This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/vItSctoJ56AtMslWFOG7l89nmfU.roa File: vItSctoJ56AtMslWFOG7l89nmfU.roa (raw, json) Hash identifier: Z/6U0iSnVEMndZtAodw8IhLqKEmm432yqbxgy/MWKqY= Subject key identifier: BC:8B:52:72:DA:09:E7:A0:2D:32:C9:56:14:E1:BB:97:CF:67:99:F5 Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Certificate serial: 019B7AC82C0E74F8D4EDD6EB37E2AA4D5D49 Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/vItSctoJ56AtMslWFOG7l89nmfU.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215272 IP address blocks: 45.128.205.0/24 maxlen: 24 155.212.244.0/24 maxlen: 24 185.244.50.0/24 maxlen: 24 185.251.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2c:0e:74:f8:d4:ed:d6:eb:37:e2:aa:4d:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc8b5272da09e7a02d32c95614e1bb97cf6799f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:31:a5:fd:7c:73:48:a5:7f:6b:a1:5d:da: 36:87:65:55:94:d3:11:07:69:cd:3d:9a:a2:7d:b0: 83:bf:bb:0c:68:c2:9b:b3:aa:8d:f2:3e:07:66:4d: 93:b2:82:f4:57:d3:d6:df:1c:88:1b:d5:22:49:33: fb:f8:5f:40:77:e2:84:07:41:9e:f4:ab:fe:e1:93: f2:64:61:88:f0:f8:c1:51:6c:2c:24:db:08:67:97: bc:c5:32:af:f0:37:15:ee:0d:c4:ce:45:d6:76:7a: bb:65:91:20:4b:ef:81:a6:b4:99:80:4c:3a:90:3d: cb:4f:ba:94:f2:1a:09:b2:23:da:cb:58:2f:04:f4: f6:e4:b4:d5:09:20:6a:b7:ea:a1:ea:a7:31:2d:b4: f2:b1:26:bd:fa:ba:08:ba:94:cc:3e:aa:7e:58:db: cc:cd:37:2c:b2:79:2d:dd:1e:69:79:a8:a8:c3:d4: 5a:14:f0:e8:47:d4:c7:d2:28:61:8b:7b:bb:10:45: da:82:aa:89:fd:f4:07:4c:87:1e:d4:b3:f9:a7:1b: 9a:db:91:f5:7f:ab:d1:88:de:53:bf:52:97:f0:48: db:fc:1e:39:f3:2f:c3:2a:d5:b1:df:74:46:d7:18: 6b:10:b8:56:b4:23:06:b6:1a:31:59:c2:6c:74:3b: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8B:52:72:DA:09:E7:A0:2D:32:C9:56:14:E1:BB:97:CF:67:99:F5 X509v3 Authority Key Identifier: keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/vItSctoJ56AtMslWFOG7l89nmfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.205.0/24 155.212.244.0/24 185.244.50.0/24 185.251.38.0/24 Signature Algorithm: sha256WithRSAEncryption 78:d7:a6:d5:3d:29:74:64:c1:71:a2:da:d3:26:4f:52:96:f1: fa:49:69:01:fd:cd:d9:fd:c0:b9:21:dd:72:29:47:4c:09:e7: 67:1a:16:39:82:55:8e:25:16:43:1a:03:9d:6d:63:67:74:97: 3d:f9:20:58:7c:fc:39:e6:c7:3d:91:34:44:f7:ed:84:e0:d4: b0:89:38:5b:74:67:3c:14:9e:a9:22:e3:a7:aa:4d:3d:f5:dc: 4f:7e:7f:89:b8:46:81:5d:f5:7b:30:05:1c:51:d1:49:d5:b0: 17:64:a1:5e:e3:82:9c:67:a0:c3:7f:f1:79:08:50:ce:22:a5: b4:6e:48:1f:29:3b:79:e0:09:96:db:fc:ea:b3:00:a0:13:24: f3:fc:cc:70:ad:c2:94:b5:53:df:48:94:64:dd:93:d1:38:06: 5b:5a:dc:0b:88:7e:03:0c:c4:6a:62:bd:c7:4f:c8:67:e2:a2: b7:f9:d4:71:31:07:a2:32:b6:51:5e:9c:61:30:45:61:cf:15: b1:19:d3:38:f0:4f:22:c9:c8:66:19:5b:d2:c3:5a:83:30:6f: 5b:0c:98:28:b2:7f:bc:f8:e4:83:41:1a:ab:79:fd:86:f5:ef: 52:2c:ad:cb:bd:58:da:e4:de:79:16:0a:29:80:41:f0:2a:91: 95:27:ea:f6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yCwOdPjU7dbrN+KqTV1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMWYxNGQzN2ZiZGM4N2FlN2M5YzdiOTE1M2VhZWE1ZDRj NTU0OWIwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzhiNTI3MmRhMDllN2EwMmQzMmM5NTYxNGUxYmI5N2NmNjc5OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcMxpf18c0ilf2uhXdo2h2VVlNMR B2nNPZqifbCDv7sMaMKbs6qN8j4HZk2TsoL0V9PW3xyIG9UiSTP7+F9Ad+KEB0Ge 9Kv+4ZPyZGGI8PjBUWwsJNsIZ5e8xTKv8DcV7g3EzkXWdnq7ZZEgS++BprSZgEw6 kD3LT7qU8hoJsiPay1gvBPT25LTVCSBqt+qh6qcxLbTysSa9+roIupTMPqp+WNvM zTcssnkt3R5peaiow9RaFPDoR9TH0ihhi3u7EEXagqqJ/fQHTIce1LP5pxua25H1 f6vRiN5Tv1KX8Ejb/B458y/DKtWx33RG1xhrELhWtCMGthoxWcJsdDspHQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLyLUnLaCeegLTLJVhThu5fPZ5n1MB8GA1UdIwQY MBaAFDwfFNN/vch658nHuRU+rqXUxVSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUt ZjFjNmJmMWU0YmE3LzEvdkl0U2N0b0o1NkF0TXNsV0ZPRzdsODlubWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMWI3NGMtMTZhYy00ODMxLWI2YzUtZjFjNmJmMWU0YmE3 LzEvUEI4VTAzLTl5SHJueWNlNUZUNnVwZFRGVkpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYDNAwQA m9T0AwQAufQyAwQAufsmMA0GCSqGSIb3DQEBCwUAA4IBAQB416bVPSl0ZMFxotrT Jk9SlvH6SWkB/c3Z/cC5Id1yKUdMCednGhY5glWOJRZDGgOdbWNndJc9+SBYfPw5 5sc9kTRE9+2E4NSwiThbdGc8FJ6pIuOnqk099dxPfn+JuEaBXfV7MAUcUdFJ1bAX ZKFe44KcZ6DDf/F5CFDOIqW0bkgfKTt54AmW2/zqswCgEyTz/MxwrcKUtVPfSJRk 3ZPROAZbWtwLiH4DDMRqYr3HT8hn4qK3+dRxMQeiMrZRXpxhMEVhzxWxGdM48E8i ychmGVvSw1qDMG9bDJgosn+8+OSDQRqref2G9e9SLK3LvVja5N55FgopgEHwKpGV J+r2 -----END CERTIFICATE-----Generated at Thu Jan 1 22:38:00 2026 by rpki-client