This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/vk8AdaRmwdGEey0-KpqMAa5y-4s.roa File: vk8AdaRmwdGEey0-KpqMAa5y-4s.roa (raw, json) Hash identifier: gP9M2HbDQuUF4XHqQmNFAfst7z43j3AWmXSU5dk3Lk4= Subject key identifier: BE:4F:00:75:A4:66:C1:D1:84:7B:2D:3E:2A:9A:8C:01:AE:72:FB:8B Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105B502EBED0F124EE14B03FEC32B4 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/vk8AdaRmwdGEey0-KpqMAa5y-4s.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48925 IP address blocks: 62.233.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5b:50:2e:be:d0:f1:24:ee:14:b0:3f:ec:32:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be4f0075a466c1d1847b2d3e2a9a8c01ae72fb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:6b:3f:b3:c2:90:2b:65:d2:52:e0:eb:44: 8a:d0:ab:23:0e:06:4d:eb:17:20:b8:60:64:21:b2: e3:3a:f6:9d:43:ac:4a:17:34:67:65:25:c1:bb:6d: d9:44:1b:02:b0:ed:b7:d4:ae:66:78:3b:7f:b1:9a: 35:e8:9f:3f:6c:04:be:d9:b8:48:9e:9a:08:c8:7d: 14:f7:c9:46:9f:23:65:55:11:cb:c1:82:22:21:e6: ab:55:5c:b1:01:02:6b:4c:80:05:f0:7d:f9:a5:18: a7:ed:87:e5:77:5f:56:6d:a3:6a:5f:a7:6d:61:e1: 26:ca:fb:f3:67:19:cd:79:79:77:6d:ac:fa:2d:54: 28:98:a7:00:67:38:9b:48:64:88:a1:f6:6f:af:c3: c6:77:7d:ad:7e:2c:9f:51:65:75:91:9e:92:02:cd: 84:1e:74:2e:82:80:79:67:32:d0:69:0f:98:a0:bc: a8:d4:f3:f3:34:e8:a6:4e:e2:a4:a9:d5:0a:c1:76: da:2d:24:43:5d:00:7b:ec:6a:43:a1:a9:dd:25:62: b9:1d:96:27:a3:2f:08:9c:62:5f:46:1f:c1:f3:62: a1:06:09:36:07:5d:6a:76:45:e1:08:60:02:23:2f: 5c:8c:90:d2:5c:f2:00:a6:0c:e3:82:92:4f:b2:49: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4F:00:75:A4:66:C1:D1:84:7B:2D:3E:2A:9A:8C:01:AE:72:FB:8B X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/vk8AdaRmwdGEey0-KpqMAa5y-4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.233.59.0/24 Signature Algorithm: sha256WithRSAEncryption 77:49:fb:18:4d:a4:8d:68:0d:bd:a7:a0:68:ea:0c:9d:82:86: b0:4b:97:59:60:e9:25:36:19:46:56:09:c4:80:15:d3:68:be: cd:fb:b7:75:30:9b:09:65:0f:77:70:74:ef:22:f6:6e:90:25: e6:a0:ef:e8:9e:77:dd:f7:00:a9:7a:fa:cc:2e:c0:d4:04:89: 1e:1a:1b:15:7a:88:e7:f2:f8:1c:9b:40:41:46:31:41:e0:78: ad:1e:31:8e:c5:b4:3f:de:77:8b:50:a7:ab:e7:31:6b:2e:b9: 73:2a:8e:d3:69:27:03:83:96:cb:f7:55:7f:65:cf:8f:bd:63: 28:5c:f6:f3:c4:86:21:0f:f3:b8:3a:99:2d:b6:e5:9a:74:23: 78:51:03:a6:58:1a:47:74:23:3a:bf:74:a6:a8:7d:5b:98:49: 71:05:e2:64:27:f5:04:38:43:62:93:cc:98:66:0e:1f:56:5c: b8:9f:6b:b6:8e:ac:67:cc:d8:85:d1:bb:28:a5:4b:66:5e:ec: 59:8b:6f:cf:2e:89:55:fc:f0:cf:35:b5:a0:a0:57:b6:0e:c2: 37:91:b9:bd:0f:91:ae:6e:3e:de:71:26:bb:c2:b7:d1:06:53: 13:6e:fc:a7:2d:61:35:18:5d:f9:b5:2f:9d:a9:e5:99:7c:28: c1:75:71:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFtQLr7Q8STuFLA/7DK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTRmMDA3NWE0NjZjMWQxODQ3YjJkM2UyYTlhOGMwMWFlNzJmYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwZrP7PCkCtl0lLg60SK0KsjDgZN 6xcguGBkIbLjOvadQ6xKFzRnZSXBu23ZRBsCsO231K5meDt/sZo16J8/bAS+2bhI npoIyH0U98lGnyNlVRHLwYIiIearVVyxAQJrTIAF8H35pRin7Yfld19WbaNqX6dt YeEmyvvzZxnNeXl3baz6LVQomKcAZzibSGSIofZvr8PGd32tfiyfUWV1kZ6SAs2E HnQugoB5ZzLQaQ+YoLyo1PPzNOimTuKkqdUKwXbaLSRDXQB77GpDoandJWK5HZYn oy8InGJfRh/B82KhBgk2B11qdkXhCGACIy9cjJDSXPIApgzjgpJPskkVQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5PAHWkZsHRhHstPiqajAGucvuLMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvdms4QWRhUm13ZEdFZXkwLUtwcU1BYTV5LTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuk7MA0G CSqGSIb3DQEBCwUAA4IBAQB3SfsYTaSNaA29p6Bo6gydgoawS5dZYOklNhlGVgnE gBXTaL7N+7d1MJsJZQ93cHTvIvZukCXmoO/onnfd9wCpevrMLsDUBIkeGhsVeojn 8vgcm0BBRjFB4HitHjGOxbQ/3neLUKer5zFrLrlzKo7TaScDg5bL91V/Zc+PvWMo XPbzxIYhD/O4OpkttuWadCN4UQOmWBpHdCM6v3SmqH1bmElxBeJkJ/UEOENik8yY Zg4fVly4n2u2jqxnzNiF0bsopUtmXuxZi2/PLolV/PDPNbWgoFe2DsI3kbm9D5Gu bj7ecSa7wrfRBlMTbvynLWE1GF35tS+dqeWZfCjBdXFa -----END CERTIFICATE-----Generated at Mon Jan 19 18:02:09 2026 by rpki-client