:16:8c:50:0a:c9:2c:c6:68:d7:27: 85:ec:ce:29:dc:16:c3:ce:0e:fc:1a:8f:8c:8a:11:45:24:b3: b6:64:de:9b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EBDjryVZTzkNoEE2TYbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxODdjY2VjNDlhYTVmNjZhYTAyNjQ4ZDkxYjRhMmVlOGZm N2JkZTYwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWQ5MzQzNTgyZmM5MjAyZDlmNjk1ZTM1NTM5ODAzNjFiNzI1ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3pGPyMoi4+/uJmmMqFK9+7ndaUi H+/I4AeAGsb1b5FShn9O6wB6z0YqHrq2XvVe5AeBlqSVRBYEDsN9ISOIgYMNNSZ4 /NvRExco+Fu5kr7EkxiEgADsdYdDkutihUywhFa2ibiWAF9ylzMxH3JkVRB4F2FJ BPxS7IF2hnMo+CPvA2nSLZo5+GrGI/4wJFu3qm3Rl2Z0vGBe/G27r0LtnYMaMlSt 8bOHPxHI1TRHFlTCL/e83FISMdJmXh0qHARS2Jm5Edacs9VjkoyJWRnO8LBIN2tm uOU+0tuPNsmvFUif5NUiSP42ylvCGYBuM8PZD8dHKeeR5uX9dKPXDlaKZQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFL7ZNDWC/JIC2faV41U5gDYbcl5XMB8GA1UdIwQY MBaAFLGHzOxJql9mqgJkjZG0ou6P973mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYt MTdmNGUwZjZjZGViLzEvdnRrME5ZTDhrZ0xaOXBYalZUbUFOaHR5WGxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83MjI4MWEtZDY4OC00MTVkLWEyYzYtMTdmNGUwZjZjZGVi LzEvc1lmTTdFbXFYMmFxQW1TTmtiU2k3b18zdmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDALBAIAATAFAwMAkMgwDQQC AAIwBwMFACoCfcAwDQYJKoZIhvcNAQELBQADggEBAGlj2buHFee4j7XcJZWdgzQ1 gSGbUxRNjKX6Ft9/XSUMOHeTBnHqOtTkt/ZdwJ4NvUH6opzHtMVCRXzPfU1dtvVa kvxQ57E4RHtckE9YGyRbHD34SrnxfTp/t2HeofQyKdK6oePXxn5Xvfset3hFbzZ0 FF3WV0sZwj2YQWBm7Y3EgK1TvkCSGxUwUa5m56uImg5S6rkbcNGyFuM9MvLVnYok PDB+gJDKe35W0suUUndmk2yqHSDsMHd1xh8dT4fWjNV1AX0bGDmDm9HfL/IdUcKr Vrjmh8Ee08cpcYGIMjCBFoxQCsksxmjXJ4XszincFsPODvwaj4yKEUUks7Zk3ps= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:20 2026 by rpki-client