This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/1VKTU02OycyAYCpJZg4aLPvtRwQ.roa File: 1VKTU02OycyAYCpJZg4aLPvtRwQ.roa (raw, json) Hash identifier: YG+UTvOUE4BmkeAXkImvscwUrz10BeacL7ioJPazzOQ= Subject key identifier: D5:52:93:53:4D:8E:C9:CC:80:60:2A:49:66:0E:1A:2C:FB:ED:47:04 Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b Certificate serial: 019AE0B325FEA3CE34C0AF86CB3923043143 Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/1VKTU02OycyAYCpJZg4aLPvtRwQ.roa Signing time: Tue 02 Dec 2025 20:13:48 +0000 ROA not before: Tue 02 Dec 2025 20:13:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43357 IP address blocks: 2a11:3:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b3:25:fe:a3:ce:34:c0:af:86:cb:39:23:04:31:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b Validity Not Before: Dec 2 20:13:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d55293534d8ec9cc80602a49660e1a2cfbed4704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:d0:60:90:35:78:d2:ce:f1:16:99:be:3c: 9b:ec:24:ee:cc:f0:c4:c0:49:a0:bc:3d:cd:ba:11: 59:dd:e8:29:57:56:7a:d3:4d:24:e5:26:2b:92:a0: cb:33:ca:76:07:67:2f:f8:b3:ff:4a:ed:71:a2:cf: 51:fa:de:e5:2e:15:ba:c9:df:e0:f6:cc:d8:8c:d4: e4:41:df:b3:d4:49:e9:f4:11:ca:66:cb:d2:f1:fd: d0:29:15:c0:a7:4c:e8:87:0e:3d:20:f9:68:66:db: a1:fa:b7:b8:42:bc:db:35:17:72:d8:fb:7d:e5:ea: 76:39:bf:7e:1a:60:20:03:c7:0a:23:f7:9e:97:0d: 89:c0:7f:cb:3b:96:75:f6:cc:c9:fc:56:12:50:be: 89:58:85:3a:7a:da:bc:f0:b2:2d:6e:d7:a5:97:92: 16:3f:74:ab:fa:57:83:50:b7:4b:9f:d1:5d:1b:59: 82:cf:e4:03:3a:cd:15:9b:94:39:c4:bb:ef:f1:e9: 80:9c:c8:0d:b4:1c:58:8a:7e:9a:16:1e:ba:ed:be: 37:54:fb:40:cf:86:ec:d1:37:bc:f7:3c:4b:af:d9: 74:af:ec:a0:0a:eb:ba:8e:2b:82:36:17:8d:df:1a: 26:b8:c2:ab:3a:91:4a:f0:bd:17:2d:cd:3d:39:7f: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:93:53:4D:8E:C9:CC:80:60:2A:49:66:0E:1A:2C:FB:ED:47:04 X509v3 Authority Key Identifier: keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/1VKTU02OycyAYCpJZg4aLPvtRwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:3:500::/40 Signature Algorithm: sha256WithRSAEncryption 8d:b3:e1:a9:24:a5:a8:0a:09:d0:dc:72:7f:eb:a9:46:0a:8a: 70:0a:08:b5:97:00:07:ee:77:2c:d3:43:ae:a7:b8:af:ad:15: 82:68:3c:ad:89:5a:ad:5d:52:68:8e:44:5f:78:c2:1b:41:0b: 67:5d:10:e6:dd:84:4b:83:f9:27:68:ea:e2:c9:f5:99:6b:84: 92:31:d0:34:89:89:e7:96:22:3a:07:1a:95:d3:1c:22:18:08: 82:95:27:9f:7b:05:57:51:bd:f3:33:51:f4:8f:aa:d2:c9:e1: fb:9a:66:b6:9b:f6:d4:39:73:ef:96:84:e4:50:19:90:06:01: d0:78:c3:70:9d:c1:cd:ce:0c:0d:4a:1c:a3:cd:1d:98:09:f0: 63:2a:01:a1:d7:2f:5d:18:c6:8c:0b:7a:61:a8:a6:27:15:52: da:aa:65:49:80:f1:8f:62:20:07:ed:f7:95:17:74:ff:5c:3f: 74:28:11:52:2b:6b:ca:fa:8b:73:f9:44:51:f1:93:8a:ab:3d: 86:ac:fc:aa:61:45:34:6e:35:0f:fe:f8:14:97:45:7f:5e:43: 1c:81:2b:1f:2e:74:f8:6f:f9:b8:a5:22:86:84:05:0e:eb:35: 08:1a:4f:0a:bd:11:cb:b1:f5:47:8f:70:35:63:16:23:f4:6b: 74:a7:d6:0c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZrgsyX+o840wK+GyzkjBDFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx ZTBiMmIwHhcNMjUxMjAyMjAxMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTUyOTM1MzRkOGVjOWNjODA2MDJhNDk2NjBlMWEyY2ZiZWQ0NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAnQYJA1eNLO8RaZvjyb7CTuzPDE wEmgvD3NuhFZ3egpV1Z6000k5SYrkqDLM8p2B2cv+LP/Su1xos9R+t7lLhW6yd/g 9szYjNTkQd+z1Enp9BHKZsvS8f3QKRXAp0zohw49IPloZtuh+re4QrzbNRdy2Pt9 5ep2Ob9+GmAgA8cKI/eelw2JwH/LO5Z19szJ/FYSUL6JWIU6etq88LItbtell5IW P3Sr+leDULdLn9FdG1mCz+QDOs0Vm5Q5xLvv8emAnMgNtBxYin6aFh667b43VPtA z4bs0Te89zxLr9l0r+ygCuu6jiuCNheN3xomuMKrOpFK8L0XLc09OX+IIwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNVSk1NNjsnMgGAqSWYOGiz77UcEMB8GA1UdIwQY MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt ZWUxZWE2MzZlZDRmLzEvMVZLVFUwMk95Y3lBWUNwSlpnNGFMUHZ0UndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhEAAwUw DQYJKoZIhvcNAQELBQADggEBAI2z4akkpagKCdDccn/rqUYKinAKCLWXAAfudyzT Q66nuK+tFYJoPK2JWq1dUmiORF94whtBC2ddEObdhEuD+Sdo6uLJ9ZlrhJIx0DSJ ieeWIjoHGpXTHCIYCIKVJ597BVdRvfMzUfSPqtLJ4fuaZrab9tQ5c++WhORQGZAG AdB4w3Cdwc3ODA1KHKPNHZgJ8GMqAaHXL10YxowLemGopicVUtqqZUmA8Y9iIAft 95UXdP9cP3QoEVIra8r6i3P5RFHxk4qrPYas/KphRTRuNQ/++BSXRX9eQxyBKx8u dPhv+bilIoaEBQ7rNQgaTwq9Ecux9UePcDVjFiP0a3Sn1gw= -----END CERTIFICATE-----Generated at Sat Dec 6 19:23:46 2025 by rpki-client