This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/vAK4daozNSO59AKfeMnlfBD0uBI.roa File: vAK4daozNSO59AKfeMnlfBD0uBI.roa (raw, json) Hash identifier: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw= Subject key identifier: BC:02:B8:75:AA:33:35:23:B9:F4:02:9F:78:C9:E5:7C:10:F4:B8:12 Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Certificate serial: 019B7AC86515E797DCA896018F8A1807B8A1 Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/vAK4daozNSO59AKfeMnlfBD0uBI.roa Signing time: Thu 01 Jan 2026 18:18:31 +0000 ROA not before: Thu 01 Jan 2026 18:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20115 IP address blocks: 81.31.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:65:15:e7:97:dc:a8:96:01:8f:8a:18:07:b8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc02b875aa333523b9f4029f78c9e57c10f4b812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:81:a4:af:ac:a0:4c:94:86:00:49:ad:3b: b5:22:ac:d0:85:f1:89:b2:20:6a:4f:7a:45:35:72: 96:7e:8e:13:ec:44:77:bb:21:d2:59:80:ac:5e:ef: b4:c5:a7:d4:fd:46:df:5a:13:6b:df:22:fe:59:10: 68:5b:70:46:a2:bf:44:f8:b7:7a:20:63:09:a1:22: 2f:28:9d:40:fb:3e:3c:9f:be:c8:a1:1b:6f:40:90: 96:32:e9:c1:91:d6:28:fc:ef:18:d6:dd:97:6c:3c: 12:ef:fa:b4:5a:05:ab:ed:22:bf:1c:05:e5:1e:26: 3c:34:e4:c0:81:94:e0:f0:43:74:e3:3b:2f:3a:fa: 30:a6:21:e7:94:5f:7c:94:42:c0:23:32:b7:d1:7b: 5e:67:63:36:2e:6c:27:98:0e:35:e1:68:f2:31:61: 5a:c7:18:bf:34:6b:af:3d:a0:c8:eb:16:87:32:29: d7:6c:61:d9:fa:b2:a5:26:89:dc:c5:17:15:80:07: de:9f:f2:10:d9:4b:94:1b:4c:3a:be:91:b0:d4:08: e4:ed:ce:4b:00:df:64:0d:1c:15:0a:1f:8e:81:93: 04:ea:60:c3:e1:f3:f8:f9:de:1e:ef:a2:eb:84:8f: 93:e7:30:57:d9:bf:af:7b:e4:c3:11:91:b6:85:fa: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:02:B8:75:AA:33:35:23:B9:F4:02:9F:78:C9:E5:7C:10:F4:B8:12 X509v3 Authority Key Identifier: keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/vAK4daozNSO59AKfeMnlfBD0uBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.128.0/20 Signature Algorithm: sha256WithRSAEncryption 58:96:35:88:45:29:78:c9:66:fe:1b:56:49:d5:44:69:7d:d3: 02:76:7c:bb:e7:37:64:bb:7b:bb:55:e4:a6:66:27:2a:46:96: e1:90:ed:59:f0:f5:e5:4c:3c:51:80:13:49:d1:72:19:48:1e: 1a:e9:4c:55:aa:29:9e:eb:c1:af:11:a2:e9:17:b7:71:4c:45: 26:02:df:ad:03:30:71:5a:05:1f:99:99:67:9c:7c:a7:49:c9: f8:f4:0e:ca:09:60:88:9c:75:1e:9e:ce:36:ef:9d:d0:e0:49: 04:0d:7b:aa:c9:ac:40:5c:ed:d3:bb:37:ff:30:18:cd:31:17: d8:d5:4d:06:fa:65:ce:8d:b1:74:e9:5d:48:14:9d:2e:5a:37: 1a:b0:bd:83:a9:58:e8:8b:e4:93:44:27:a7:c5:6e:b3:c7:7c: 70:40:36:fd:97:a9:6c:ff:a6:0c:30:40:7e:03:fc:38:9b:41: e9:00:b6:cb:86:e8:45:56:54:e4:19:cd:e7:ec:6f:ec:db:73: 13:65:75:cd:a6:74:e7:d3:5e:28:c6:a8:4c:00:0e:05:69:cf: b7:c8:1f:b3:4d:40:8d:1d:85:98:19:72:bc:b0:bb:60:67:08: 93:71:52:8d:98:d6:e2:0b:94:00:df:14:7e:f4:e0:d9:7b:94: 7c:cd:45:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGUV55fcqJYBj4oYB7ihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MjNhNWJlNWUyMWNhNDYwNzMyYWU0OGYzODVhM2VhMTUw YTJiZTEwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzAyYjg3NWFhMzMzNTIzYjlmNDAyOWY3OGM5ZTU3YzEwZjRiODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQOBpK+soEyUhgBJrTu1IqzQhfGJ siBqT3pFNXKWfo4T7ER3uyHSWYCsXu+0xafU/UbfWhNr3yL+WRBoW3BGor9E+Ld6 IGMJoSIvKJ1A+z48n77IoRtvQJCWMunBkdYo/O8Y1t2XbDwS7/q0WgWr7SK/HAXl HiY8NOTAgZTg8EN04zsvOvowpiHnlF98lELAIzK30XteZ2M2LmwnmA414WjyMWFa xxi/NGuvPaDI6xaHMinXbGHZ+rKlJoncxRcVgAfen/IQ2UuUG0w6vpGw1Ajk7c5L AN9kDRwVCh+OgZME6mDD4fP4+d4e76LrhI+T5zBX2b+ve+TDEZG2hfoF2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwCuHWqMzUjufQCn3jJ5XwQ9LgSMB8GA1UdIwQY MBaAFNQjpb5eIcpGBzKuSPOFo+oVCivhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2It ZDk0NzY2NjU3NTVhLzEvdkFLNGRhb3pOU081OUFLZmVNbmxmQkQwdUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hM2UzYmItZmQ5Zi00MDQyLWIyY2ItZDk0NzY2NjU3NTVh LzEvMUNPbHZsNGh5a1lITXE1STg0V2o2aFVLSy1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUR+AMA0G CSqGSIb3DQEBCwUAA4IBAQBYljWIRSl4yWb+G1ZJ1URpfdMCdny75zdku3u7VeSm ZicqRpbhkO1Z8PXlTDxRgBNJ0XIZSB4a6UxVqime68GvEaLpF7dxTEUmAt+tAzBx WgUfmZlnnHynScn49A7KCWCInHUens42753Q4EkEDXuqyaxAXO3Tuzf/MBjNMRfY 1U0G+mXOjbF06V1IFJ0uWjcasL2DqVjoi+STRCenxW6zx3xwQDb9l6ls/6YMMEB+ A/w4m0HpALbLhuhFVlTkGc3n7G/s23MTZXXNpnTn014oxqhMAA4Fac+3yB+zTUCN HYWYGXK8sLtgZwiTcVKNmNbiC5QA3xR+9ODZe5R8zUV7 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:29 2026 by rpki-client