This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vgCRkkWn3tZYbGpyEhLPOEpYP3U.roa File: vgCRkkWn3tZYbGpyEhLPOEpYP3U.roa (raw, json) Hash identifier: 681EjhLuu2ueHa6xOmn8+9cJDZjcwLWHkL7qEh8A0wQ= Subject key identifier: BE:00:91:92:45:A7:DE:D6:58:6C:6A:72:12:12:CF:38:4A:58:3F:75 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FCF30C3DBC01384507209D91606F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vgCRkkWn3tZYbGpyEhLPOEpYP3U.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211765 IP address blocks: 2a0c:9a40:85c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fc:f3:0c:3d:bc:01:38:45:07:20:9d:91:60:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be00919245a7ded6586c6a721212cf384a583f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:85:bc:20:79:75:f4:f1:2c:77:ff:ab:47: 6e:c8:69:b5:e1:25:f7:a6:df:80:5d:73:79:e1:b8: 15:49:71:82:b7:c0:6a:ab:dc:42:74:7e:23:f9:f1: 40:d8:0a:48:08:29:02:40:56:9d:83:bc:9c:58:80: 88:4c:80:e6:64:87:9a:ed:20:5a:f2:7b:8d:a1:78: 8a:80:4f:d8:2d:d2:17:f9:de:db:f4:a6:73:d2:70: 20:d3:85:0e:91:d7:0f:85:08:d5:46:ef:bf:11:02: b5:59:76:26:22:3d:db:01:97:13:fb:5e:68:85:e0: 77:0e:41:e1:cc:f7:c8:7f:09:72:47:1c:e7:f3:02: 43:00:9c:8f:87:3d:0e:c7:14:56:58:40:ac:aa:4f: 70:39:49:98:10:da:77:b9:48:3d:da:bc:fe:6d:53: 13:d6:bf:b7:65:5c:f8:d4:7b:91:8e:52:c9:f2:fb: 3c:75:5d:e8:a6:8b:0e:b9:39:14:c2:38:bd:3f:05: 3d:35:7e:e3:a6:34:b1:15:1b:8a:9e:c0:37:e3:df: 89:c7:a8:49:73:5d:35:9c:cf:bb:db:1f:b6:62:cd: 72:a7:ca:3c:49:29:56:88:a0:17:87:25:22:9b:07: 04:25:63:b8:cc:a9:ab:bc:22:08:9b:0f:9b:a6:75: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:00:91:92:45:A7:DE:D6:58:6C:6A:72:12:12:CF:38:4A:58:3F:75 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vgCRkkWn3tZYbGpyEhLPOEpYP3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:85c0::/48 Signature Algorithm: sha256WithRSAEncryption c4:49:65:a2:bb:f7:67:38:c6:47:5f:3e:f5:e0:85:e9:be:80: 12:13:8d:db:0d:67:88:c9:f7:88:7b:05:e9:3a:7e:3e:59:6f: e1:49:51:51:21:d1:5f:59:86:68:4b:cd:84:43:01:9d:54:24: 9c:9d:85:89:00:6e:0f:5d:5a:c1:b2:a6:15:03:20:df:c7:d7: 67:46:dd:39:36:a6:af:0e:22:11:ed:08:f9:1b:91:7a:a0:1d: 28:e2:1d:1b:14:02:61:2f:0b:64:76:1d:d2:e1:ee:e8:04:3c: 21:26:73:be:c4:d2:69:11:23:33:7c:58:81:ed:c2:c0:1d:a2: 2e:17:f5:c6:42:15:0d:a3:49:d5:32:6d:36:79:ab:33:38:68: 7b:fe:7b:01:d5:fb:00:c4:f0:56:12:37:e0:d5:9e:31:a4:92: e2:36:79:68:57:66:8b:f0:e7:84:9b:2c:b6:65:a4:a8:e3:19: 63:fb:db:b9:0f:13:ff:19:d4:45:f2:f2:39:a3:02:60:e8:d9: d7:29:d7:94:0a:cd:da:e8:8e:21:6c:0a:27:48:e0:45:95:13: 44:79:5b:66:f5:ac:d1:74:15:b3:08:cf:13:17:0a:16:76:05: 6c:94:49:6e:23:9c:3a:09:dd:2f:0c:ef:4b:a4:25:90:6f:10: d3:52:da:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvzzDD28AThFByCdkWBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTAwOTE5MjQ1YTdkZWQ2NTg2YzZhNzIxMjEyY2YzODRhNTgzZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzSFvCB5dfTxLHf/q0duyGm14SX3 pt+AXXN54bgVSXGCt8Bqq9xCdH4j+fFA2ApICCkCQFadg7ycWICITIDmZIea7SBa 8nuNoXiKgE/YLdIX+d7b9KZz0nAg04UOkdcPhQjVRu+/EQK1WXYmIj3bAZcT+15o heB3DkHhzPfIfwlyRxzn8wJDAJyPhz0OxxRWWECsqk9wOUmYENp3uUg92rz+bVMT 1r+3ZVz41HuRjlLJ8vs8dV3oposOuTkUwji9PwU9NX7jpjSxFRuKnsA349+Jx6hJ c101nM+72x+2Ys1yp8o8SSlWiKAXhyUimwcEJWO4zKmrvCIImw+bpnV6JQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL4AkZJFp97WWGxqchISzzhKWD91MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvdmdDUmtrV24zdFpZYkdweUVoTFBPRXBZUDNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIXA MA0GCSqGSIb3DQEBCwUAA4IBAQDESWWiu/dnOMZHXz714IXpvoASE43bDWeIyfeI ewXpOn4+WW/hSVFRIdFfWYZoS82EQwGdVCScnYWJAG4PXVrBsqYVAyDfx9dnRt05 NqavDiIR7Qj5G5F6oB0o4h0bFAJhLwtkdh3S4e7oBDwhJnO+xNJpESMzfFiB7cLA HaIuF/XGQhUNo0nVMm02easzOGh7/nsB1fsAxPBWEjfg1Z4xpJLiNnloV2aL8OeE myy2ZaSo4xlj+9u5DxP/GdRF8vI5owJg6NnXKdeUCs3a6I4hbAonSOBFlRNEeVtm 9azRdBWzCM8TFwoWdgVslEluI5w6Cd0vDO9LpCWQbxDTUtpN -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:43 2026 by rpki-client