This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/vr-KcEvzFupIdELOEs6eVsczP7A.roa
File: vr-KcEvzFupIdELOEs6eVsczP7A.roa (raw, json)
Hash identifier: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=
Subject key identifier: BE:BF:8A:70:4B:F3:16:EA:48:74:42:CE:12:CE:9E:56:C7:33:3F:B0
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 019B7F15DD8FBA7F435960632EE0759FEFF0
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/vr-KcEvzFupIdELOEs6eVsczP7A.roa
Signing time: Fri 02 Jan 2026 14:21:38 +0000
ROA not before: Fri 02 Jan 2026 14:21:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211167
IP address blocks: 195.35.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:dd:8f:ba:7f:43:59:60:63:2e:e0:75:9f:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Jan 2 14:21:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bebf8a704bf316ea487442ce12ce9e56c7333fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:fc:b0:7e:06:29:09:3f:d1:f5:b5:5a:f5:
c0:46:23:6c:3b:bd:58:95:44:ce:e3:21:88:51:95:
7b:c4:24:97:9f:6a:db:fb:7e:e1:f6:f2:97:99:d9:
df:74:4e:1a:fc:3f:9e:8d:ba:4e:17:9b:5d:73:43:
35:10:41:d4:d1:21:47:cf:d9:b0:4f:71:da:a5:ea:
b3:d0:66:2e:7a:aa:7b:b3:de:f8:20:7c:cd:a6:c8:
37:23:f1:cc:a6:09:22:0f:61:89:75:ec:99:db:1a:
c7:46:bf:e1:e7:f0:c0:4d:7e:88:82:2d:86:31:3d:
7e:5e:1e:88:39:42:29:79:87:cc:5a:45:e6:e4:f6:
3b:d9:7c:9b:47:b8:7d:26:11:ef:e9:e9:dc:53:f0:
11:b1:d8:df:b9:a6:58:8d:81:e5:56:82:04:1b:0e:
f4:d6:62:e6:5a:00:11:ba:bd:e9:8b:15:f0:ac:c9:
f1:69:04:27:87:2d:51:e7:23:3c:22:eb:b8:43:6e:
1f:c8:86:90:2f:d7:51:93:ba:2d:73:ad:90:76:be:
7a:eb:56:4c:16:ce:40:9c:5a:21:34:27:b8:54:72:
c6:af:3e:43:73:37:8c:a8:e4:4b:0d:e8:16:d0:03:
53:62:e4:b6:ba:1e:b4:52:80:f0:20:21:04:45:04:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:8A:70:4B:F3:16:EA:48:74:42:CE:12:CE:9E:56:C7:33:3F:B0
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/vr-KcEvzFupIdELOEs6eVsczP7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fd:be:35:8c:dc:a9:86:df:54:ca:83:e0:0c:c8:ce:c0:ae:
57:0a:83:a1:d2:38:13:4a:ea:df:97:7d:c7:98:f3:b1:5e:96:
f9:1e:f9:31:a5:df:c5:97:9a:65:cf:18:1b:70:8f:f7:56:e2:
cb:c2:7f:d6:b6:c2:92:97:5e:21:50:ae:af:cf:a1:e3:8d:0e:
eb:cb:79:bf:f4:b4:12:d8:32:8e:78:b5:51:8e:d8:b4:61:40:
8e:36:57:16:c5:48:70:c3:08:84:d7:9d:4c:54:9f:19:c0:59:
e7:58:d4:3e:9f:04:99:c1:51:d4:2c:bf:5d:1f:ec:04:c2:6e:
2b:dc:40:86:9a:4a:d9:93:59:18:20:b9:7c:86:88:29:f4:59:
20:7c:2f:9b:e8:a8:11:60:33:64:a0:2c:a0:e8:d2:3d:7c:c0:
ea:8c:39:b3:da:9d:64:ff:31:41:8c:48:3d:09:74:7a:2b:ea:
05:25:27:35:33:ba:77:f2:89:ed:0b:61:6b:2b:50:45:85:eb:
93:91:7f:55:30:c2:52:eb:56:8d:6b:7b:b4:5d:ea:ac:18:5e:
59:01:af:70:48:a7:3b:33:48:51:68:c5:8e:2a:e6:0d:b0:53:
a5:cc:86:b7:f8:9a:9d:33:ab:75:c8:62:47:e2:fd:87:df:4a:
c3:0b:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:15 2026 by rpki-client