This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/VPTnxDq1yxj21KAMEyNJXCnV97k.roa File: VPTnxDq1yxj21KAMEyNJXCnV97k.roa (raw, json) Hash identifier: oMhWVkQ76OyXPdwoLbpkiQAp4FEu2WM8nljd52fsJxE= Subject key identifier: 54:F4:E7:C4:3A:B5:CB:18:F6:D4:A0:0C:13:23:49:5C:29:D5:F7:B9 Certificate issuer: /CN=f51977aa2277725ed10eb5674d5da1d6622f41b7 Certificate serial: 019ABB86A7655BB5BA1AEA57DBB1747F2842 Authority key identifier: F5:19:77:AA:22:77:72:5E:D1:0E:B5:67:4D:5D:A1:D6:62:2F:41:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/VPTnxDq1yxj21KAMEyNJXCnV97k.roa Signing time: Tue 25 Nov 2025 14:59:15 +0000 ROA not before: Tue 25 Nov 2025 14:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48543 IP address blocks: 91.199.21.0/24 maxlen: 24 91.222.232.0/22 maxlen: 22 94.126.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:86:a7:65:5b:b5:ba:1a:ea:57:db:b1:74:7f:28:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51977aa2277725ed10eb5674d5da1d6622f41b7 Validity Not Before: Nov 25 14:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54f4e7c43ab5cb18f6d4a00c1323495c29d5f7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:19:be:93:78:23:05:a0:a5:74:bb:50:af: 79:81:da:1b:81:e5:23:ad:b7:6e:ce:1f:60:1f:86: cb:e4:f4:cd:79:ca:b9:95:93:8c:b5:f4:f4:3e:63: 42:58:de:80:be:db:c3:11:2d:03:63:e9:d1:82:b3: 08:9a:64:ae:e3:09:50:5e:84:33:55:0c:31:0e:15: 79:5e:c5:05:16:cc:4f:26:8a:39:d6:10:bb:72:ff: d1:50:2e:91:2c:95:67:5a:6d:fe:6b:1a:9e:e5:d1: 4e:a9:e0:f3:67:9d:3c:a9:94:39:44:19:8d:a8:cc: 4a:7d:5b:85:89:e6:b5:e4:10:a2:2e:31:f6:cd:bd: da:d0:74:f7:d3:4e:74:ac:53:30:27:3f:46:66:20: 49:a4:d9:fc:ea:22:16:4a:80:df:31:e9:0f:32:1e: 40:34:56:12:87:fc:46:c4:04:13:70:e2:3a:20:8d: 42:50:ca:8a:3c:b6:f8:60:67:2b:c1:c7:33:c1:d6: 08:4e:d1:bf:d7:f1:61:cc:1b:54:80:6c:a6:3b:f3: a5:e8:23:25:78:88:75:01:ae:62:a6:89:89:44:22: 21:e0:dd:78:6e:6c:78:e5:7d:3b:9c:70:6c:d5:31: 11:b0:b7:1c:b1:b4:56:e1:c2:46:fe:86:5a:a7:35: d6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F4:E7:C4:3A:B5:CB:18:F6:D4:A0:0C:13:23:49:5C:29:D5:F7:B9 X509v3 Authority Key Identifier: keyid:F5:19:77:AA:22:77:72:5E:D1:0E:B5:67:4D:5D:A1:D6:62:2F:41:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/VPTnxDq1yxj21KAMEyNJXCnV97k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.21.0/24 91.222.232.0/22 94.126.