This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/VK_z4Ar4ArJujXib0iTDaTWfTUo.roa File: VK_z4Ar4ArJujXib0iTDaTWfTUo.roa (raw, json) Hash identifier: 7jC4P8FePKMkGfygUtuv427FEEIelby1i3hhTi94LOw= Subject key identifier: 54:AF:F3:E0:0A:F8:02:B2:6E:8D:78:9B:D2:24:C3:69:35:9F:4D:4A Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576 Certificate serial: 019B797F48536B73964C17DCCD0A1F6CF138 Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/VK_z4Ar4ArJujXib0iTDaTWfTUo.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48235 IP address blocks: 85.158.240.0/21 maxlen: 21 94.127.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:48:53:6b:73:96:4c:17:dc:cd:0a:1f:6c:f1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576 Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54aff3e00af802b26e8d789bd224c369359f4d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:2d:d6:2f:96:f4:f3:55:f1:ac:7d:5b:e5: 7d:d4:09:ad:a5:49:da:18:09:52:58:1d:d7:1b:dc: 87:a0:e4:a8:58:ba:8e:08:2a:f9:70:2b:be:e0:e9: ee:d6:08:27:f5:34:88:e5:a4:9f:ca:10:2a:df:ee: de:59:3c:3a:9b:f9:05:36:c1:5b:30:88:6a:39:ea: 17:14:2d:a4:8e:05:2b:54:e2:23:fb:a4:11:70:52: 4f:41:6c:ed:91:30:f3:6e:ad:4e:cf:9d:5b:9a:7c: 74:fc:18:95:b7:80:90:17:60:9a:45:09:09:e9:db: ea:8f:fc:8c:f2:d7:61:02:e5:32:03:6b:0f:c1:2c: a1:77:1d:ee:60:88:3b:a6:35:ab:df:31:8f:42:92: a7:bb:86:eb:24:9c:de:50:90:fb:a6:ce:ec:0d:93: 78:36:06:8b:5b:9e:8f:2c:55:54:34:7b:f9:47:4a: ad:6b:ab:ed:40:bc:56:e0:f0:1a:cb:49:b6:ae:8c: e4:a0:52:8b:a8:e9:56:a4:10:2e:60:69:a4:53:71: de:58:d5:0c:6f:1e:48:fa:4e:8d:00:1e:6a:21:4b: 5c:92:b1:94:be:4e:3a:69:d6:9b:8c:2d:6f:48:53: 42:8e:76:48:79:a2:04:1a:1f:aa:b1:5d:1e:79:bf: ac:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AF:F3:E0:0A:F8:02:B2:6E:8D:78:9B:D2:24:C3:69:35:9F:4D:4A X509v3 Authority Key Identifier: keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/VK_z4Ar4ArJujXib0iTDaTWfTUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.240.0/21 94.127.64.0/21 Signature Algorithm: sha256WithRSAEncryption 02:c1:20:04:2d:2c:90:d2:5d:97:bb:ac:b5:7c:18:b5:f0:41: 35:33:35:66:bd:78:f4:0d:d8:a0:e7:d0:db:d5:e1:b7:f4:c9: ac:f4:4e:94:7f:91:5e:22:bd:71:04:5e:a6:3b:91:df:62:3b: 6e:1a:7a:1d:7a:95:0e:fe:f5:04:cf:c5:b6:85:cf:e1:f2:2c: a4:9a:d0:1a:e0:97:5d:42:d0:fa:79:ae:1b:f8:2a:6b:ad:e7: f0:44:3d:0d:85:b6:c9:53:fb:3e:97:62:59:38:a8:7b:44:b3: de:02:67:8c:f9:d7:47:df:08:35:c2:61:41:48:17:e1:8e:36: 8a:02:47:3f:1e:14:e6:4e:6a:60:5c:95:ae:5d:4e:bf:38:87: 36:3e:16:c9:b4:7b:73:95:97:0c:d8:a6:f0:26:a8:88:1b:e1: 64:44:fb:14:a2:f2:d9:fd:92:17:e4:a7:af:c4:fc:8c:fc:6a: 00:fc:db:d4:e7:10:12:65:ac:91:3b:2e:99:e0:db:08:ac:8a: b0:4f:8f:9d:6c:82:aa:8f:82:77:9a:e5:34:ec:e0:09:ea:b8: 61:a2:52:ad:a6:51:6f:9f:63:49:8b:b8:02:23:81:4b:6c:8e: b7:71:a2:8f:68:47:e6:a4:92:b1:15:6e:b0:b5:ae:b4:09:7a: e7:f7:50:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5f0hTa3OWTBfczQofbPE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ODQ3N2Q4YjYyZDA5ZjlhZThiZmRiZDgxMmE1M2Y5N2Vk NGM1NzYwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGFmZjNlMDBhZjgwMmIyNmU4ZDc4OWJkMjI0YzM2OTM1OWY0ZDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM4t1i+W9PNV8ax9W+V91AmtpUna GAlSWB3XG9yHoOSoWLqOCCr5cCu+4Onu1ggn9TSI5aSfyhAq3+7eWTw6m/kFNsFb MIhqOeoXFC2kjgUrVOIj+6QRcFJPQWztkTDzbq1Oz51bmnx0/BiVt4CQF2CaRQkJ 6dvqj/yM8tdhAuUyA2sPwSyhdx3uYIg7pjWr3zGPQpKnu4brJJzeUJD7ps7sDZN4 NgaLW56PLFVUNHv5R0qta6vtQLxW4PAay0m2rozkoFKLqOlWpBAuYGmkU3HeWNUM bx5I+k6NAB5qIUtckrGUvk46adabjC1vSFNCjnZIeaIEGh+qsV0eeb+shwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFSv8+AK+AKybo14m9Ikw2k1n01KMB8GA1UdIwQY MBaAFIeEd9i2LQn5rov9vYEqU/l+1MV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lODNhYzUtNDQ4Yi00ZTQ5LThlYmYt ODg0MmU1ZWRjZTAyLzEvVktfejRBcjRBckp1alhpYjBpVERhVFdmVFVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lODNhYzUtNDQ4Yi00ZTQ5LThlYmYtODg0MmU1ZWRjZTAy LzEvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVZ7wAwQD Xn9AMA0GCSqGSIb3DQEBCwUAA4IBAQACwSAELSyQ0l2Xu6y1fBi18EE1MzVmvXj0 Ddig59Db1eG39Mms9E6Uf5FeIr1xBF6mO5HfYjtuGnodepUO/vUEz8W2hc/h8iyk mtAa4JddQtD6ea4b+CprrefwRD0NhbbJU/s+l2JZOKh7RLPeAmeM+ddH3wg1wmFB SBfhjjaKAkc/HhTmTmpgXJWuXU6/OIc2PhbJtHtzlZcM2KbwJqiIG+FkRPsUovLZ /ZIX5KevxPyM/GoA/NvU5xASZayROy6Z4NsIrIqwT4+dbIKqj4J3muU07OAJ6rhh olKtplFvn2NJi7gCI4FLbI63caKPaEfmpJKxFW6wta60CXrn91CX -----END CERTIFICATE-----Generated at Thu Jan 8 11:28:23 2026 by rpki-client