This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VKIMTCjhhU8haReTBtAUWrVqtpQ.roa File: VKIMTCjhhU8haReTBtAUWrVqtpQ.roa (raw, json) Hash identifier: KExXNsHr488nZD5o9WdSxyIxWH+3dcM+5HOZQ/bFWxg= Subject key identifier: 54:A2:0C:4C:28:E1:85:4F:21:69:17:93:06:D0:14:5A:B5:6A:B6:94 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CDA2310440D044F90AC50084689FC Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VKIMTCjhhU8haReTBtAUWrVqtpQ.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198219 IP address blocks: 2a0e:97c0:ab0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:da:23:10:44:0d:04:4f:90:ac:50:08:46:89:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54a20c4c28e1854f2169179306d0145ab56ab694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:ae:67:3f:dd:c5:57:9e:a6:08:de:da:05: 99:09:1b:b4:32:c7:0e:4e:c1:9d:f9:19:d3:9a:65: b2:af:23:67:df:db:9e:5f:e2:62:3b:d7:1e:2d:ae: e8:cd:72:44:ec:5b:9b:14:ea:ee:73:35:12:b7:02: 7c:e3:54:fe:f5:4e:4c:d8:7a:4e:71:fa:ad:8a:b2: 97:c6:11:11:84:5b:f6:b5:af:fa:51:aa:33:a4:c6: 81:67:a5:f3:55:67:96:88:09:4f:1f:3f:47:9d:45: ca:0b:96:8b:65:42:e9:08:bc:c2:40:94:c4:d2:3c: 9d:a0:ca:13:39:25:d4:bd:f3:68:82:07:3d:07:8d: e0:8d:a0:85:95:b5:ad:47:87:75:0a:78:c1:97:ae: 73:5a:2a:47:d2:22:b9:f6:79:54:01:b2:c1:fe:04: 73:6a:c9:e9:7c:91:5e:e7:bd:6d:4f:05:8a:40:b1: d2:e0:2d:a8:30:91:95:83:af:83:8e:f4:c3:cc:be: b9:ef:b5:d2:15:92:11:42:1b:d4:0c:22:a5:19:6f: 40:ec:25:00:25:99:48:bb:cc:d4:02:39:2c:7c:64: 61:38:c3:e0:a1:fb:b1:1e:f2:f0:2e:de:4e:45:f7: 5f:fa:e4:a9:38:6e:f8:5d:b7:37:e8:df:e8:9a:28: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A2:0C:4C:28:E1:85:4F:21:69:17:93:06:D0:14:5A:B5:6A:B6:94 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VKIMTCjhhU8haReTBtAUWrVqtpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:ab0::/44 Signature Algorithm: sha256WithRSAEncryption 02:cc:98:d3:78:fb:64:a2:69:4e:3d:69:bc:f3:fe:9d:3f:c2: ce:69:fc:69:d8:23:a6:be:2a:17:fc:03:b3:99:65:70:ac:f1: 82:8c:85:92:70:9a:43:6c:e7:b0:9c:a3:e4:7f:59:54:53:c0: 6c:18:bf:76:e9:47:79:7a:5c:3d:61:09:cb:45:b4:bd:c0:ef: ac:96:77:a0:58:e9:d4:98:fa:7f:65:f0:c7:33:20:73:ce:13: c3:f6:6b:d2:54:b2:38:22:21:f0:da:df:df:fd:b3:2d:62:e1: 6a:18:8b:72:ec:75:2f:dc:94:7b:5e:5a:7b:33:27:c1:3d:27: 10:ae:b2:7b:ee:e6:27:ff:d4:80:36:11:90:c2:4b:6b:f4:fa: c2:ef:c7:5c:0b:cb:e2:fa:45:7c:fd:20:de:f2:1a:74:ba:a9: 39:9e:74:97:0b:b0:bd:5c:96:95:a7:ba:b0:c9:9f:75:d8:94: f8:6d:6e:47:2c:ce:8d:e8:01:71:1e:93:62:24:26:37:a6:da: b7:b9:e3:e3:28:4c:c5:9e:ff:87:e2:b8:8b:36:ed:53:4e:3e: 89:f5:4d:c5:ad:31:30:12:92:ec:30:de:42:0a:5e:65:eb:32: f7:78:42:09:62:89:8e:e5:c2:83:65:7a:bb:13:73:da:91:55: c2:99:53:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNojEEQNBE+QrFAIRon8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGEyMGM0YzI4ZTE4NTRmMjE2OTE3OTMwNmQwMTQ1YWI1NmFiNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sSuZz/dxVeepgje2gWZCRu0MscO TsGd+RnTmmWyryNn39ueX+JiO9ceLa7ozXJE7FubFOruczUStwJ841T+9U5M2HpO cfqtirKXxhERhFv2ta/6UaozpMaBZ6XzVWeWiAlPHz9HnUXKC5aLZULpCLzCQJTE 0jydoMoTOSXUvfNoggc9B43gjaCFlbWtR4d1CnjBl65zWipH0iK59nlUAbLB/gRz asnpfJFe571tTwWKQLHS4C2oMJGVg6+DjvTDzL6577XSFZIRQhvUDCKlGW9A7CUA JZlIu8zUAjksfGRhOMPgofuxHvLwLt5ORfdf+uSpOG74Xbc36N/omii+jQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFSiDEwo4YVPIWkXkwbQFFq1araUMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVktJTVRDamhoVThoYVJlVEJ0QVVXclZxdHBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAqw MA0GCSqGSIb3DQEBCwUAA4IBAQACzJjTePtkomlOPWm88/6dP8LOafxp2COmvioX /AOzmWVwrPGCjIWScJpDbOewnKPkf1lUU8BsGL926Ud5elw9YQnLRbS9wO+slneg WOnUmPp/ZfDHMyBzzhPD9mvSVLI4IiHw2t/f/bMtYuFqGIty7HUv3JR7Xlp7MyfB PScQrrJ77uYn/9SANhGQwktr9PrC78dcC8vi+kV8/SDe8hp0uqk5nnSXC7C9XJaV p7qwyZ912JT4bW5HLM6N6AFxHpNiJCY3ptq3uePjKEzFnv+H4riLNu1TTj6J9U3F rTEwEpLsMN5CCl5l6zL3eEIJYomO5cKDZXq7E3PakVXCmVPN -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:48 2026 by rpki-client