This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VitPtAAArOfo_lt7QpH-CzMqfC0.roa File: VitPtAAArOfo_lt7QpH-CzMqfC0.roa (raw, json) Hash identifier: opqH97Pm69iOkxOLPfpL0TwbWimgzoJ2I3keGJ7iKZ0= Subject key identifier: 56:2B:4F:B4:00:00:AC:E7:E8:FE:5B:7B:42:91:FE:0B:33:2A:7C:2D Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B6DEBD96D1DAC69115B5105992A535C6C Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VitPtAAArOfo_lt7QpH-CzMqfC0.roa Signing time: Tue 30 Dec 2025 06:22:11 +0000 ROA not before: Tue 30 Dec 2025 06:22:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203057 IP address blocks: 212.135.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:eb:d9:6d:1d:ac:69:11:5b:51:05:99:2a:53:5c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Dec 30 06:22:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=562b4fb40000ace7e8fe5b7b4291fe0b332a7c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:b8:ce:c3:e3:db:6c:8e:47:0f:e7:01:25: f7:82:8f:9b:7d:d7:1f:eb:ea:6e:a6:eb:ab:41:be: 3f:d6:4e:be:2e:da:7f:f4:ff:84:1e:da:86:9c:41: 7d:de:42:04:00:60:2b:6b:34:32:d8:79:b3:bf:e7: 17:24:e1:89:a3:b9:a9:86:87:d6:30:ab:8a:77:85: e4:c5:5a:6d:dc:da:e4:a0:e3:c5:3a:9a:c1:67:c6: 78:94:75:53:c1:a6:c0:6e:9f:7e:22:bb:80:06:b2: 86:7d:57:64:48:24:e4:f5:a3:ce:38:58:54:86:b2: 54:4c:a7:f2:0a:0b:6a:ff:2c:5c:a6:3f:fa:f8:bf: 3f:ad:30:22:40:54:b8:37:f3:70:89:72:6f:5c:db: ae:c3:ce:6c:9e:9c:7b:c1:4b:61:6a:ac:56:20:f2: 13:60:1a:e7:f0:8e:4f:a7:dc:2f:22:18:e1:51:6b: 75:29:23:05:f4:23:37:77:51:98:8d:36:ec:0c:e5: 37:49:10:5f:00:a5:b2:ae:69:3e:70:86:44:4d:2c: 51:87:31:4f:34:53:0c:11:5b:4a:50:67:5f:ed:e8: f0:e2:e9:3d:ff:33:22:58:de:b2:5d:3b:b3:6e:dd: 68:f7:f2:f8:7c:fe:22:1e:5d:1f:db:78:96:53:d9: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2B:4F:B4:00:00:AC:E7:E8:FE:5B:7B:42:91:FE:0B:33:2A:7C:2D X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VitPtAAArOfo_lt7QpH-CzMqfC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.100.0/22 Signature Algorithm: sha256WithRSAEncryption 74:11:44:3c:23:64:d5:0c:d1:16:4a:e2:92:69:c5:fa:86:09: b1:c7:b8:5b:aa:71:ee:b6:3c:15:ca:de:6c:98:89:64:08:5c: a5:e4:63:0f:96:2e:f0:4c:93:55:88:98:9b:6d:ac:3c:ba:56: f6:84:dc:6b:0c:ae:11:e0:81:15:20:4e:77:f4:f7:2c:66:98: fe:8d:4b:de:66:14:35:e7:c9:22:3b:9c:e0:a6:38:51:40:25: 18:3b:0e:56:d0:0e:0c:3f:17:95:5c:d7:45:f5:48:a6:8f:f3: 29:de:6d:5b:29:85:9a:41:92:bc:00:1a:45:0c:dc:0a:b6:e2: c7:ae:64:b1:f4:6a:aa:0c:13:f1:c4:92:64:88:a3:fc:5a:66: 7c:2d:60:1f:af:52:84:22:bb:36:8d:78:36:ce:b4:32:da:8d: a9:bd:f5:9d:79:5a:e1:1b:7c:55:a8:44:a5:fb:83:39:36:25: ec:12:3d:28:a7:8a:6a:85:3e:cc:dd:bd:7c:0b:fe:45:1c:77: bb:83:11:29:bb:c6:01:f6:11:f7:8c:b7:48:65:67:53:bd:f7: 2a:5c:66:78:2b:6e:f7:67:b5:c0:15:98:64:f9:69:e2:cf:aa: 9e:bf:a9:fa:ea:43:33:3c:64:f7:40:45:8b:7e:6c:0d:07:c0: 19:c9:1e:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtt69ltHaxpEVtRBZkqU1xsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMjMwMDYyMjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjJiNGZiNDAwMDBhY2U3ZThmZTViN2I0MjkxZmUwYjMzMmE3YzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iu4zsPj22yORw/nASX3go+bfdcf 6+pupuurQb4/1k6+Ltp/9P+EHtqGnEF93kIEAGArazQy2Hmzv+cXJOGJo7mphofW MKuKd4XkxVpt3NrkoOPFOprBZ8Z4lHVTwabAbp9+IruABrKGfVdkSCTk9aPOOFhU hrJUTKfyCgtq/yxcpj/6+L8/rTAiQFS4N/NwiXJvXNuuw85snpx7wUthaqxWIPIT YBrn8I5Pp9wvIhjhUWt1KSMF9CM3d1GYjTbsDOU3SRBfAKWyrmk+cIZETSxRhzFP NFMMEVtKUGdf7ejw4uk9/zMiWN6yXTuzbt1o9/L4fP4iHl0f23iWU9nagwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYrT7QAAKzn6P5be0KR/gszKnwtMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvVml0UHRBQUFyT2ZvX2x0N1FwSC1Dek1xZkMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1IdkMA0G CSqGSIb3DQEBCwUAA4IBAQB0EUQ8I2TVDNEWSuKSacX6hgmxx7hbqnHutjwVyt5s mIlkCFyl5GMPli7wTJNViJibbaw8ulb2hNxrDK4R4IEVIE539PcsZpj+jUveZhQ1 58kiO5zgpjhRQCUYOw5W0A4MPxeVXNdF9Uimj/Mp3m1bKYWaQZK8ABpFDNwKtuLH rmSx9GqqDBPxxJJkiKP8WmZ8LWAfr1KEIrs2jXg2zrQy2o2pvfWdeVrhG3xVqESl +4M5NiXsEj0op4pqhT7M3b18C/5FHHe7gxEpu8YB9hH3jLdIZWdTvfcqXGZ4K273 Z7XAFZhk+Wniz6qev6n66kMzPGT3QEWLfmwNB8AZyR41 -----END CERTIFICATE-----Generated at Wed Dec 31 09:40:10 2025 by rpki-client