This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VcwLdmUrxVs9I4vvVqLLDXeLRDo.roa File: VcwLdmUrxVs9I4vvVqLLDXeLRDo.roa (raw, json) Hash identifier: bQfjRv5z0TMtG6vUX2eDdlGLNf/xgXRestZiFlmRZK8= Subject key identifier: 55:CC:0B:76:65:2B:C5:5B:3D:23:8B:EF:56:A2:CB:0D:77:8B:44:3A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B886CF121192EEBAA77F95B286CF1A654 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VcwLdmUrxVs9I4vvVqLLDXeLRDo.roa Signing time: Sun 04 Jan 2026 09:53:19 +0000 ROA not before: Sun 04 Jan 2026 09:53:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215672 IP address blocks: 151.242.10.0/24 maxlen: 24 151.243.22.0/24 maxlen: 24 151.243.25.0/24 maxlen: 24 151.247.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:88:6c:f1:21:19:2e:eb:aa:77:f9:5b:28:6c:f1:a6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 4 09:53:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55cc0b76652bc55b3d238bef56a2cb0d778b443a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:f0:95:fa:0f:d1:45:1f:bc:cb:2a:ff:ce: cd:8c:de:04:69:c3:fc:ea:ee:e1:b2:8d:6d:fe:42: aa:9b:66:5f:7b:24:3b:75:72:6e:c1:9c:ed:c6:d2: 61:80:a7:ae:e7:99:59:2c:f7:da:7b:8a:10:9f:78: b7:63:33:4c:0c:60:8b:87:7d:e9:13:62:97:3c:83: cf:90:95:8a:eb:a0:85:9c:2e:33:11:fb:67:32:36: 70:8f:85:3e:77:40:4e:fd:4f:0b:73:04:f6:4c:fe: 5b:e7:11:c8:bd:ef:fe:a4:f8:ea:9d:b3:e5:75:c8: d3:d1:36:fc:b4:c8:81:c4:51:72:b1:e5:47:2e:f6: 34:86:84:f6:a7:bd:ef:54:52:d4:ba:2c:f5:99:7d: 89:16:87:0e:14:c8:3a:93:fb:3a:3f:52:c2:43:ac: 63:73:9b:60:dd:84:9e:54:a4:c4:04:7b:3d:a3:82: e6:42:6f:a2:7f:b2:a3:8c:dc:9e:d0:77:1f:bb:7d: 70:40:e2:78:ab:f1:4c:bf:9f:f7:1a:a9:8a:40:e1: a3:e6:a7:a6:0c:5a:4e:a0:c3:7d:a5:dc:df:57:1c: 2c:af:3d:a4:78:c9:fd:c6:95:da:e3:05:a9:f6:22: 01:ed:23:77:20:d3:fd:25:53:24:78:cc:e8:cc:31: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CC:0B:76:65:2B:C5:5B:3D:23:8B:EF:56:A2:CB:0D:77:8B:44:3A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VcwLdmUrxVs9I4vvVqLLDXeLRDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.10.0/24 151.243.22.0/24 151.243.25.0/24 151.247.241.0/24 Signature Algorithm: sha256WithRSAEncryption a0:3d:5f:49:96:db:a5:d1:9f:65:69:d2:85:6f:17:a7:6b:e8: 8e:ec:08:d4:12:f7:c1:d2:dd:cd:6b:cb:c8:54:9d:9b:d0:c3: 2d:d5:de:a0:84:10:f2:92:df:0f:af:6c:5b:93:36:cc:0e:87: 1a:3c:49:77:0b:d0:5c:fe:3e:f2:61:cc:18:2d:44:19:a9:ce: e8:03:7b:e7:dd:87:e7:25:87:99:df:f3:a6:1c:3b:a9:2f:42: 45:7c:37:53:5d:a6:06:30:7d:18:f8:38:36:57:cd:fa:69:59: 0f:ed:5f:ac:13:55:fd:8a:0c:5c:b8:76:2c:0c:94:91:b1:b1: 0b:9d:30:3c:b6:1f:eb:ba:b0:47:c3:ce:51:a3:e6:ae:98:26: 8c:1a:23:97:b7:a3:3d:04:19:9b:55:d3:9f:92:73:60:fb:a0: a6:eb:29:75:f9:28:2d:40:f4:1a:a7:ba:48:c0:6e:1f:12:e2: ea:d3:00:fe:b1:51:ba:04:d9:05:96:33:31:ff:0e:c3:20:f3: 5f:f3:a9:99:ae:a2:d4:b2:83:48:86:01:8a:04:14:6e:ad:be: f5:44:6e:f6:54:5d:38:c4:c2:88:a7:02:76:23:a7:c4:d2:19: 00:a8:e6:b5:31:9e:32:f0:2e:2b:ab:56:0a:33:f2:b0:b0:49: 38:89:de:af -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuIbPEhGS7rqnf5Wyhs8aZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTA0MDk1MzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWNjMGI3NjY1MmJjNTViM2QyMzhiZWY1NmEyY2IwZDc3OGI0NDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA277wlfoP0UUfvMsq/87NjN4EacP8 6u7hso1t/kKqm2ZfeyQ7dXJuwZztxtJhgKeu55lZLPfae4oQn3i3YzNMDGCLh33p E2KXPIPPkJWK66CFnC4zEftnMjZwj4U+d0BO/U8LcwT2TP5b5xHIve/+pPjqnbPl dcjT0Tb8tMiBxFFyseVHLvY0hoT2p73vVFLUuiz1mX2JFocOFMg6k/s6P1LCQ6xj c5tg3YSeVKTEBHs9o4LmQm+if7KjjNye0Hcfu31wQOJ4q/FMv5/3GqmKQOGj5qem DFpOoMN9pdzfVxwsrz2keMn9xpXa4wWp9iIB7SN3INP9JVMkeMzozDHcAwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFXMC3ZlK8VbPSOL71aiyw13i0Q6MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVmN3TGRtVXJ4VnM5STR2dlZxTExEWGVMUkRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/IKAwQA l/MWAwQAl/MZAwQAl/fxMA0GCSqGSIb3DQEBCwUAA4IBAQCgPV9Jltul0Z9ladKF bxena+iO7AjUEvfB0t3Na8vIVJ2b0MMt1d6ghBDykt8Pr2xbkzbMDocaPEl3C9Bc /j7yYcwYLUQZqc7oA3vn3YfnJYeZ3/OmHDupL0JFfDdTXaYGMH0Y+Dg2V836aVkP 7V+sE1X9igxcuHYsDJSRsbELnTA8th/rurBHw85Ro+aumCaMGiOXt6M9BBmbVdOf knNg+6Cm6yl1+SgtQPQap7pIwG4fEuLq0wD+sVG6BNkFljMx/w7DIPNf86mZrqLU soNIhgGKBBRurb71RG72VF04xMKIpwJ2I6fE0hkAqOa1MZ4y8C4rq1YKM/KwsEk4 id6v -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:23 2026 by rpki-client