This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa File: vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa (raw, json) Hash identifier: 936PpJYOLKkKzEDTt3gNFk26BfcHqznMHt6CO1ILfRY= Subject key identifier: BD:39:2E:5C:FD:4B:8F:48:60:B0:9D:A4:6F:43:2B:E2:F8:52:1C:1E Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B78A22E31CD08C26C4ABF765CD91639A6 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50448 IP address blocks: 5.10.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2e:31:cd:08:c2:6c:4a:bf:76:5c:d9:16:39:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd392e5cfd4b8f4860b09da46f432be2f8521c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:9f:da:fe:9e:86:c8:d1:c8:bf:0f:13:74: 48:7b:dc:f2:09:d6:b6:2c:53:e0:68:40:cc:8d:79: b1:84:c6:05:1e:ce:a1:bc:aa:0c:77:a4:2f:75:2d: 91:1f:54:e1:84:ea:36:51:9f:68:d9:98:c0:fa:89: fa:10:06:2e:ce:71:5f:f9:4a:ff:15:5a:1a:f0:2c: 4d:4b:ba:e6:24:51:e3:b8:ea:4b:f9:8a:2d:85:38: e5:58:50:70:25:b3:97:dd:77:1d:ee:d3:48:07:9e: 50:be:fa:da:3f:a3:13:ae:cb:60:a3:e0:0a:e9:00: 76:02:fb:1c:f1:e7:52:8b:c5:88:8b:bc:36:b7:f5: 33:dd:57:21:8f:94:d3:fc:23:a0:5f:61:18:13:8c: bc:4e:23:cc:ee:46:31:88:dd:02:04:b0:9a:ee:d7: 0d:9e:fe:0e:1a:45:f6:e5:6c:fc:63:5e:31:7f:4b: f7:01:9c:1f:8b:8f:af:49:18:76:a5:b8:e9:d2:49: 39:a6:34:7e:95:54:fd:7b:68:c6:b8:0b:1a:34:8f: e5:a0:39:b3:15:f6:bc:b9:4b:16:a9:36:88:4c:24: 03:5d:f6:86:66:63:ce:d1:96:f9:30:2c:de:f2:e7: 0c:10:0e:57:5a:4a:37:c0:55:be:ee:6f:f8:35:e6: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:39:2E:5C:FD:4B:8F:48:60:B0:9D:A4:6F:43:2B:E2:F8:52:1C:1E X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/vTkuXP1Lj0hgsJ2kb0Mr4vhSHB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.221.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:72:a2:6c:bf:18:02:e8:94:c1:dc:8d:1d:bd:9a:cb:03:90: 26:f4:b8:b3:d0:75:5e:5e:09:32:14:da:45:3d:4a:cf:ca:ef: 57:b9:e0:c2:4f:58:14:73:81:26:2e:c6:75:b9:bb:d4:4f:40: ae:b2:20:bc:59:a4:16:84:ae:e0:01:8c:cc:01:f7:bc:71:bc: c3:96:81:c1:e8:41:19:f9:65:ad:66:29:5f:be:87:e0:1e:2b: 0c:81:06:5b:37:74:b5:a4:7b:2c:e1:d8:82:ea:e4:6c:3b:d3: 0c:12:25:3c:17:ac:00:ea:06:2b:c9:8b:32:85:81:6e:e9:8a: 00:10:d1:44:21:16:e5:76:fc:09:8f:b6:91:49:7e:cc:e5:2d: fc:69:e7:f5:31:aa:03:3d:d7:0a:59:57:19:e4:24:cd:c6:10: da:00:b7:b9:ba:16:13:5e:8c:62:67:11:2a:75:e7:1b:96:9f: 5e:8b:bc:46:9e:f4:28:f8:9c:b2:e4:53:32:68:8d:09:ce:ba: be:b0:97:71:c7:e8:3d:77:64:91:b2:f4:1a:e9:6a:40:8a:1a: 73:27:2d:73:ba:ba:5a:7e:e3:44:be:be:12:ea:1d:cb:6f:17: 0e:5e:06:5a:00:2b:18:36:db:a7:e2:b5:c4:aa:c8:99:26:40: 1d:fd:b6:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi4xzQjCbEq/dlzZFjmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDM5MmU1Y2ZkNGI4ZjQ4NjBiMDlkYTQ2ZjQzMmJlMmY4NTIxYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXuf2v6ehsjRyL8PE3RIe9zyCda2 LFPgaEDMjXmxhMYFHs6hvKoMd6QvdS2RH1ThhOo2UZ9o2ZjA+on6EAYuznFf+Ur/ FVoa8CxNS7rmJFHjuOpL+YothTjlWFBwJbOX3Xcd7tNIB55QvvraP6MTrstgo+AK 6QB2Avsc8edSi8WIi7w2t/Uz3Vchj5TT/COgX2EYE4y8TiPM7kYxiN0CBLCa7tcN nv4OGkX25Wz8Y14xf0v3AZwfi4+vSRh2pbjp0kk5pjR+lVT9e2jGuAsaNI/loDmz Ffa8uUsWqTaITCQDXfaGZmPO0Zb5MCze8ucMEA5XWko3wFW+7m/4NeZIRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL05Llz9S49IYLCdpG9DK+L4UhweMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvdlRrdVhQMUxqMGhnc0oya2IwTXI0dmhTSEI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQrdMA0G CSqGSIb3DQEBCwUAA4IBAQBLcqJsvxgC6JTB3I0dvZrLA5Am9Liz0HVeXgkyFNpF PUrPyu9XueDCT1gUc4EmLsZ1ubvUT0CusiC8WaQWhK7gAYzMAfe8cbzDloHB6EEZ +WWtZilfvofgHisMgQZbN3S1pHss4diC6uRsO9MMEiU8F6wA6gYryYsyhYFu6YoA ENFEIRbldvwJj7aRSX7M5S38aef1MaoDPdcKWVcZ5CTNxhDaALe5uhYTXoxiZxEq decblp9ei7xGnvQo+Jyy5FMyaI0Jzrq+sJdxx+g9d2SRsvQa6WpAihpzJy1zurpa fuNEvr4S6h3LbxcOXgZaACsYNtun4rXEqsiZJkAd/bZM -----END CERTIFICATE-----Generated at Wed Jan 21 18:23:04 2026 by rpki-client