This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/vcwfumVuHHPSt_mnSEc7IYxPCys.roa File: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (raw, json) Hash identifier: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM= Subject key identifier: BD:CC:1F:BA:65:6E:1C:73:D2:B7:F9:A7:48:47:3B:21:8C:4F:0B:2B Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910F31A966ADF451E8EC3C2CBE907B5 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/vcwfumVuHHPSt_mnSEc7IYxPCys.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199438 IP address blocks: 2a0c:4444::/48 maxlen: 48 2a0c:4445::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f3:1a:96:6a:df:45:1e:8e:c3:c2:cb:e9:07:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdcc1fba656e1c73d2b7f9a748473b218c4f0b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:49:b8:5e:b0:d7:dc:dc:d0:30:89:05:7c: fd:76:e2:ce:68:2f:21:76:f1:f9:c0:09:5c:8b:8f: 6f:5f:ac:97:d5:16:c8:b0:20:b5:22:8c:38:cb:95: 70:70:6a:18:53:58:b5:3e:26:a7:e4:9e:03:4e:86: dd:96:bc:16:e2:09:2e:0c:58:fb:d0:4a:f3:1f:68: 79:46:f5:06:c6:04:e3:4d:3d:7c:57:0b:0d:54:5e: 85:cf:fd:eb:51:0d:37:3b:d4:21:d3:5d:67:b1:5a: 39:13:58:8c:73:35:e2:6a:36:fb:2b:83:e4:18:ee: c5:92:8c:70:e2:fb:a4:03:94:d4:0c:c0:e8:86:61: d5:4b:33:f7:b9:73:5f:7f:d6:2a:03:67:5a:dc:b6: 16:a3:88:9d:74:e5:78:5c:4f:90:28:a1:6f:02:2f: be:02:64:54:c9:26:ff:70:5a:23:c1:d9:e6:2b:40: 5b:69:f4:7a:7a:07:03:37:c8:fe:dc:4c:41:22:bb: df:01:ae:b5:4e:5e:35:ba:96:69:23:df:ab:20:ba: 5a:52:88:64:6e:ff:50:c9:93:87:73:da:07:2d:39: 04:c2:de:51:cf:2c:aa:c1:c0:cd:88:23:fe:1d:8b: ad:11:47:f1:d9:9e:57:2b:7c:f4:03:5a:60:24:08: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CC:1F:BA:65:6E:1C:73:D2:B7:F9:A7:48:47:3B:21:8C:4F:0B:2B X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/vcwfumVuHHPSt_mnSEc7IYxPCys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:4444::/48 2a0c:4445::/48 Signature Algorithm: sha256WithRSAEncryption 84:b8:72:9c:b3:09:be:4f:05:8c:a1:e4:d7:7a:1b:2f:0d:26: 1c:db:d6:70:87:42:21:9d:a7:2c:44:f1:b2:d0:52:bc:28:9a: cd:6b:6b:e6:de:c6:39:66:bc:de:85:8d:1b:5e:a2:95:23:b3: 03:9b:33:c5:89:b4:85:f0:45:d7:eb:ca:07:8f:3f:70:da:38: c7:92:3a:4c:31:14:dc:66:6e:7e:4d:bc:c8:a2:74:87:5b:d7: dd:52:91:3b:3a:e0:7c:44:0e:7e:57:a1:99:c6:d2:d5:78:86: 28:6d:9c:26:ff:36:84:ce:75:b3:6f:41:c1:1b:e4:15:6b:4e: 3b:f3:d7:54:d3:7e:a5:3e:a9:5d:7d:97:e9:bf:60:e0:21:70: 4e:53:3d:3a:94:8b:19:d1:c1:4b:d4:b1:13:69:29:73:1e:ed: 76:ec:bf:57:5d:b0:9b:fa:45:3f:ae:af:d0:5e:b3:df:c3:8e: 79:29:98:82:ce:3f:f4:4f:72:c3:5e:81:2f:ee:6b:3f:46:2c: 79:37:7d:e5:61:d0:9d:55:e9:a1:e7:f2:8c:f6:41:37:e6:e5: c5:e2:a8:82:9a:66:39:ab:6e:79:e4:05:59:7d:b6:45:0b:7a: 63:dd:5f:86:d2:82:c8:b8:99:1a:fa:d9:93:4d:e3:26:5e:c2: 30:33:97:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EPMalmrfRR6Ow8LL6Qe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGNjMWZiYTY1NmUxYzczZDJiN2Y5YTc0ODQ3M2IyMThjNGYwYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq1JuF6w19zc0DCJBXz9duLOaC8h dvH5wAlci49vX6yX1RbIsCC1Iow4y5VwcGoYU1i1Pian5J4DTobdlrwW4gkuDFj7 0ErzH2h5RvUGxgTjTT18VwsNVF6Fz/3rUQ03O9Qh011nsVo5E1iMczXiajb7K4Pk GO7Fkoxw4vukA5TUDMDohmHVSzP3uXNff9YqA2da3LYWo4iddOV4XE+QKKFvAi++ AmRUySb/cFojwdnmK0BbafR6egcDN8j+3ExBIrvfAa61Tl41upZpI9+rILpaUohk bv9QyZOHc9oHLTkEwt5RzyyqwcDNiCP+HYutEUfx2Z5XK3z0A1pgJAgDWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFL3MH7plbhxz0rf5p0hHOyGMTwsrMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvdmN3ZnVtVnVISFBTdF9tblNFYzdJWXhQQ3lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgxERAAA AwcAKgxERQAAMA0GCSqGSIb3DQEBCwUAA4IBAQCEuHKcswm+TwWMoeTXehsvDSYc 29Zwh0IhnacsRPGy0FK8KJrNa2vm3sY5ZrzehY0bXqKVI7MDmzPFibSF8EXX68oH jz9w2jjHkjpMMRTcZm5+TbzIonSHW9fdUpE7OuB8RA5+V6GZxtLVeIYobZwm/zaE znWzb0HBG+QVa04789dU036lPqldfZfpv2DgIXBOUz06lIsZ0cFL1LETaSlzHu12 7L9XXbCb+kU/rq/QXrPfw455KZiCzj/0T3LDXoEv7ms/Rix5N33lYdCdVemh5/KM 9kE35uXF4qiCmmY5q2555AVZfbZFC3pj3V+G0oLIuJka+tmTTeMmXsIwM5eD -----END CERTIFICATE-----Generated at Sun Jan 25 15:00:57 2026 by rpki-client