This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VCCai5hKE4XyQWqFov6fc3xa1aY.roa File: VCCai5hKE4XyQWqFov6fc3xa1aY.roa (raw, json) Hash identifier: 34+FtDd+on4O39KtLYdqjlzggjPjtmx3Bfdph3/yB80= Subject key identifier: 54:20:9A:8B:98:4A:13:85:F2:41:6A:85:A2:FE:9F:73:7C:5A:D5:A6 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F79E8C3615BFDCBCB2734A855FCD9 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VCCai5hKE4XyQWqFov6fc3xa1aY.roa Signing time: Fri 02 Jan 2026 02:18:07 +0000 ROA not before: Fri 02 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 45.130.77.0/24 maxlen: 24 45.130.78.0/24 maxlen: 24 185.124.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:79:e8:c3:61:5b:fd:cb:cb:27:34:a8:55:fc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54209a8b984a1385f2416a85a2fe9f737c5ad5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:bb:ae:dd:e7:7d:f9:0a:4c:9e:37:8e:39: c6:d9:6e:c3:44:35:31:17:67:b6:f2:dd:40:34:61: c7:ec:a3:1b:f2:5f:fd:df:a3:dd:21:c6:19:0a:01: 17:70:af:e6:d5:4e:9d:8a:65:f9:ad:af:17:c2:00: 96:c9:9e:ee:16:87:ac:24:93:5c:ee:f5:5c:e4:28: ec:cf:3b:d1:b9:9a:58:bb:dd:a0:8d:3a:4a:a9:f6: d5:42:6c:41:69:2c:ca:cf:d2:91:48:6c:c0:e9:97: 24:b0:8d:b2:c4:8c:0e:4e:4b:39:c2:4e:8a:df:19: c3:77:8f:6d:96:40:be:29:e2:a9:81:ce:34:f3:a5: 76:cf:e7:08:b1:09:e4:46:a2:93:7c:ad:28:04:ed: 37:6b:81:52:7d:ec:cb:fc:95:73:05:26:59:b7:1b: aa:e7:9c:ec:6a:70:2c:6f:43:73:45:55:b5:23:32: 49:97:aa:f4:11:a1:fc:c0:d4:c8:34:f9:57:82:c1: 96:f3:6f:53:7e:fe:84:a9:8e:ca:db:b8:65:e6:44: c8:7c:01:6f:d7:b9:65:e7:c3:dd:a1:2c:05:76:28: f7:d6:b0:ab:fd:4f:cb:34:ed:21:56:c6:83:37:7a: 5c:70:18:72:bf:e9:8c:44:5e:7a:e0:78:4d:4a:83: aa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:9A:8B:98:4A:13:85:F2:41:6A:85:A2:FE:9F:73:7C:5A:D5:A6 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VCCai5hKE4XyQWqFov6fc3xa1aY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.77.0-45.130.78.255 185.124.241.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:cf:c6:ff:aa:b2:a2:58:8c:75:54:73:0b:95:68:06:9b:be: b9:d7:e0:72:51:d4:ff:cb:ad:5a:7b:b4:77:9a:c5:95:68:9d: e7:37:58:ad:f9:50:fd:79:e6:33:76:fb:12:bf:8b:c6:58:f8: f1:54:c3:a2:b2:4c:87:06:ff:78:e2:af:2d:cf:04:8a:02:88: 68:7f:56:db:c1:31:20:84:48:ca:18:a5:02:0a:10:83:f6:e3: b5:2a:fc:cf:94:78:91:38:72:a9:7c:c1:1e:85:2e:0c:49:7a: ef:7e:b3:cd:e4:4b:a0:08:62:d1:cf:48:2b:c1:29:04:36:96: 6d:b6:c1:1b:5d:1f:b3:ee:96:55:86:ec:cc:07:f5:41:b0:84: 91:0b:11:b7:46:ee:a8:df:e2:d7:f7:bc:46:70:84:c8:79:0e: 5d:69:13:32:48:14:e4:82:d5:36:24:bc:8e:5c:03:4c:09:58: e7:21:31:5e:a7:54:b7:db:ba:ec:f8:d0:6d:d2:a6:a1:09:ca: c6:f5:c6:3d:25:34:a5:07:59:bd:7f:4a:67:e0:64:49:b5:27: ea:a3:6f:06:76:18:be:f0:24:51:75:92:5b:df:51:6b:6d:4a: a2:83:ce:cb:55:75:48:cd:9c:11:f8:eb:6a:d7:31:59:5b:45: be:2f:a6:b7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8f3now2Fb/cvLJzSoVfzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDIwOWE4Yjk4NGExMzg1ZjI0MTZhODVhMmZlOWY3MzdjNWFkNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyS7rt3nffkKTJ43jjnG2W7DRDUx F2e28t1ANGHH7KMb8l/936PdIcYZCgEXcK/m1U6dimX5ra8XwgCWyZ7uFoesJJNc 7vVc5CjszzvRuZpYu92gjTpKqfbVQmxBaSzKz9KRSGzA6ZcksI2yxIwOTks5wk6K 3xnDd49tlkC+KeKpgc4086V2z+cIsQnkRqKTfK0oBO03a4FSfezL/JVzBSZZtxuq 55zsanAsb0NzRVW1IzJJl6r0EaH8wNTINPlXgsGW829Tfv6EqY7K27hl5kTIfAFv 17ll58PdoSwFdij31rCr/U/LNO0hVsaDN3pccBhyv+mMRF564HhNSoOq8QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFQgmouYShOF8kFqhaL+n3N8WtWmMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvVkNDYWk1aEtFNFh5UVdxRm92NmZjM3hhMWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtgk0D BAAtgk4DBAC5fPEwDQYJKoZIhvcNAQELBQADggEBAF3Pxv+qsqJYjHVUcwuVaAab vrnX4HJR1P/LrVp7tHeaxZVonec3WK35UP155jN2+xK/i8ZY+PFUw6KyTIcG/3ji ry3PBIoCiGh/VtvBMSCESMoYpQIKEIP247Uq/M+UeJE4cql8wR6FLgxJeu9+s83k S6AIYtHPSCvBKQQ2lm22wRtdH7PullWG7MwH9UGwhJELEbdG7qjf4tf3vEZwhMh5 Dl1pEzJIFOSC1TYkvI5cA0wJWOchMV6nVLfbuuz40G3SpqEJysb1xj0lNKUHWb1/ SmfgZEm1J+qjbwZ2GL7wJFF1klvfUWttSqKDzstVdUjNnBH462rXMVlbRb4vprc= -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:24 2026 by rpki-client