This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/vtRikZxiMqZlac-W_YNJqMqHlm8.roa File: vtRikZxiMqZlac-W_YNJqMqHlm8.roa (raw, json) Hash identifier: /xWSJ6cfywQEVV4RvpwuIXXt62aA58kIylH8Fa9/PsE= Subject key identifier: BE:D4:62:91:9C:62:32:A6:65:69:CF:96:FD:83:49:A8:CA:87:96:6F Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019B000B76EFE398EEF58057A9FCC85FBAAA Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/vtRikZxiMqZlac-W_YNJqMqHlm8.roa Signing time: Mon 08 Dec 2025 22:18:29 +0000 ROA not before: Mon 08 Dec 2025 22:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25369 IP address blocks: 5.102.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:00:0b:76:ef:e3:98:ee:f5:80:57:a9:fc:c8:5f:ba:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Dec 8 22:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bed462919c6232a66569cf96fd8349a8ca87966f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:48:aa:08:ca:e4:27:a4:15:93:3b:6f:ee: 05:5e:7c:73:0d:5b:41:7e:6c:15:0f:0d:ac:de:83: 08:c8:ab:49:71:75:10:f2:91:5b:d9:ce:f4:b6:14: be:c8:94:8b:25:af:1e:f2:58:1a:d6:1c:3e:98:6a: 6d:fe:36:ab:92:3e:01:59:d8:84:aa:aa:ee:89:75: d5:94:3d:2e:10:dd:37:18:8e:c5:0a:09:ad:cc:b2: d6:2e:ea:5f:17:07:ba:df:ed:be:e0:c4:05:0f:8c: 96:1d:a8:98:d2:85:ce:de:b2:35:7f:87:3d:19:8a: 7f:13:f2:a0:6b:60:ac:d1:d4:e4:b6:09:c5:c6:23: 3b:8d:cd:fe:f1:c5:04:cc:af:48:83:1b:4a:1a:5a: e3:b6:69:24:2f:10:65:df:96:f4:fb:f6:5c:33:d3: 15:0d:6d:1c:4a:a1:4c:d1:04:c7:94:6e:86:83:65: 67:8d:21:97:64:a1:7e:b7:a4:ae:92:79:04:12:6f: 86:c7:14:f8:5f:00:bb:8d:7f:a0:41:b6:d2:ea:5b: 4b:96:2d:e6:a0:4d:e2:44:2d:2e:10:8c:10:fc:06: f9:12:8c:87:8a:8e:e8:07:fe:99:95:f6:e0:0c:24: 41:89:2c:07:4b:9e:ec:52:fa:71:90:bf:cd:75:19: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D4:62:91:9C:62:32:A6:65:69:CF:96:FD:83:49:A8:CA:87:96:6F X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/vtRikZxiMqZlac-W_YNJqMqHlm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.39.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8a:80:14:0a:4f:ad:e6:7e:1b:0b:4b:69:bc:bb:1a:5a:d7: f8:f4:e2:f0:32:d5:4f:fe:cf:e4:00:53:7b:e6:de:56:dd:e9: 78:65:bc:7a:7f:86:4f:4d:76:1a:b6:70:34:42:d3:07:19:fa: 52:47:a5:1c:36:39:6c:b7:49:4b:1d:a7:dc:d5:b4:d6:a2:bf: f6:40:8a:83:bd:3e:cc:5e:dc:30:b2:5b:84:c7:bb:ad:4e:dd: 1c:12:67:c3:dd:ee:c3:d7:2d:37:f6:b0:7a:c0:63:a0:95:59: 37:30:06:d0:4a:ac:9a:fd:26:04:cc:00:55:6c:b4:73:eb:04: 82:97:e8:83:28:99:89:ba:d9:ac:6c:8d:aa:0d:05:55:2e:89: 33:45:fe:7f:6d:40:e9:9f:9f:fa:9e:da:2d:37:ac:7e:80:c3: d9:58:0f:86:35:39:00:5a:75:4f:8e:59:92:1b:06:66:01:48: a7:f8:fd:7c:bf:9d:bb:1c:02:0d:52:f2:b3:b0:83:86:3b:95: ed:b4:77:13:1b:38:46:aa:8e:fe:e1:2d:d1:3f:86:f2:9d:4e: 1f:8a:96:8b:82:66:32:6f:c6:12:2e:4f:6c:86:98:6b:3c:d6: 44:91:1b:4b:04:93:07:da:92:43:ab:b4:bc:7e:a3:7e:47:a7: c0:07:97:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsAC3bv45ju9YBXqfzIX7qqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjUxMjA4MjIxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWQ0NjI5MTljNjIzMmE2NjU2OWNmOTZmZDgzNDlhOGNhODc5NjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6pIqgjK5CekFZM7b+4FXnxzDVtB fmwVDw2s3oMIyKtJcXUQ8pFb2c70thS+yJSLJa8e8lga1hw+mGpt/jarkj4BWdiE qqruiXXVlD0uEN03GI7FCgmtzLLWLupfFwe63+2+4MQFD4yWHaiY0oXO3rI1f4c9 GYp/E/Kga2Cs0dTktgnFxiM7jc3+8cUEzK9IgxtKGlrjtmkkLxBl35b0+/ZcM9MV DW0cSqFM0QTHlG6Gg2VnjSGXZKF+t6SuknkEEm+GxxT4XwC7jX+gQbbS6ltLli3m oE3iRC0uEIwQ/Ab5EoyHio7oB/6ZlfbgDCRBiSwHS57sUvpxkL/NdRk8SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL7UYpGcYjKmZWnPlv2DSajKh5ZvMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvdnRSaWtaeGlNcVpsYWMtV19ZTkpxTXFIbG04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYnMA0G CSqGSIb3DQEBCwUAA4IBAQAdioAUCk+t5n4bC0tpvLsaWtf49OLwMtVP/s/kAFN7 5t5W3el4Zbx6f4ZPTXYatnA0QtMHGfpSR6UcNjlst0lLHafc1bTWor/2QIqDvT7M XtwwsluEx7utTt0cEmfD3e7D1y039rB6wGOglVk3MAbQSqya/SYEzABVbLRz6wSC l+iDKJmJutmsbI2qDQVVLokzRf5/bUDpn5/6ntotN6x+gMPZWA+GNTkAWnVPjlmS GwZmAUin+P18v527HAINUvKzsIOGO5XttHcTGzhGqo7+4S3RP4bynU4fipaLgmYy b8YSLk9shphrPNZEkRtLBJMH2pJDq7S8fqN+R6fAB5dz -----END CERTIFICATE-----Generated at Tue Dec 16 16:21:44 2025 by rpki-client