This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vaPEug2D6IOVub7E_b9RfJ7u-ts.roa File: vaPEug2D6IOVub7E_b9RfJ7u-ts.roa (raw, json) Hash identifier: Bma5PjJ+ugc8sxp+y8TZzT4ajif/KyU4XKaljGNKKXY= Subject key identifier: BD:A3:C4:BA:0D:83:E8:83:95:B9:BE:C4:FD:BF:51:7C:9E:EE:FA:DB Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019AFF802F1D96916812D198C25316ABFCF9 Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vaPEug2D6IOVub7E_b9RfJ7u-ts.roa Signing time: Mon 08 Dec 2025 19:46:21 +0000 ROA not before: Mon 08 Dec 2025 19:46:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39900 IP address blocks: 176.98.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:80:2f:1d:96:91:68:12:d1:98:c2:53:16:ab:fc:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Dec 8 19:46:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bda3c4ba0d83e88395b9bec4fdbf517c9eeefadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:14:21:17:9b:ac:48:3a:56:6f:da:37:51: 37:39:04:f8:ce:56:04:77:a9:e6:fa:47:76:eb:76: 3d:59:ed:a4:34:c2:db:c2:9b:cb:e1:39:b0:f7:4f: aa:f5:4a:71:b9:74:b9:3e:6e:18:62:d9:9b:ac:25: da:96:aa:e8:b8:5b:0c:bf:92:4b:58:e0:64:00:1f: 58:28:1b:1c:cf:8c:a3:bf:c2:4f:86:8f:df:19:af: 6b:f6:4e:c3:38:0c:03:e6:03:f4:42:2b:29:ee:0e: df:2a:03:35:b7:55:70:ea:49:ea:33:d1:d7:fb:4c: 5c:6d:b0:d5:57:95:46:25:3f:6b:e4:e2:e2:c9:e5: d7:c9:73:22:56:21:b6:1d:f2:d4:cd:71:04:c9:95: bd:be:82:1b:4c:b8:12:73:56:52:2c:e5:53:2d:3e: 07:ce:63:2d:e3:30:a8:ec:de:c3:41:35:d1:27:6e: de:88:c0:76:8d:cf:11:d6:3f:e4:b8:9f:02:c4:29: d5:73:29:70:c9:eb:7f:64:99:a6:eb:80:fe:67:d6: 98:09:d8:2c:6d:2b:2d:a9:4c:54:d3:29:15:4e:2e: f5:d8:60:e9:02:91:ba:9e:b8:78:e8:b8:fd:7e:34: 11:62:9e:c3:13:74:50:24:e9:f6:d7:be:f3:29:c0: b9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A3:C4:BA:0D:83:E8:83:95:B9:BE:C4:FD:BF:51:7C:9E:EE:FA:DB X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vaPEug2D6IOVub7E_b9RfJ7u-ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.98.182.0/24 Signature Algorithm: sha256WithRSAEncryption 47:da:c8:dc:5b:48:66:41:95:b7:d5:57:42:fe:5b:b7:64:eb: 26:a9:ca:2b:45:08:4b:ea:4a:05:6d:6c:e9:dd:7f:0a:8b:11: f3:e3:61:ae:d5:6c:8c:b8:1e:da:e0:d1:68:78:7b:94:eb:1f: 66:51:a1:be:61:19:79:a6:4b:9a:92:d5:96:52:19:e7:1a:bf: c5:7b:aa:f4:ad:3f:83:ae:b8:e9:c3:39:aa:80:cc:91:9d:69: 4c:80:f6:ba:34:ce:c9:d3:7a:42:f1:6c:1a:9a:a2:c9:4e:af: 8a:cd:54:4a:5f:71:33:cb:2c:f0:c7:10:9e:05:84:5f:0b:62: ae:b2:c0:48:cb:6a:f4:96:f4:05:6d:b2:06:99:bf:f9:c5:63: ee:07:7f:a6:6d:f8:b0:f5:9d:d3:ce:0a:89:e7:1c:f6:48:7b: 88:02:96:f3:09:77:ae:ae:ef:b2:83:c7:a0:a6:c4:c9:42:40: 8b:1f:76:ec:82:cd:d5:03:08:d1:94:57:46:70:ac:df:a0:68: 50:48:f1:23:22:2f:2e:93:5a:2a:37:2e:da:58:37:2b:46:f8: 62:cb:4c:fc:33:6e:1f:00:47:f0:6f:3d:62:f7:68:bf:e5:74: e0:58:fe:77:98:d2:49:1e:85:0e:be:63:f8:b6:eb:a9:76:6b: 82:e6:a5:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr/gC8dlpFoEtGYwlMWq/z5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjUxMjA4MTk0NjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGEzYzRiYTBkODNlODgzOTViOWJlYzRmZGJmNTE3YzllZWVmYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbQUIRebrEg6Vm/aN1E3OQT4zlYE d6nm+kd263Y9We2kNMLbwpvL4Tmw90+q9UpxuXS5Pm4YYtmbrCXalqrouFsMv5JL WOBkAB9YKBscz4yjv8JPho/fGa9r9k7DOAwD5gP0Qisp7g7fKgM1t1Vw6knqM9HX +0xcbbDVV5VGJT9r5OLiyeXXyXMiViG2HfLUzXEEyZW9voIbTLgSc1ZSLOVTLT4H zmMt4zCo7N7DQTXRJ27eiMB2jc8R1j/kuJ8CxCnVcylwyet/ZJmm64D+Z9aYCdgs bSstqUxU0ykVTi712GDpApG6nrh46Lj9fjQRYp7DE3RQJOn2177zKcC54QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL2jxLoNg+iDlbm+xP2/UXye7vrbMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvdmFQRXVnMkQ2SU9WdWI3RV9iOVJmSjd1LXRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGK2MA0G CSqGSIb3DQEBCwUAA4IBAQBH2sjcW0hmQZW31VdC/lu3ZOsmqcorRQhL6koFbWzp 3X8KixHz42Gu1WyMuB7a4NFoeHuU6x9mUaG+YRl5pkuaktWWUhnnGr/Fe6r0rT+D rrjpwzmqgMyRnWlMgPa6NM7J03pC8WwamqLJTq+KzVRKX3EzyyzwxxCeBYRfC2Ku ssBIy2r0lvQFbbIGmb/5xWPuB3+mbfiw9Z3TzgqJ5xz2SHuIApbzCXeuru+yg8eg psTJQkCLH3bsgs3VAwjRlFdGcKzfoGhQSPEjIi8uk1oqNy7aWDcrRvhiy0z8M24f AEfwbz1i92i/5XTgWP53mNJJHoUOvmP4tuupdmuC5qUW -----END CERTIFICATE-----Generated at Sat Dec 20 13:37:32 2025 by rpki-client