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:c2:04:81:79:58:a7:96:78:af:3e:95:27:9d:94:80:b2:b0: b5:21:84:02:fa:6a:12:32:d0:bc:90:f6:21:ef:c6:27:25:71: 7a:89:bb:23:bf:a0:60:db:29:cb:2e:4f:47:09:b5:83:00:8a: 02:33:9c:64:f4:c0:e7:53:91:73:a4:df:4f:64:bc:61:fc:94: 5e:fd:3d:b3:7f:c7:67:6f:c2:79:ad:27:87:3f:08:f6:1e:73: 7d:03:7a:97:b8:a6:59:8d:b5:f8:ab:1e:45:c6:99:90:ec:f7: 00:2d:fb:87:8d:e8:7c:41:b5:27:21:44:95:c3:ab:3c:20:c3: a9:b2:99:cf:2a:79:6e:9c:84:0f:2d:5b:f5:c4:0c:62:ae:ff: 02:e8:f9:2b:eb:38:f2:03:9a:1e:28:1a:96:11:a9:d9:74:5c: b9:2c:53:cf:4d:39:f7:ac:95:02:54:c1:50:9e:a4:0d:7a:1e: 30:d1:38:17:29:be:af:7c:c3:4c:fb:6a:50:ca:98:5b:45:83: 13:58:41:23:09:34:18:a9:bd:69:cc:44:3d:38:21:37:65:41: 35:68:76:0a:ce:34:d7:3e:ee:59:87:d9:59:c8:0d:4e:ad:6d: 6d:5b:f9:b3:9d:da:a0:d9:a0:5c:3d:9a:1d:58:9f:ae:2c:cc: 54:04:67:db -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq7hqdlW7W6GupX27F0fyhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTk3N2FhMjI3NzcyNWVkMTBlYjU2NzRkNWRhMWQ2NjIy ZjQxYjcwHhcNMjUxMTI1MTQ1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGY0ZTdjNDNhYjVjYjE4ZjZkNGEwMGMxMzIzNDk1YzI5ZDVmN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt4ZvpN4IwWgpXS7UK95gdobgeUj rbduzh9gH4bL5PTNecq5lZOMtfT0PmNCWN6AvtvDES0DY+nRgrMImmSu4wlQXoQz VQwxDhV5XsUFFsxPJoo51hC7cv/RUC6RLJVnWm3+axqe5dFOqeDzZ508qZQ5RBmN qMxKfVuFiea15BCiLjH2zb3a0HT30050rFMwJz9GZiBJpNn86iIWSoDfMekPMh5A NFYSh/xGxAQTcOI6II1CUMqKPLb4YGcrwcczwdYITtG/1/FhzBtUgGymO/Ol6CMl eIh1Aa5ipomJRCIh4N14bmx45X07nHBs1TERsLccsbRW4cJG/oZapzXWQQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFT058Q6tcsY9tSgDBMjSVwp1fe5MB8GA1UdIwQY MBaAFPUZd6oid3Je0Q61Z01dodZiL0G3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80NmVlYzEtODZlMy00NzliLTkzY2Yt MTAzNWRjYzlkNDg5LzEvVlBUbnhEcTF5eGoyMUtBTUV5TkpYQ25WOTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80NmVlYzEtODZlMy00NzliLTkzY2YtMTAzNWRjYzlkNDg5 LzEvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8cVAwQC W97oAwQDXn5IMA0GCSqGSIb3DQEBCwUAA4IBAQAewgSBeVinlnivPpUnnZSAsrC1 IYQC+moSMtC8kPYh78YnJXF6ibsjv6Bg2ynLLk9HCbWDAIoCM5xk9MDnU5FzpN9P ZLxh/JRe/T2zf8dnb8J5rSeHPwj2HnN9A3qXuKZZjbX4qx5FxpmQ7PcALfuHjeh8 QbUnIUSVw6s8IMOpspnPKnlunIQPLVv1xAxirv8C6Pkr6zjyA5oeKBqWEanZdFy5 LFPPTTn3rJUCVMFQnqQNeh4w0TgXKb6vfMNM+2pQyphbRYMTWEEjCTQYqb1pzEQ9 OCE3ZUE1aHYKzjTXPu5Zh9lZyA1OrW1tW/mzndqg2aBcPZodWJ+uLMxUBGfb -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:47 2025 by rpki-client