This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa
File: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (raw, json)
Hash identifier: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=
Subject key identifier: 55:AB:F5:55:ED:15:FF:06:0B:5E:8A:7F:17:EB:60:D7:9F:AC:F4:29
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019B7F84B61B5B768BB816D546DFCA7F08F0
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa
Signing time: Fri 02 Jan 2026 16:22:42 +0000
ROA not before: Fri 02 Jan 2026 16:22:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213577
IP address blocks: 193.53.249.0/24 maxlen: 24
193.53.254.0/24 maxlen: 24
193.56.14.0/24 maxlen: 24
193.56.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:b6:1b:5b:76:8b:b8:16:d5:46:df:ca:7f:08:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jan 2 16:22:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55abf555ed15ff060b5e8a7f17eb60d79facf429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:08:1c:20:65:1e:7c:c3:32:37:64:be:8c:
8e:ff:d4:e9:a4:52:cc:ba:92:66:7a:44:d4:f3:91:
30:66:f0:f9:90:ba:b0:1e:09:4e:b5:8a:0c:94:0c:
23:b0:5f:e6:56:54:8a:11:7b:fc:6c:06:4a:bb:51:
c1:b6:8d:6b:60:ff:3c:c0:b3:65:39:30:dd:3b:8b:
75:ee:30:28:d5:69:85:5b:73:42:83:08:83:dc:27:
b2:0b:94:c9:f4:19:4a:c4:24:4d:3e:46:cd:24:9b:
c0:a8:b4:c1:72:cd:93:ae:1a:22:90:86:85:c5:f5:
35:72:8c:6c:14:6e:a2:af:8b:d3:0c:89:80:c9:6b:
1e:f6:98:e9:47:e4:33:18:d3:1a:99:55:7e:c8:9a:
36:88:71:58:c3:67:2a:00:1c:03:6a:c5:50:d0:8f:
49:19:eb:5b:fe:cf:60:f0:e2:eb:42:34:44:9a:61:
a5:72:6a:be:1b:17:5b:d8:f6:e7:e6:78:49:01:7e:
72:dc:fa:af:4e:2b:4f:28:b3:41:61:b7:b7:10:13:
d0:1b:44:5a:c5:8f:c7:30:a7:be:8a:a8:00:71:0f:
fa:4b:06:08:1e:37:51:9c:0d:46:57:06:62:43:0c:
8a:4c:cd:0b:e7:7a:df:65:33:4d:d8:95:29:bb:c4:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:F5:55:ED:15:FF:06:0B:5E:8A:7F:17:EB:60:D7:9F:AC:F4:29
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.249.0/24
193.53.254.0/24
193.56.14.0/24
193.56.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e3:cf:33:f4:ae:56:7a:75:fa:59:fc:80:97:9c:52:c0:d2:
75:69:64:6a:5f:88:39:e3:5a:96:e7:b8:f5:81:0f:bc:f8:a3:
37:ff:31:2b:42:53:38:a6:c1:4e:2e:7c:8b:75:c0:cb:b8:35:
0a:1e:a3:5f:ef:c8:dd:ae:4c:53:49:ad:b3:fe:4b:f2:59:6e:
f9:53:4f:cc:8f:1b:ed:66:54:91:c3:ae:7a:07:ea:d5:ea:17:
d7:c5:f9:9e:53:85:5c:21:45:81:30:70:70:69:54:a2:cc:6e:
46:fb:82:d8:e6:95:0b:8a:29:22:15:9d:9a:d0:aa:02:c0:96:
d8:ce:79:e5:00:82:05:5a:fb:65:7b:23:70:91:e7:aa:60:df:
5c:56:63:2e:ff:b4:ac:e0:91:48:4b:ab:be:15:37:d2:6c:6d:
21:9f:51:e1:58:21:89:23:f4:9a:2c:ee:b0:f7:06:aa:ea:b2:
31:b0:cc:0b:52:48:a9:f9:8e:70:40:6d:f6:64:a6:51:d1:c6:
e5:1e:d6:a6:e7:0c:2b:75:ac:2a:fe:a2:0c:c9:de:7f:e2:36:
92:89:a8:ff:43:30:85:bc:89:4f:38:27:a6:32:67:05:a0:9c:
11:79:dc:d3:91:2f:52:6e:ba:d1:52:09:1d:de:75:3d:78:0b:
41:56:ec:37
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZt/hLYbW3aLuBbVRt/KfwjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy
YjA3N2IwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWFiZjU1NWVkMTVmZjA2MGI1ZThhN2YxN2ViNjBkNzlmYWNmNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RUIHCBlHnzDMjdkvoyO/9TppFLM
upJmekTU85EwZvD5kLqwHglOtYoMlAwjsF/mVlSKEXv8bAZKu1HBto1rYP88wLNl
OTDdO4t17jAo1WmFW3NCgwiD3CeyC5TJ9BlKxCRNPkbNJJvAqLTBcs2TrhoikIaF
xfU1coxsFG6ir4vTDImAyWse9pjpR+QzGNMamVV+yJo2iHFYw2cqABwDasVQ0I9J
Getb/s9g8OLrQjREmmGlcmq+Gxdb2Pbn5nhJAX5y3PqvTitPKLNBYbe3EBPQG0Ra
xY/HMKe+iqgAcQ/6SwYIHjdRnA1GVwZiQwyKTM0L53rfZTNN2JUpu8QI8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFWr9VXtFf8GC16KfxfrYNefrPQpMB8GA1UdIwQY
MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt
NWNlNGQ4ZGJkMTU5LzEvVmF2MVZlMFZfd1lMWG9wX0YtdGcxNS1zOUNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5
LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwTX5AwQA
wTX+AwQAwTgOAwQAwTgpMA0GCSqGSIb3DQEBCwUAA4IBAQCj488z9K5WenX6WfyA
l5xSwNJ1aWRqX4g541qW57j1gQ+8+KM3/zErQlM4psFOLnyLdcDLuDUKHqNf78jd
rkxTSa2z/kvyWW75U0/MjxvtZlSRw656B+rV6hfXxfmeU4VcIUWBMHBwaVSizG5G
+4LY5pULiikiFZ2a0KoCwJbYznnlAIIFWvtleyNwkeeqYN9cVmMu/7Ss4JFIS6u+
FTfSbG0hn1HhWCGJI/SaLO6w9waq6rIxsMwLUkip+Y5wQG32ZKZR0cblHtam5wwr
dawq/qIMyd5/4jaSiaj/QzCFvIlPOCemMmcFoJwRedzTkS9SbrrRUgkd3nU9eAtB
Vuw3
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:30 2026 by rpki-client