This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/VQ1ZwOAbW4MS7xGndSVhitQi4Xs.roa
File: VQ1ZwOAbW4MS7xGndSVhitQi4Xs.roa (raw, json)
Hash identifier: oJkOn3Ta/qcPYaOJNNPCoBCLyVWoWrgC98ecap5l1lY=
Subject key identifier: 55:0D:59:C0:E0:1B:5B:83:12:EF:11:A7:75:25:61:8A:D4:22:E1:7B
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 019B7FF18C5317734C6566BA4FC878359B7C
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/VQ1ZwOAbW4MS7xGndSVhitQi4Xs.roa
Signing time: Fri 02 Jan 2026 18:21:35 +0000
ROA not before: Fri 02 Jan 2026 18:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 193.56.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:8c:53:17:73:4c:65:66:ba:4f:c8:78:35:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Jan 2 18:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=550d59c0e01b5b8312ef11a77525618ad422e17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:de:73:5b:f3:8e:ca:b4:eb:b0:52:f7:88:
37:bf:41:61:29:8f:f9:06:0b:3a:2c:78:c6:26:f9:
78:50:90:14:03:2f:82:58:79:88:98:c6:2e:fd:35:
92:66:cc:d2:91:f6:99:9f:54:14:37:b4:49:24:84:
87:83:73:64:ee:3e:9d:c8:a7:f9:ca:ce:88:02:36:
cb:7d:b0:34:e2:6c:13:9d:d1:db:2d:ec:e8:c5:cd:
68:30:1d:72:32:6a:79:5d:19:22:b2:3f:8a:e5:46:
ad:91:fb:ae:94:8c:c0:2f:5a:1d:e6:60:79:47:a5:
c8:23:1f:53:66:f3:62:63:01:e5:cd:34:2d:5b:d3:
08:0d:fe:48:06:80:20:0a:83:a1:02:6a:2b:0e:b7:
a9:d9:25:20:d3:6b:d6:b8:6b:23:63:94:6f:10:86:
75:55:81:24:ae:32:95:89:10:34:7c:7d:8b:b4:97:
be:eb:17:78:41:39:63:98:4c:24:c8:c3:0e:0f:3c:
df:0d:a6:fe:e6:72:ef:5b:73:22:f5:50:66:09:72:
c5:ee:40:af:cc:22:49:b2:1f:55:fa:65:47:f7:c6:
45:e9:b7:8a:ac:55:b5:fc:51:fb:1c:99:79:c0:c3:
59:fe:bf:95:36:8b:f9:d2:49:38:95:0c:b7:9f:bd:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:59:C0:E0:1B:5B:83:12:EF:11:A7:75:25:61:8A:D4:22:E1:7B
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/VQ1ZwOAbW4MS7xGndSVhitQi4Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:35:77:ac:a0:1d:75:61:76:cc:32:3e:48:9b:d9:30:98:cd:
70:e9:27:65:bf:f8:e0:18:81:58:f1:0c:80:bf:9a:4f:bc:4f:
5b:22:29:8c:29:cc:d0:0f:10:e1:e4:61:01:20:1a:1f:9d:49:
18:73:6d:7a:19:32:97:20:56:e6:9c:0c:42:48:e6:55:24:c9:
2c:60:21:f5:a2:7f:f8:0d:39:5c:56:09:de:f8:d9:d8:b7:c4:
b9:1b:0a:97:a1:9c:b2:bb:9f:e9:5f:ae:3a:97:b4:79:4d:81:
5c:b2:7c:30:6b:fb:6c:62:ab:8d:62:86:c9:6a:d2:67:11:36:
d6:c9:10:e4:e3:89:65:ca:9e:bd:99:80:14:c1:ff:c3:a7:9b:
a9:49:17:dc:38:ad:2c:bc:e3:69:d1:94:5e:b3:de:93:aa:d2:
50:7b:a9:8a:d7:fc:7f:62:a4:8e:49:d8:79:f4:9a:7a:6f:5d:
80:d4:d0:a5:70:e6:ad:52:c5:5b:dc:c9:01:41:b4:85:d2:d4:
b8:f5:5c:19:8a:1b:d3:2d:01:02:44:ef:00:24:19:d4:78:2b:
0a:47:72:9d:f1:f4:bb:c4:28:bb:0c:47:4e:11:60:87:4a:0a:
66:7f:6e:f8:0b:2d:78:5f:7a:e3:05:9b:a1:28:2a:12:25:70:
bd:34:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:21 2026 by rpki-client