This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vtlaf-T_vU0aBnaDcGSbTX8-bdY.roa File: vtlaf-T_vU0aBnaDcGSbTX8-bdY.roa (raw, json) Hash identifier: c0o5h6kTZd08i7qVetzyT5i86DASvocIQ4FHVf9Bscs= Subject key identifier: BE:D9:5A:7F:E4:FF:BD:4D:1A:06:76:83:70:64:9B:4D:7F:3E:6D:D6 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70B07E1F885EAF78CC4F8EA44513D Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vtlaf-T_vU0aBnaDcGSbTX8-bdY.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214223 IP address blocks: 2a0c:9a40:80d0::/48 maxlen: 48 2a0c:9a40:8800::/48 maxlen: 48 2a0c:9a46:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0b:07:e1:f8:85:ea:f7:8c:c4:f8:ea:44:51:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bed95a7fe4ffbd4d1a06768370649b4d7f3e6dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:39:53:7f:d6:54:52:0d:20:5d:59:1d:32: d0:fa:2c:23:9a:3c:3e:5b:09:43:6d:fb:a1:6a:b5: e7:a0:ec:bd:83:81:36:04:b4:49:21:da:70:86:bf: d4:03:8f:24:26:a3:7e:33:a3:68:2d:6e:a2:d6:9f: 57:71:a6:55:24:37:6a:24:fa:d1:96:ac:ce:71:39: 8e:d0:bf:ab:ce:aa:47:f8:a2:1a:90:21:f0:80:18: 58:23:3e:a3:c3:12:18:07:20:7c:38:c5:a6:0a:6b: 52:18:98:19:b0:76:3c:8f:da:ba:f4:35:e9:66:17: eb:e8:a0:81:6f:05:a0:d8:4d:56:1b:ba:d7:8e:93: bd:e2:2a:0b:8d:a8:62:c3:8c:7b:ce:dc:26:94:d0: c8:ce:d1:8e:87:ca:b2:ad:13:a6:3e:70:30:90:94: 1a:fe:56:86:82:e5:13:14:32:2c:9a:34:7c:34:7f: 87:4d:b9:60:6b:b9:e7:e7:2f:0d:43:66:6a:5e:dd: 61:fc:b8:0e:4f:5f:5b:46:7d:84:61:9e:d6:bf:09: 28:98:e9:95:96:6b:03:fa:32:12:07:42:11:e3:ee: 05:00:40:3f:77:0b:25:9d:3a:2b:36:61:d9:be:c9: 29:10:9c:e3:b1:ee:6e:8f:6c:75:48:02:78:84:3f: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D9:5A:7F:E4:FF:BD:4D:1A:06:76:83:70:64:9B:4D:7F:3E:6D:D6 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/vtlaf-T_vU0aBnaDcGSbTX8-bdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:80d0::/48 2a0c:9a40:8800::/48 2a0c:9a46:1000::/40 Signature Algorithm: sha256WithRSAEncryption 75:80:fc:2d:20:f9:1a:42:33:12:c6:a3:c6:31:7c:c4:1a:75: c0:3f:68:94:cc:22:db:58:04:79:64:1f:c5:0f:55:9f:a3:2a: dd:26:66:6f:ac:fc:45:67:e7:dd:1b:1e:65:db:71:3d:a6:1e: 74:b1:8d:31:13:f9:10:bc:26:ea:70:65:f9:96:00:4f:0f:8f: 51:5a:2d:e9:22:71:b7:9f:e6:af:b9:6e:ea:1f:f9:70:32:ea: 89:cc:1b:e2:71:e5:da:a3:0e:bd:0d:eb:e3:46:45:68:bf:35: 23:e8:02:8c:df:36:97:0d:9f:45:83:db:18:22:6b:4f:3d:dc: 07:ad:b8:73:8d:e9:6d:fe:66:a5:ad:bc:e3:da:27:d7:61:77: 74:08:d2:94:13:ee:ba:e3:a3:a2:92:05:b5:6b:b7:fc:2d:71: 52:15:83:75:57:23:4b:38:a6:14:15:c3:7a:87:9f:67:5c:e7: 98:67:cd:cd:7b:95:14:c8:d9:bd:67:30:c9:38:01:be:f6:e5: 48:5e:8f:58:77:78:29:92:ee:c1:8b:90:3c:9f:c7:72:84:40: 0a:86:d6:fa:30:3e:ce:92:56:c6:8e:f7:7a:b7:59:b9:5f:80: 0c:22:41:02:20:25:be:05:0c:01:0e:12:18:67:ac:90:59:d9: 58:d4:ae:6d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+pwsH4fiF6veMxPjqRFE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWQ5NWE3ZmU0ZmZiZDRkMWEwNjc2ODM3MDY0OWI0ZDdmM2U2ZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ko5U3/WVFINIF1ZHTLQ+iwjmjw+ WwlDbfuharXnoOy9g4E2BLRJIdpwhr/UA48kJqN+M6NoLW6i1p9XcaZVJDdqJPrR lqzOcTmO0L+rzqpH+KIakCHwgBhYIz6jwxIYByB8OMWmCmtSGJgZsHY8j9q69DXp Zhfr6KCBbwWg2E1WG7rXjpO94ioLjahiw4x7ztwmlNDIztGOh8qyrROmPnAwkJQa /laGguUTFDIsmjR8NH+HTblga7nn5y8NQ2ZqXt1h/LgOT19bRn2EYZ7WvwkomOmV lmsD+jISB0IR4+4FAEA/dwslnTorNmHZvskpEJzjse5uj2x1SAJ4hD+k7wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFL7ZWn/k/71NGgZ2g3Bkm01/Pm3WMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvdnRsYWYtVF92VTBhQm5hRGNHU2JUWDgtYmRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcAKgyaQIDQ AwcAKgyaQIgAAwYAKgyaRhAwDQYJKoZIhvcNAQELBQADggEBAHWA/C0g+RpCMxLG o8YxfMQadcA/aJTMIttYBHlkH8UPVZ+jKt0mZm+s/EVn590bHmXbcT2mHnSxjTET +RC8JupwZfmWAE8Pj1FaLekicbef5q+5buof+XAy6onMG+Jx5dqjDr0N6+NGRWi/ NSPoAozfNpcNn0WD2xgia0893AetuHON6W3+ZqWtvOPaJ9dhd3QI0pQT7rrjo6KS BbVrt/wtcVIVg3VXI0s4phQVw3qHn2dc55hnzc17lRTI2b1nMMk4Ab725Uhej1h3 eCmS7sGLkDyfx3KEQAqG1vowPs6SVsaO93q3WblfgAwiQQIgJb4FDAEOEhhnrJBZ 2VjUrm0= -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:35 2026 by rpki-client