This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vjkCxUD_ij4X6q-BUwRyI59VZn0.roa File: vjkCxUD_ij4X6q-BUwRyI59VZn0.roa (raw, json) Hash identifier: DjkcX7HGaCtRQKiwxzU2NoL9K2EBP7995KcFrdUMbZc= Subject key identifier: BE:39:02:C5:40:FF:8A:3E:17:EA:AF:81:53:04:72:23:9F:55:66:7D Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8025A28BC2DD23E70237C6937ED944 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vjkCxUD_ij4X6q-BUwRyI59VZn0.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203923 IP address blocks: 2a0f:7802:e300::/40 maxlen: 48 2a0f:7803:fb30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 11:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:25:a2:8b:c2:dd:23:e7:02:37:c6:93:7e:d9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be3902c540ff8a3e17eaaf81530472239f55667d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:90:9e:8f:a6:7d:54:ef:35:22:bb:3a:c2: 06:57:b4:eb:78:a2:0e:aa:99:78:84:fa:31:63:6b: 91:08:7e:5f:00:dc:9b:f0:84:3e:96:18:32:23:42: 23:2c:0a:43:47:bf:68:7e:37:69:3e:34:43:77:e3: 99:9d:89:60:bf:5e:59:4f:63:fd:4c:19:c4:4b:d4: 0c:57:b0:ea:e1:ec:ed:36:fb:f1:9c:68:5c:3c:30: ed:e0:b6:b1:f6:1f:df:b3:00:7d:ee:9b:2d:2f:ad: 24:6b:36:b4:2d:ea:ce:9a:a2:8b:ea:5f:50:4f:5a: 83:49:b3:da:db:2c:e3:2f:1f:b1:0c:3e:7b:d9:f0: f8:d6:96:33:38:a6:bc:59:96:7e:26:a2:c2:ed:13: 50:d8:d5:f7:0e:fb:fe:ab:8a:c8:b8:05:d0:73:ed: 3d:02:0e:47:6e:1b:28:f3:88:a3:29:60:23:a0:30: 76:b7:15:2b:19:38:6a:91:4b:14:e7:44:a4:08:92: 0f:c1:64:49:30:31:33:99:e1:b1:b5:2a:40:2a:74: 8d:cb:a0:ed:dc:03:2b:cd:b1:f6:b6:7d:3c:fd:84: f6:8c:bf:a9:d6:a2:3f:6b:8e:33:c9:74:b6:8d:9b: 86:00:ad:00:fd:44:34:7c:f6:f4:db:45:b2:bd:4d: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:39:02:C5:40:FF:8A:3E:17:EA:AF:81:53:04:72:23:9F:55:66:7D X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/vjkCxUD_ij4X6q-BUwRyI59VZn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7802:e300::/40 2a0f:7803:fb30::/44 Signature Algorithm: sha256WithRSAEncryption 2e:04:db:3e:4f:f2:ba:8a:5f:58:7e:de:c5:bc:79:5b:fc:9d: 6b:51:84:12:f9:b7:d3:b5:10:66:a3:43:03:98:36:26:52:f5: f2:1a:19:71:43:38:78:42:c1:ce:6e:bb:eb:98:cf:5a:26:4e: 13:fc:70:84:03:75:9e:25:66:4c:72:6c:1f:51:4d:df:ef:85: 3e:2e:48:91:3a:df:14:47:8c:d3:82:84:37:4e:ff:c7:fc:20: 43:23:64:44:e2:19:04:d2:77:ff:b7:47:8f:75:1c:4e:fc:5b: c0:f7:bb:b2:02:a5:ff:a0:7e:af:2e:75:5a:79:c0:55:55:85: 8a:fa:83:8b:1e:80:81:69:18:3a:9c:cb:71:96:6c:bc:3e:5a: 8e:b6:0f:14:7c:e5:4b:52:9b:5b:57:ff:a6:41:3e:a0:6d:48: 8b:29:6d:cb:e7:44:d6:fb:b8:72:d7:aa:cb:2b:50:35:11:d8: 8a:95:18:08:af:7a:b3:3c:f3:0b:08:23:68:41:3e:56:25:09: 66:b8:4f:55:44:16:22:e9:ad:66:9e:96:d1:11:cd:97:5c:10: c1:3e:2d:0a:ad:a3:d5:ef:c3:35:21:49:a7:b3:2b:f0:f9:73: b7:c3:41:5e:c0:1b:9e:75:e8:80:47:cf:11:e2:08:6c:95:33: a3:5d:9d:9c -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt8gCWii8LdI+cCN8aTftlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTM5MDJjNTQwZmY4YTNlMTdlYWFmODE1MzA0NzIyMzlmNTU2NjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gyQno+mfVTvNSK7OsIGV7TreKIO qpl4hPoxY2uRCH5fANyb8IQ+lhgyI0IjLApDR79ofjdpPjRDd+OZnYlgv15ZT2P9 TBnES9QMV7Dq4eztNvvxnGhcPDDt4Lax9h/fswB97pstL60kaza0LerOmqKL6l9Q T1qDSbPa2yzjLx+xDD572fD41pYzOKa8WZZ+JqLC7RNQ2NX3Dvv+q4rIuAXQc+09 Ag5Hbhso84ijKWAjoDB2txUrGThqkUsU50SkCJIPwWRJMDEzmeGxtSpAKnSNy6Dt 3AMrzbH2tn08/YT2jL+p1qI/a44zyXS2jZuGAK0A/UQ0fPb020WyvU3GoQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFL45AsVA/4o+F+qvgVMEciOfVWZ9MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvdmprQ3hVRF9pajRYNnEtQlV3UnlJNTlWWm4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKg94AuMD BwQqD3gD+zAwDQYJKoZIhvcNAQELBQADggEBAC4E2z5P8rqKX1h+3sW8eVv8nWtR hBL5t9O1EGajQwOYNiZS9fIaGXFDOHhCwc5uu+uYz1omThP8cIQDdZ4lZkxybB9R Td/vhT4uSJE63xRHjNOChDdO/8f8IEMjZETiGQTSd/+3R491HE78W8D3u7ICpf+g fq8udVp5wFVVhYr6g4segIFpGDqcy3GWbLw+Wo62DxR85UtSm1tX/6ZBPqBtSIsp bcvnRNb7uHLXqssrUDUR2IqVGAiverM88wsII2hBPlYlCWa4T1VEFiLprWaeltER zZdcEME+LQqto9XvwzUhSaezK/D5c7fDQV7AG5516IBHzxHiCGyVM6NdnZw= -----END CERTIFICATE-----Generated at Fri Jan 2 16:28:05 2026 by rpki-client