This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/vkFegJrdqmSpqizX-1jFyrdM-Ok.roa File: vkFegJrdqmSpqizX-1jFyrdM-Ok.roa (raw, json) Hash identifier: n5V1OMe1FNTO7+dn3GHVNrTtgdxzbNdUe5BzE1mBm1Q= Subject key identifier: BE:41:5E:80:9A:DD:AA:64:A9:AA:2C:D7:FB:58:C5:CA:B7:4C:F8:E9 Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Certificate serial: 019B7EA4C52D8A0609E9A154B8264400F25D Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/vkFegJrdqmSpqizX-1jFyrdM-Ok.roa Signing time: Fri 02 Jan 2026 12:18:06 +0000 ROA not before: Fri 02 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13259 IP address blocks: 188.0.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c5:2d:8a:06:09:e9:a1:54:b8:26:44:00:f2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692 Validity Not Before: Jan 2 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be415e809addaa64a9aa2cd7fb58c5cab74cf8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:1d:47:f3:64:9b:fe:5c:6b:24:62:48:69: 2e:bf:86:85:b7:03:42:24:7a:0d:87:68:9e:12:c0: 19:8f:51:f2:82:49:43:f6:a3:56:f8:a3:dc:53:37: d7:d3:2d:d3:d8:b5:94:7d:3c:99:f4:33:d0:9c:44: a4:cc:fe:a9:23:0e:04:2b:f6:40:ea:b5:e3:54:67: 96:89:b0:c0:63:72:b1:37:27:fa:da:37:64:a2:57: 6a:78:1c:5c:b2:28:af:23:fa:06:35:8b:0f:a6:cf: f8:49:c0:36:a8:77:4a:9f:92:0c:c2:b2:2b:31:ad: 7e:36:97:a9:3b:46:5e:d3:cd:21:16:29:9f:57:e0: 5c:87:d6:9e:85:cb:a2:c0:b2:79:56:14:f2:d9:38: 5b:1e:08:29:75:32:f6:48:3b:47:f8:e1:6d:ba:fa: 1d:17:4e:28:39:71:f0:74:8a:1f:f1:0b:30:63:16: b8:00:39:7f:49:71:d0:af:42:fb:65:0c:f0:c4:0c: 4c:97:b2:a1:04:ca:ea:ef:d1:84:a8:93:b0:e9:01: 74:e1:c7:8a:df:58:f5:d9:ce:22:b9:e7:be:71:f2: 68:de:0c:82:32:75:1a:0c:b2:98:33:ad:6b:f6:0b: 42:2d:d2:2a:35:6f:6a:a0:14:32:e2:24:56:49:88: 03:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:41:5E:80:9A:DD:AA:64:A9:AA:2C:D7:FB:58:C5:CA:B7:4C:F8:E9 X509v3 Authority Key Identifier: keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/vkFegJrdqmSpqizX-1jFyrdM-Ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.0.40.0/21 Signature Algorithm: sha256WithRSAEncryption 89:4c:48:1c:09:d0:1d:40:aa:5e:51:a4:a6:c5:95:cd:3c:ab: 73:7b:f6:06:b3:d9:55:d9:12:25:9b:ef:22:5f:8b:9c:df:c9: 28:6c:29:7a:d2:55:73:67:8d:43:6c:ef:8f:55:02:10:24:a9: 67:42:c0:06:5b:2c:08:99:51:0b:c1:d3:9d:fd:c8:bb:70:11: 80:8d:6d:76:d5:a1:c5:b6:bf:35:3f:3c:f2:8c:17:4c:91:e1: fd:38:45:32:e0:14:c0:be:1e:18:95:ff:87:96:4e:5f:f4:63: 03:39:d1:a1:16:f8:b3:a7:86:8c:85:c4:38:f5:5b:4b:94:6d: 14:fb:65:51:84:55:52:d2:70:0d:5c:38:c7:30:26:88:2d:50: a9:28:c8:f8:41:52:ca:76:ec:af:e1:fa:d9:63:b8:cd:f8:77: 44:9c:21:f4:4e:e5:57:b5:1f:26:cb:59:e8:ea:8f:01:3e:87: a7:9a:70:ad:ad:e0:dc:a0:f9:aa:e8:bd:04:92:48:62:4c:08: a5:dc:09:55:7c:87:e2:cf:16:01:59:f6:f6:03:9e:09:db:ca: bc:89:19:70:a9:06:6a:22:8a:2f:52:f7:be:af:74:82:c3:9b: 90:0a:d1:4f:66:97:e2:fb:15:3c:6b:e1:c2:79:8f:87:07:1c: fe:25:73:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pMUtigYJ6aFUuCZEAPJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjlhMDI1YTg0ZjQyZWYzZWYwYjYwNTJkZTNmZDY1ZThj MDg2OTIwHhcNMjYwMTAyMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQxNWU4MDlhZGRhYTY0YTlhYTJjZDdmYjU4YzVjYWI3NGNmOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOodR/Nkm/5cayRiSGkuv4aFtwNC JHoNh2ieEsAZj1HygklD9qNW+KPcUzfX0y3T2LWUfTyZ9DPQnESkzP6pIw4EK/ZA 6rXjVGeWibDAY3KxNyf62jdkoldqeBxcsiivI/oGNYsPps/4ScA2qHdKn5IMwrIr Ma1+NpepO0Ze080hFimfV+Bch9aehcuiwLJ5VhTy2ThbHggpdTL2SDtH+OFtuvod F04oOXHwdIof8QswYxa4ADl/SXHQr0L7ZQzwxAxMl7KhBMrq79GEqJOw6QF04ceK 31j12c4iuee+cfJo3gyCMnUaDLKYM61r9gtCLdIqNW9qoBQy4iRWSYgDMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5BXoCa3apkqaos1/tYxcq3TPjpMB8GA1UdIwQY MBaAFHBpoCWoT0LvPvC2BS3j/WXowIaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMt NTE5OWE3MTE2ODRkLzEvdmtGZWdKcmRxbVNwcWl6WC0xakZ5cmRNLU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hZDAxMTYtNzU1OC00NjU2LTlmYjMtNTE5OWE3MTE2ODRk LzEvY0dtZ0phaFBRdTgtOExZRkxlUDlaZWpBaHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvAAoMA0G CSqGSIb3DQEBCwUAA4IBAQCJTEgcCdAdQKpeUaSmxZXNPKtze/YGs9lV2RIlm+8i X4uc38kobCl60lVzZ41DbO+PVQIQJKlnQsAGWywImVELwdOd/ci7cBGAjW121aHF tr81PzzyjBdMkeH9OEUy4BTAvh4Ylf+Hlk5f9GMDOdGhFvizp4aMhcQ49VtLlG0U +2VRhFVS0nANXDjHMCaILVCpKMj4QVLKduyv4frZY7jN+HdEnCH0TuVXtR8my1no 6o8BPoenmnCtreDcoPmq6L0EkkhiTAil3AlVfIfizxYBWfb2A54J28q8iRlwqQZq IoovUve+r3SCw5uQCtFPZpfi+xU8a+HCeY+HBxz+JXM+ -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:11 2026 by rpki-client