This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Vcrxz5upkyAccEnWWkm1jKbiHCU.roa File: Vcrxz5upkyAccEnWWkm1jKbiHCU.roa (raw, json) Hash identifier: DF9acpeNSt3QcU3RLTkyAoSPyBTgnqf4yVUPlH/IEUw= Subject key identifier: 55:CA:F1:CF:9B:A9:93:20:1C:70:49:D6:5A:49:B5:8C:A6:E2:1C:25 Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Certificate serial: 019B7E37D007210170CD7D8ADCEE6D6E94FA Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Vcrxz5upkyAccEnWWkm1jKbiHCU.roa Signing time: Fri 02 Jan 2026 10:19:05 +0000 ROA not before: Fri 02 Jan 2026 10:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24731 IP address blocks: 212.71.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d0:07:21:01:70:cd:7d:8a:dc:ee:6d:6e:94:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06 Validity Not Before: Jan 2 10:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55caf1cf9ba993201c7049d65a49b58ca6e21c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:bb:41:6b:ea:20:ef:0b:d4:91:4f:ca:e3: e2:4b:25:49:31:70:39:5f:1a:7f:b9:de:19:0b:ce: 0a:7c:fd:86:24:68:04:27:28:3b:9e:ca:c0:19:4f: 8e:30:60:d4:b0:3f:d6:84:30:63:95:33:8b:12:71: 4e:76:78:7d:a2:04:82:d7:b6:49:21:b2:76:5c:3a: 58:25:43:15:15:4e:04:22:4a:40:19:93:cd:2b:a3: b6:27:dd:a8:1f:db:e3:6c:da:85:63:cf:37:3f:57: 64:fe:51:cb:bb:d0:62:9b:81:0e:6f:4d:2a:aa:ac: 37:f8:3a:bf:f1:9a:ed:d9:0b:7a:47:71:90:34:77: b7:f6:38:4e:21:17:49:7e:bf:b5:e4:ae:77:08:88: 10:e3:b2:fc:b6:38:b0:7f:b8:a2:99:94:50:fb:44: 64:bb:3a:e7:ea:78:ff:68:1e:b2:83:15:6c:6c:4d: 34:6d:c9:e9:33:50:d4:0f:2e:ee:df:5c:3a:b7:1f: 39:27:32:fa:bc:f1:0d:a9:8e:dc:0d:20:1a:9c:e3: bf:a4:a5:9a:ef:eb:15:84:1e:cb:14:5d:e4:8e:9f: b8:94:61:6f:0e:5d:ff:47:a0:16:20:a0:dd:35:10: fd:4f:44:51:d6:97:8c:b8:df:2c:5f:31:ca:fc:79: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CA:F1:CF:9B:A9:93:20:1C:70:49:D6:5A:49:B5:8C:A6:E2:1C:25 X509v3 Authority Key Identifier: keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/Vcrxz5upkyAccEnWWkm1jKbiHCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.71.51.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:69:88:89:12:42:e4:c7:c0:c3:43:cc:f6:dc:7a:1e:22:69: d8:3e:f2:ff:7c:5c:26:00:1b:b3:ec:f2:31:5a:36:36:92:4f: 3c:2b:87:57:75:65:54:b4:6c:98:e1:ab:ae:65:19:46:84:e5: 0c:ee:63:b9:92:b7:5f:a4:13:55:ee:63:8f:50:f6:27:e3:44: f8:14:a9:c4:2e:ec:01:09:c3:69:43:f1:b3:48:6c:22:59:d0: d3:06:b6:c6:0e:7a:a0:0e:92:bf:3a:cf:3b:50:37:f4:ac:00: cd:d4:8a:29:cd:68:b6:a7:44:9d:6c:72:7c:51:e0:ed:94:e9: 68:52:36:c7:bc:ab:c2:1f:71:d0:44:ae:5a:bc:a1:3f:75:55: 6b:ff:88:77:58:a7:2f:44:59:93:34:16:f9:60:29:c2:f8:18: 79:00:d9:03:a9:52:bf:2c:09:82:3d:89:80:03:da:57:a0:95: 52:50:74:55:0c:f6:a1:45:22:cc:3e:91:e5:86:f4:36:05:eb: 21:92:0c:b7:2e:37:cc:2b:fc:79:c4:d7:0f:31:34:6f:3a:28: 95:b9:f4:26:62:77:0d:be:b2:fd:78:e5:3b:8c:84:7b:a7:ee: d2:db:3e:cb:33:c4:0c:fe:2e:ba:94:1b:90:8b:51:49:f2:11: 47:3d:dc:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9AHIQFwzX2K3O5tbpT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj NTNjMDYwHhcNMjYwMTAyMTAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWNhZjFjZjliYTk5MzIwMWM3MDQ5ZDY1YTQ5YjU4Y2E2ZTIxYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39y7QWvqIO8L1JFPyuPiSyVJMXA5 Xxp/ud4ZC84KfP2GJGgEJyg7nsrAGU+OMGDUsD/WhDBjlTOLEnFOdnh9ogSC17ZJ IbJ2XDpYJUMVFU4EIkpAGZPNK6O2J92oH9vjbNqFY883P1dk/lHLu9Bim4EOb00q qqw3+Dq/8Zrt2Qt6R3GQNHe39jhOIRdJfr+15K53CIgQ47L8tjiwf7iimZRQ+0Rk uzrn6nj/aB6ygxVsbE00bcnpM1DUDy7u31w6tx85JzL6vPENqY7cDSAanOO/pKWa 7+sVhB7LFF3kjp+4lGFvDl3/R6AWIKDdNRD9T0RR1peMuN8sXzHK/HlYzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFXK8c+bqZMgHHBJ1lpJtYym4hwlMB8GA1UdIwQY MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt YTg4MWVjODIyOGI1LzEvVmNyeHo1dXBreUFjY0VuV1drbTFqS2JpSENVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1 LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EczMA0G CSqGSIb3DQEBCwUAA4IBAQA+aYiJEkLkx8DDQ8z23HoeImnYPvL/fFwmABuz7PIx WjY2kk88K4dXdWVUtGyY4auuZRlGhOUM7mO5krdfpBNV7mOPUPYn40T4FKnELuwB CcNpQ/GzSGwiWdDTBrbGDnqgDpK/Os87UDf0rADN1IopzWi2p0SdbHJ8UeDtlOlo UjbHvKvCH3HQRK5avKE/dVVr/4h3WKcvRFmTNBb5YCnC+Bh5ANkDqVK/LAmCPYmA A9pXoJVSUHRVDPahRSLMPpHlhvQ2Beshkgy3LjfMK/x5xNcPMTRvOiiVufQmYncN vrL9eOU7jIR7p+7S2z7LM8QM/i66lBuQi1FJ8hFHPdzX -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:51 2026 by rpki-client