This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/VHn5fbgK9TT163CBWJTv5V844m4.roa
File: VHn5fbgK9TT163CBWJTv5V844m4.roa (raw, json)
Hash identifier: TPUdDfw5uVSRkDAl0XMbSNV4hlR+3H658TMXtO+hKqQ=
Subject key identifier: 54:79:F9:7D:B8:0A:F5:34:F5:EB:70:81:58:94:EF:E5:5F:38:E2:6E
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019B999541912122F338D3F98CE200497E4C
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/VHn5fbgK9TT163CBWJTv5V844m4.roa
Signing time: Wed 07 Jan 2026 17:50:54 +0000
ROA not before: Wed 07 Jan 2026 17:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49505
IP address blocks: 95.181.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:99:95:41:91:21:22:f3:38:d3:f9:8c:e2:00:49:7e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 7 17:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5479f97db80af534f5eb70815894efe55f38e26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:da:14:f0:bc:46:ab:b1:f5:e7:6b:de:3a:
c0:89:7f:e2:c8:1b:76:75:80:ca:6f:3f:e8:10:1b:
a7:49:56:c3:df:06:97:9c:8f:c1:7d:7b:08:76:b0:
06:dd:f8:5b:2f:f2:35:04:58:99:ba:68:cb:e5:2e:
ed:d9:5f:c4:17:9d:7b:ba:21:e2:02:28:6c:0c:ce:
7a:fb:2c:7c:92:f9:dc:aa:3b:0a:2e:9c:51:c8:92:
5b:37:93:fb:92:54:9a:77:30:52:17:32:ed:ac:47:
11:23:3c:5a:11:73:40:1c:71:58:ea:c1:99:5e:e2:
64:2b:c2:d3:83:cf:62:8d:da:de:5d:65:52:d0:33:
a8:4c:4f:66:a4:49:d1:2a:f7:1f:e5:52:c8:0b:4c:
6a:07:60:b6:a3:73:65:e6:56:4b:73:c1:89:b2:75:
96:f3:3b:24:fe:68:01:e9:4c:4e:98:ab:6e:89:d3:
a5:44:90:7d:50:fb:ef:d6:57:ab:36:32:9a:e1:0b:
ce:fa:07:2c:be:a1:e1:7e:a8:9f:85:4e:06:9d:e8:
77:9f:45:61:3d:a6:35:53:4a:c3:0b:8e:78:5b:4b:
cb:9d:8f:d0:a5:ad:06:74:5a:f0:6a:3c:d7:93:ec:
c4:45:25:1b:4e:d4:5a:9c:4f:f0:a8:a7:37:99:18:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:F9:7D:B8:0A:F5:34:F5:EB:70:81:58:94:EF:E5:5F:38:E2:6E
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/VHn5fbgK9TT163CBWJTv5V844m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.168.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d4:72:9b:09:d2:e3:27:85:f7:09:09:ac:f7:e7:23:9a:33:
73:91:77:c9:f5:48:66:03:94:76:f4:bb:69:21:75:bc:98:c5:
92:4b:e0:43:61:33:91:5d:4e:92:72:ef:e1:85:d6:29:f9:2b:
a9:71:b9:e6:f1:56:8f:8a:e8:f9:a5:f6:b4:1a:0c:4d:3d:2e:
22:12:5b:aa:55:ca:e1:33:18:76:49:87:e7:99:db:f7:63:80:
40:17:8b:73:af:51:fd:9d:52:cd:54:72:e7:af:bc:ec:c6:b6:
1e:6f:3f:61:0d:c3:28:70:ce:91:19:a2:cd:3f:1a:5c:cd:18:
5c:1e:aa:fc:f2:5d:18:e7:eb:b4:fc:aa:95:1d:79:06:ea:37:
ff:a8:48:8e:4f:12:d9:94:49:df:d2:b7:2d:6b:31:56:38:db:
8e:97:02:91:b3:7b:98:fd:86:f1:f9:2a:37:3a:6a:0f:86:68:
8e:53:5b:80:05:ce:e6:20:81:c5:7a:2f:a9:42:fa:c7:af:69:
b4:bf:3f:a1:60:ce:e5:24:f6:cb:3a:50:c2:30:52:23:3d:e6:
3e:55:c8:f8:85:0f:a4:a5:0d:11:9a:5f:b3:57:be:5c:62:8d:
22:4e:dc:ce:27:82:75:e2:f2:41:d4:55:76:b1:fc:a8:eb:33:
70:d4:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:16 2026 by rpki-client