This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/vtKzvBvjetkU5WA6Y25cAJBYCOI.roa File: vtKzvBvjetkU5WA6Y25cAJBYCOI.roa (raw, json) Hash identifier: Vkh0B0/3gyxmhDaxonoanwkQPVqR6BgCPbSb6ryc6sI= Subject key identifier: BE:D2:B3:BC:1B:E3:7A:D9:14:E5:60:3A:63:6E:5C:00:90:58:08:E2 Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387 Certificate serial: 019A77796C57F218826D30F3F0F0A8DE7A34 Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/vtKzvBvjetkU5WA6Y25cAJBYCOI.roa Signing time: Wed 12 Nov 2025 09:50:37 +0000 ROA not before: Wed 12 Nov 2025 09:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20546 IP address blocks: 2a00:1f08:400d::/48 maxlen: 48 2a00:1f08:403c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:79:6c:57:f2:18:82:6d:30:f3:f0:f0:a8:de:7a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387 Validity Not Before: Nov 12 09:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bed2b3bc1be37ad914e5603a636e5c00905808e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:5e:df:3f:af:c7:94:c2:57:f1:61:e0:c9: 39:eb:0f:44:03:05:a5:7c:3b:3e:5d:67:2d:d2:d3: ea:df:d7:4a:03:fd:d5:e7:ea:1f:c6:db:61:e5:91: 92:8a:96:f6:b6:a1:ad:05:a2:42:fc:e3:0a:9f:de: ac:e8:dc:ce:ce:89:98:16:a5:69:ec:1b:75:9f:43: e2:bc:16:5f:72:ce:73:5e:5d:05:23:e3:b3:75:52: cd:3d:59:ad:51:ee:0b:81:8a:a0:e5:77:e9:0f:f3: ef:f4:52:8a:5a:e5:e5:0a:ba:98:88:d4:b3:f7:35: 8f:f6:1d:14:12:39:fa:7d:33:0c:e3:89:bb:c7:b5: d5:d0:b0:69:f2:fd:c6:fa:d0:59:52:4a:90:fa:41: cc:d2:a5:16:ef:ba:d5:17:1c:56:a0:f9:30:3e:5a: 84:97:79:fb:cc:22:63:6f:45:b3:d8:5c:bd:69:26: 44:54:40:2c:32:28:28:c7:ed:f2:25:5b:e4:70:8a: 8f:66:0d:21:2d:e0:bb:87:a3:ea:ba:98:88:f1:34: 45:82:cb:18:c8:78:b2:bb:51:01:de:3e:6c:68:44: 4d:f1:cc:15:7f:41:4b:40:b1:2b:35:e3:77:db:48: 79:01:48:d2:f7:c2:8b:85:25:db:ff:1f:0e:6d:f0: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:B3:BC:1B:E3:7A:D9:14:E5:60:3A:63:6E:5C:00:90:58:08:E2 X509v3 Authority Key Identifier: keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/vtKzvBvjetkU5WA6Y25cAJBYCOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1f08:400d::/48 2a00:1f08:403c::/48 Signature Algorithm: sha256WithRSAEncryption 29:01:4a:f5:ee:fd:cf:a3:67:11:e6:25:da:59:8a:9f:50:3f: 56:e3:70:15:d8:35:95:63:e8:39:4e:f5:69:2e:1e:4e:69:36: 62:f5:6d:ca:6b:7d:09:01:db:bd:ad:ca:8c:2f:07:2f:9b:4a: 86:5a:b7:85:14:41:25:40:f5:81:10:1b:73:e7:9a:a8:44:00: 13:56:90:cb:ae:cb:df:ea:a1:60:af:42:42:bb:f1:1e:7a:88: 97:78:02:14:f1:24:7f:64:c1:b5:84:fc:04:ca:48:84:6f:ff: 79:eb:76:5f:8b:aa:d6:4c:2b:1d:01:ab:80:de:32:a5:c5:e4: 34:a6:95:9d:11:ac:37:35:50:e2:fe:92:62:db:54:a9:a7:6a: 57:f8:b2:d1:03:c1:f7:58:76:24:04:01:54:fb:64:bb:76:cc: 7c:03:b6:bb:3f:c8:a1:53:32:30:10:36:14:63:e9:b1:56:46: 5d:82:81:c2:04:4f:b2:44:a9:4c:01:12:20:fc:28:e7:68:14: a7:9f:e3:96:bd:6a:fa:99:ad:69:c0:15:02:7e:6e:99:db:2d: 2b:ed:6f:21:ee:3a:2c:2c:de:96:52:02:f5:2b:0f:e9:87:06: 59:dc:f0:7f:3f:f3:ed:0b:9b:db:e0:c1:d5:c0:c1:b8:3a:93: d3:69:41:82 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp3eWxX8hiCbTDz8PCo3no0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYTU2YzQyZWQ3Y2I5NjNmMjg1NTAzY2VjMDYwNmQ2MGQw YWIzODcwHhcNMjUxMTEyMDk1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWQyYjNiYzFiZTM3YWQ5MTRlNTYwM2E2MzZlNWMwMDkwNTgwOGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmde3z+vx5TCV/Fh4Mk56w9EAwWl fDs+XWct0tPq39dKA/3V5+ofxtth5ZGSipb2tqGtBaJC/OMKn96s6NzOzomYFqVp 7Bt1n0PivBZfcs5zXl0FI+OzdVLNPVmtUe4LgYqg5XfpD/Pv9FKKWuXlCrqYiNSz 9zWP9h0UEjn6fTMM44m7x7XV0LBp8v3G+tBZUkqQ+kHM0qUW77rVFxxWoPkwPlqE l3n7zCJjb0Wz2Fy9aSZEVEAsMigox+3yJVvkcIqPZg0hLeC7h6PqupiI8TRFgssY yHiyu1EB3j5saERN8cwVf0FLQLErNeN320h5AUjS98KLhSXb/x8ObfDFYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL7Ss7wb43rZFOVgOmNuXACQWAjiMB8GA1UdIwQY MBaAFAGlbELtfLlj8oVQPOwGBtYNCrOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMt ZWQwN2Y1Y2FkNmQ3LzEvdnRLenZCdmpldGtVNVdBNlkyNWNBSkJZQ09JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMtZWQwN2Y1Y2FkNmQ3 LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgAfCEAN AwcAKgAfCEA8MA0GCSqGSIb3DQEBCwUAA4IBAQApAUr17v3Po2cR5iXaWYqfUD9W 43AV2DWVY+g5TvVpLh5OaTZi9W3Ka30JAdu9rcqMLwcvm0qGWreFFEElQPWBEBtz 55qoRAATVpDLrsvf6qFgr0JCu/EeeoiXeAIU8SR/ZMG1hPwEykiEb/9563Zfi6rW TCsdAauA3jKlxeQ0ppWdEaw3NVDi/pJi21Spp2pX+LLRA8H3WHYkBAFU+2S7dsx8 A7a7P8ihUzIwEDYUY+mxVkZdgoHCBE+yRKlMARIg/CjnaBSnn+OWvWr6ma1pwBUC fm6Z2y0r7W8h7josLN6WUgL1Kw/phwZZ3PB/P/PtC5vb4MHVwMG4OpPTaUGC -----END CERTIFICATE-----Generated at Fri Dec 12 11:51:18 2025 by rpki-client