This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/VG14tR93nrCtNgYNhIfw5ASK5b8.roa
File: VG14tR93nrCtNgYNhIfw5ASK5b8.roa (raw, json)
Hash identifier: Tcz678dunbruTrkYTbdv98GThScQ5vNKS1fF8cX93JE=
Subject key identifier: 54:6D:78:B5:1F:77:9E:B0:AD:36:06:0D:84:87:F0:E4:04:8A:E5:BF
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 019B7B354555C1438D7D955BCD486DB06F9E
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/VG14tR93nrCtNgYNhIfw5ASK5b8.roa
Signing time: Thu 01 Jan 2026 20:17:27 +0000
ROA not before: Thu 01 Jan 2026 20:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8430
IP address blocks: 195.49.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:45:55:c1:43:8d:7d:95:5b:cd:48:6d:b0:6f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jan 1 20:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=546d78b51f779eb0ad36060d8487f0e4048ae5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:39:cf:14:44:7c:7a:6e:88:12:1f:9e:ca:
3d:f3:6f:53:bf:20:7f:77:63:07:5c:90:ee:38:d4:
cc:1f:0e:25:b3:79:bf:c7:10:b4:05:4c:50:ec:50:
b2:54:c8:b9:8d:ea:be:ba:1c:b7:79:b7:5d:04:6d:
40:49:75:f8:80:ef:eb:ae:2c:6d:9a:53:55:ae:e9:
f8:47:de:35:b2:7c:9e:14:f3:54:3c:6e:1b:4b:56:
98:55:ab:10:b7:8a:70:e5:f0:e3:8c:97:fb:d8:91:
0c:72:15:95:9d:85:42:e2:0f:c5:5e:70:2e:57:13:
21:10:bc:6d:99:99:4e:be:27:84:17:22:59:21:9f:
5f:98:40:f6:eb:72:cc:70:0b:1e:08:9e:d7:0f:93:
d3:4f:4e:c2:71:6f:b2:6c:70:75:d8:b6:2f:6f:62:
45:94:e6:3e:c6:7c:d2:a6:65:89:75:9a:7e:f5:af:
8b:a9:81:1b:ce:b5:79:be:fd:e7:64:b0:b4:66:41:
cd:9f:ea:91:eb:79:ae:d6:97:dd:f0:ad:c5:de:d2:
27:df:1e:8b:6d:98:0a:e0:ec:94:03:17:ca:0e:70:
1a:58:d2:c2:f6:85:81:e5:0a:de:ab:ae:cb:57:24:
f8:1f:81:55:01:d2:3a:6c:23:ee:ad:29:03:ef:6b:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6D:78:B5:1F:77:9E:B0:AD:36:06:0D:84:87:F0:E4:04:8A:E5:BF
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/VG14tR93nrCtNgYNhIfw5ASK5b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.208.0/24
Signature Algorithm: sha256WithRSAEncryption
85:08:0d:aa:2f:f3:f1:8a:6d:20:33:9d:42:57:bf:63:f4:17:
08:a7:ac:89:bb:a1:e0:8f:c7:14:2a:01:28:4c:5a:e0:9a:b2:
5c:58:2d:ac:45:97:27:0e:7b:23:71:d2:22:c9:b3:7a:79:8a:
b8:b4:41:dd:33:51:38:b8:c4:b6:df:b0:92:fb:39:ae:37:9f:
86:86:41:2c:a9:5b:5d:c1:85:ac:6b:d9:67:88:29:64:5c:14:
28:79:d3:70:a8:ae:50:39:84:e1:f4:3e:57:3e:a3:2c:a2:14:
04:f2:78:2b:11:7c:18:63:6f:43:23:6e:e8:cd:d1:a5:ee:2d:
27:4d:57:31:dc:be:50:38:7a:44:63:01:9c:0b:29:43:4b:c4:
b9:15:2b:54:cf:09:d0:57:6d:54:9a:90:ed:69:e6:1f:05:5b:
5f:63:76:0b:c5:4d:5d:d4:ba:5d:e1:3c:c2:f7:c2:5b:3a:5c:
af:fb:c9:cd:56:9a:2a:15:7d:df:4d:df:ad:f7:60:c8:3f:d5:
24:b2:81:41:16:ef:e0:0e:65:c5:2a:23:bf:7c:a1:fc:d8:76:
f4:36:9e:16:c7:ef:f5:e8:6b:ad:36:c8:a3:92:44:47:9a:56:
6f:b1:98:7d:f5:5d:89:56:6d:ad:3d:56:43:f1:62:3e:02:27:
f2:73:9f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:23:34 2026 by rpki-client