This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vcPicjLC3971OzUxksz_rPxOjKo.roa File: vcPicjLC3971OzUxksz_rPxOjKo.roa (raw, json) Hash identifier: 9sLNfKVTVQIX+c0SthYopTcwXu3FO72F+HJ7Ncd1hn8= Subject key identifier: BD:C3:E2:72:32:C2:DF:DE:F5:3B:35:31:92:CC:FF:AC:FC:4E:8C:AA Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F002D9B47FF29F25DE406DC36D7C Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vcPicjLC3971OzUxksz_rPxOjKo.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202010 IP address blocks: 5.1.81.0/24 maxlen: 32 5.1.81.139/32 maxlen: 32 5.1.81.140/32 maxlen: 32 178.251.228.0/24 maxlen: 32 2a01:367:beef::/48 maxlen: 48 2a01:367:dead::/48 maxlen: 48 2a01:367:ffa1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f0:02:d9:b4:7f:f2:9f:25:de:40:6d:c3:6d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdc3e27232c2dfdef53b353192ccffacfc4e8caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:22:cb:38:2c:a6:6c:fa:e4:e3:bb:f2:f5:f9: e0:6c:da:8f:19:85:68:cd:3f:ba:97:d7:97:bd:dd: 59:eb:5d:51:1c:43:28:71:17:e7:49:f6:5d:41:7b: 31:58:04:2c:03:53:c2:df:78:ab:e0:8e:d3:c3:09: 07:31:f8:6e:46:83:b6:a0:70:fd:27:c7:bd:9a:31: c6:3f:d4:9b:43:e6:68:12:42:d2:3c:fd:6d:c1:8a: 31:f5:58:0a:7d:f5:e0:1a:2d:eb:95:74:47:26:4a: d6:bf:6e:0c:03:03:15:ad:b9:74:5b:4b:a3:45:2b: b8:bb:ca:32:02:e4:63:05:dc:06:46:b2:4e:31:b3: c0:44:51:1a:e7:1d:d4:f7:73:c7:5f:8d:20:a1:74: 33:0a:4a:c4:c1:0e:8f:10:f3:db:1d:a5:22:b6:35: 22:f8:35:6f:41:f4:e0:9e:72:57:e4:69:bc:03:b9: d9:f9:fa:b2:94:63:74:64:c8:86:97:47:c5:33:b4: d1:6c:27:2c:42:b4:5d:0f:db:0b:0d:de:ba:e2:6d: 99:7e:1e:8e:70:16:68:45:ea:61:c0:bf:5d:dd:41: 2a:c8:4a:b8:5d:e5:32:df:00:da:b2:10:2f:91:6d: 1d:e1:da:ab:d3:5b:a7:35:5e:a2:8d:b0:3f:b6:0c: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C3:E2:72:32:C2:DF:DE:F5:3B:35:31:92:CC:FF:AC:FC:4E:8C:AA X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/vcPicjLC3971OzUxksz_rPxOjKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.81.0/24 178.251.228.0/24 IPv6: 2a01:367:beef::/48 2a01:367:dead::/48 2a01:367:ffa1::/48 Signature Algorithm: sha256WithRSAEncryption 23:ec:88:c5:e3:fd:c9:04:f8:fe:a8:4c:58:5a:be:7b:08:a5: b1:f8:27:f5:c3:27:ee:ef:19:ed:5d:60:b8:a4:93:96:98:bf: 4d:29:ca:4b:c4:6c:05:dd:61:12:f1:44:de:1c:fb:d0:87:6b: 33:a6:74:44:3f:30:95:f7:72:ce:22:5c:e6:50:90:8a:3f:4e: 38:ea:87:fe:88:39:9b:b5:ef:4e:08:c9:0a:75:39:81:2e:27: 8a:e2:67:ec:d8:ce:98:f2:09:36:57:e1:cd:22:50:77:0a:3b: 31:88:f7:bb:73:64:2f:dc:bb:b2:70:1d:56:c4:ec:57:d4:f8: 27:0c:d9:f5:ea:61:39:49:6e:52:38:18:de:2f:c0:30:20:ea: d1:e1:e8:59:9d:d8:03:4d:a9:91:34:8f:24:db:90:44:f6:fd: 17:9a:6e:0f:56:2a:cb:16:6b:11:dc:3e:b5:4e:b2:90:fa:20: 56:be:64:5b:e7:59:86:5e:93:ff:ea:44:82:ca:fa:a6:95:01: 48:2f:51:44:d3:65:d9:36:5e:1e:62:e1:e4:4c:bd:2f:1c:ce: 5f:00:f9:94:7f:79:aa:11:71:33:e3:ad:4f:d1:29:01:5a:2a: ed:33:20:47:4b:76:9f:3b:6e:af:74:af:5e:8d:2b:08:ab:95: 78:71:47:88 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt3WPAC2bR/8p8l3kBtw218MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGMzZTI3MjMyYzJkZmRlZjUzYjM1MzE5MmNjZmZhY2ZjNGU4Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CLLOCymbPrk47vy9fngbNqPGYVo zT+6l9eXvd1Z611RHEMocRfnSfZdQXsxWAQsA1PC33ir4I7TwwkHMfhuRoO2oHD9 J8e9mjHGP9SbQ+ZoEkLSPP1twYox9VgKffXgGi3rlXRHJkrWv24MAwMVrbl0W0uj RSu4u8oyAuRjBdwGRrJOMbPARFEa5x3U93PHX40goXQzCkrEwQ6PEPPbHaUitjUi +DVvQfTgnnJX5Gm8A7nZ+fqylGN0ZMiGl0fFM7TRbCcsQrRdD9sLDd664m2Zfh6O cBZoRephwL9d3UEqyEq4XeUy3wDashAvkW0d4dqr01unNV6ijbA/tgw/0QIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFL3D4nIywt/e9Ts1MZLM/6z8ToyqMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvdmNQaWNqTEMzOTcxT3pVeGtzel9yUHhPaktvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzASBAIAATAMAwQABQFRAwQA svvkMCEEAgACMBsDBwAqAQNnvu8DBwAqAQNn3q0DBwAqAQNn/6EwDQYJKoZIhvcN AQELBQADggEBACPsiMXj/ckE+P6oTFhavnsIpbH4J/XDJ+7vGe1dYLikk5aYv00p ykvEbAXdYRLxRN4c+9CHazOmdEQ/MJX3cs4iXOZQkIo/Tjjqh/6IOZu1704IyQp1 OYEuJ4riZ+zYzpjyCTZX4c0iUHcKOzGI97tzZC/cu7JwHVbE7FfU+CcM2fXqYTlJ blI4GN4vwDAg6tHh6Fmd2ANNqZE0jyTbkET2/Reabg9WKssWaxHcPrVOspD6IFa+ ZFvnWYZek//qRILK+qaVAUgvUUTTZdk2Xh5i4eRMvS8czl8A+ZR/eaoRcTPjrU/R KQFaKu0zIEdLdp87bq90r16NKwirlXhxR4g= -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:43 2026 by rpki-client