This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VQiCh8yQDUYf-dObKiM3x9QD8U8.roa
File: VQiCh8yQDUYf-dObKiM3x9QD8U8.roa (raw, json)
Hash identifier: faGITpiPRoONqrXX5wKhdsQebLJfXk0SfPLMzAD26s8=
Subject key identifier: 55:08:82:87:CC:90:0D:46:1F:F9:D3:9B:2A:23:37:C7:D4:03:F1:4F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B0A2D27B6C21989801C00ED94E998FBDB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VQiCh8yQDUYf-dObKiM3x9QD8U8.roa
Signing time: Wed 10 Dec 2025 21:31:29 +0000
ROA not before: Wed 10 Dec 2025 21:31:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 85.121.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0a:2d:27:b6:c2:19:89:80:1c:00:ed:94:e9:98:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 10 21:31:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55088287cc900d461ff9d39b2a2337c7d403f14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:96:e2:f0:11:12:75:5d:84:c8:c1:0b:35:
0f:64:0a:75:ed:7d:b9:12:c1:b3:41:9b:fe:d9:c8:
ba:24:45:5e:52:e7:0e:b4:51:95:0e:c0:70:c4:96:
c8:ff:da:63:c8:79:d9:4a:fc:01:1d:52:33:12:d6:
64:a7:f1:c2:bd:f2:f2:54:1d:4a:2b:b2:0d:c0:53:
f5:e9:02:e0:07:d8:67:d9:65:d6:bf:e2:43:bc:b6:
5e:50:8d:6b:95:8f:6e:47:2e:05:20:4f:8a:c1:cb:
24:d5:a1:e5:b6:52:c7:09:2a:80:07:8c:b1:2e:eb:
a7:88:b5:06:33:df:3c:d7:ad:09:fa:c2:8c:d5:0a:
10:4c:c6:5b:88:a7:b7:37:88:10:9a:2d:d9:17:50:
9e:3a:71:09:c4:a5:3d:47:50:34:fa:08:86:b9:e8:
1b:00:d6:0e:db:6b:c1:55:56:4e:e3:27:a8:4b:34:
c8:e0:8c:9c:e7:d9:c0:ab:ab:69:f2:ea:3f:81:93:
e9:0c:81:af:26:8d:69:47:df:88:82:2e:7f:0a:57:
6d:64:31:f5:dc:81:f6:a4:c8:42:93:af:8d:11:0f:
e5:78:52:2e:11:fc:28:30:09:74:04:c9:28:0b:2a:
84:5c:52:33:81:7d:0d:c5:7f:9c:d4:d0:68:51:c2:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:08:82:87:CC:90:0D:46:1F:F9:D3:9B:2A:23:37:C7:D4:03:F1:4F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VQiCh8yQDUYf-dObKiM3x9QD8U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.240.0/24
Signature Algorithm: sha256WithRSAEncryption
47:09:e2:e4:64:18:aa:a5:54:a4:4a:7d:84:b2:80:35:f5:96:
00:7e:cb:9e:e5:82:58:87:76:8e:55:5d:33:fa:67:93:6a:3d:
95:85:b2:99:09:46:d4:16:73:de:32:01:b3:73:cd:81:a1:3d:
44:49:77:29:35:e5:ba:5c:9d:aa:a4:66:f8:73:92:f3:0e:67:
69:0f:b2:4b:58:59:53:3c:0e:76:26:e6:d4:32:c7:18:c2:1d:
b8:92:11:bd:6a:83:5e:82:b6:6e:28:ee:f2:45:44:e8:53:4f:
7d:f7:4d:4d:36:9e:80:c2:97:a7:42:6f:c8:51:d3:52:ea:d0:
36:22:36:58:73:4e:36:e2:5d:d0:7c:55:b3:c9:9f:0a:2f:76:
fa:d7:9d:de:37:35:c2:47:39:f5:83:bd:7e:31:e6:bf:3d:bd:
32:47:b4:ff:92:97:3f:81:9f:b1:7c:2f:48:95:19:25:ba:3b:
6d:4a:ed:f8:da:dc:45:c5:16:8e:08:c3:f0:1a:4e:9b:3d:69:
70:36:c6:e7:11:19:7a:e5:1a:eb:f4:ad:c6:ff:f2:84:12:68:
90:e1:6b:c8:6e:7e:8e:a7:16:ad:72:ea:30:9f:e3:31:4a:f3:
ff:51:d5:08:81:1a:33:5f:fc:b7:a9:4e:fe:ac:e5:38:f6:0b:
8e:cd:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:17:15 2025 by rpki-client