This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/vp_kL7XdaxuoE8ZIw2stfQvMujQ.roa File: vp_kL7XdaxuoE8ZIw2stfQvMujQ.roa (raw, json) Hash identifier: Fo0TpQJlU+oLHQtTrtQM8XKofzaFbmPNMXg/+v+0LZE= Subject key identifier: BE:9F:E4:2F:B5:DD:6B:1B:A8:13:C6:48:C3:6B:2D:7D:0B:CC:BA:34 Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019A988B4DDE588F830167ED0F6B780D14CD Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/vp_kL7XdaxuoE8ZIw2stfQvMujQ.roa Signing time: Tue 18 Nov 2025 19:57:37 +0000 ROA not before: Tue 18 Nov 2025 19:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205304 IP address blocks: 2a0e:e704:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:8b:4d:de:58:8f:83:01:67:ed:0f:6b:78:0d:14:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Nov 18 19:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be9fe42fb5dd6b1ba813c648c36b2d7d0bccba34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:c2:3e:b9:d7:73:ea:e7:04:18:a9:5e:cd: 46:0f:20:8d:79:25:28:25:0f:7c:2f:b7:5a:ab:e9: b9:9d:f3:83:02:99:6b:88:77:33:c6:35:d6:53:6f: 0f:c3:dc:27:38:bd:80:24:1d:3a:ac:22:87:c5:e9: a5:26:19:5d:6a:e9:1f:b2:aa:b8:f1:26:5f:59:96: 28:82:77:f4:84:8e:0d:a1:32:0b:ee:00:7e:76:3a: 0c:55:76:69:e0:61:29:ce:2a:e2:a4:c9:f5:e8:de: 51:d8:fa:69:7d:ec:82:8a:88:62:a3:40:c0:c5:24: af:5b:7f:3d:c8:24:1c:83:c4:9d:ce:19:8b:a8:5a: ef:5d:2f:d8:9a:ac:d4:20:b2:04:61:91:ad:ca:90: 14:ee:12:3f:70:69:72:d1:7f:ee:a5:5d:21:dc:c4: 98:f8:2a:da:95:39:f6:2e:85:4d:54:14:e1:dd:1b: ed:5e:8b:b2:ca:52:1c:dd:4e:35:33:2f:8f:89:c4: 8e:e2:14:46:ba:3b:25:55:dc:64:23:a0:da:89:c7: 6e:b5:48:f9:a5:12:4e:8b:e9:87:c9:ef:54:4e:9f: 2b:6a:ae:69:08:3c:56:56:39:11:ac:ae:e9:8d:7d: 46:03:75:6d:15:2c:93:bc:8a:44:0f:23:c5:d2:90: 11:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9F:E4:2F:B5:DD:6B:1B:A8:13:C6:48:C3:6B:2D:7D:0B:CC:BA:34 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/vp_kL7XdaxuoE8ZIw2stfQvMujQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e704:49::/48 Signature Algorithm: sha256WithRSAEncryption 72:62:ff:77:70:2a:94:07:ec:a1:01:5e:72:97:1b:8d:19:e4: 50:32:9d:29:60:7f:48:49:9d:47:cc:c9:b4:94:b8:34:b8:82: aa:cb:1e:78:93:43:78:fa:63:aa:6f:92:41:07:b9:12:4c:d0: a1:1c:be:28:2a:dc:6d:bf:c6:b1:3c:4c:25:7c:ad:15:bf:2e: c0:3a:b7:ca:fc:0d:88:20:78:16:4a:c1:a1:a3:20:45:b3:6a: 98:ef:1c:45:8e:83:49:f4:0c:83:3a:89:9b:33:af:4e:75:b5: 98:29:24:3e:94:22:74:76:33:c7:0b:b9:02:51:c9:fc:70:c8: a0:5a:ed:74:61:c6:e9:65:5c:09:76:b3:06:cb:93:37:12:a2: 7e:fc:da:da:a4:98:9d:4c:d6:5d:43:42:74:59:65:db:94:3f: d9:7b:bc:98:67:99:78:43:9f:6c:52:9b:d0:1b:52:b1:5d:cd: 69:0c:61:91:cc:fd:df:da:21:26:8f:0e:a4:4a:92:88:3d:23: 14:e9:59:1e:eb:41:73:b5:d6:00:45:c0:2c:9c:36:f2:0e:d4: f6:d5:1d:71:64:b7:70:06:0b:07:68:75:ab:f5:b7:a7:84:79: 1c:7d:0b:05:62:c3:20:b3:97:3e:7e:48:82:0a:67:27:91:8b: 6e:4f:37:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqYi03eWI+DAWftD2t4DRTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUxMTE4MTk1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTlmZTQyZmI1ZGQ2YjFiYTgxM2M2NDhjMzZiMmQ3ZDBiY2NiYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlezCPrnXc+rnBBipXs1GDyCNeSUo JQ98L7daq+m5nfODAplriHczxjXWU28Pw9wnOL2AJB06rCKHxemlJhldaukfsqq4 8SZfWZYognf0hI4NoTIL7gB+djoMVXZp4GEpziripMn16N5R2PppfeyCiohio0DA xSSvW389yCQcg8SdzhmLqFrvXS/YmqzUILIEYZGtypAU7hI/cGly0X/upV0h3MSY +CralTn2LoVNVBTh3RvtXouyylIc3U41My+PicSO4hRGujslVdxkI6DaicdutUj5 pRJOi+mHye9UTp8raq5pCDxWVjkRrK7pjX1GA3VtFSyTvIpEDyPF0pARLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL6f5C+13WsbqBPGSMNrLX0LzLo0MB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvdnBfa0w3WGRheHVvRThaSXcyc3RmUXZNdWpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABJ MA0GCSqGSIb3DQEBCwUAA4IBAQByYv93cCqUB+yhAV5ylxuNGeRQMp0pYH9ISZ1H zMm0lLg0uIKqyx54k0N4+mOqb5JBB7kSTNChHL4oKtxtv8axPEwlfK0Vvy7AOrfK /A2IIHgWSsGhoyBFs2qY7xxFjoNJ9AyDOombM69OdbWYKSQ+lCJ0djPHC7kCUcn8 cMigWu10YcbpZVwJdrMGy5M3EqJ+/NrapJidTNZdQ0J0WWXblD/Ze7yYZ5l4Q59s UpvQG1KxXc1pDGGRzP3f2iEmjw6kSpKIPSMU6Vke60FztdYARcAsnDbyDtT21R1x ZLdwBgsHaHWr9benhHkcfQsFYsMgs5c+fkiCCmcnkYtuTze9 -----END CERTIFICATE-----Generated at Sun Dec 14 18:52:14 2025 by rpki-client