This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/vwfZCtFuWehcEgyRDVAHYKDEtwI.roa
File: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (raw, json)
Hash identifier: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=
Subject key identifier: BF:07:D9:0A:D1:6E:59:E8:5C:12:0C:91:0D:50:07:60:A0:C4:B7:02
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019B7910DF0CA5F53C469650856A6462E2C3
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/vwfZCtFuWehcEgyRDVAHYKDEtwI.roa
Signing time: Thu 01 Jan 2026 10:18:27 +0000
ROA not before: Thu 01 Jan 2026 10:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34763
IP address blocks: 193.84.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:df:0c:a5:f5:3c:46:96:50:85:6a:64:62:e2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jan 1 10:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf07d90ad16e59e85c120c910d500760a0c4b702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:a1:aa:3f:6b:48:c6:8d:b4:a1:bd:b0:53:
e8:8a:ce:76:55:03:cb:5f:a1:c7:79:d4:fa:b4:63:
27:84:15:cd:1d:06:6a:9f:21:a1:57:71:2d:91:a7:
42:a0:cf:7e:37:7e:a4:bd:60:7d:2f:41:74:38:38:
17:b8:d8:2a:fd:d0:be:a3:a7:bc:b4:b4:fa:3b:59:
4d:1e:e2:ca:5d:20:5c:fa:e0:5c:2f:60:83:6a:33:
48:31:6a:47:a1:cf:9a:4d:2b:c4:ea:88:0a:7a:f2:
71:f3:88:a4:d3:08:6b:b4:fb:b2:e9:bb:29:7c:bf:
c8:7c:79:7f:35:cb:95:48:9a:93:9a:d4:66:63:ee:
b6:76:9b:c8:4a:7d:55:ac:40:64:c7:ce:0c:02:33:
8d:9c:64:24:28:dc:a4:de:a8:26:f9:6d:14:ea:00:
88:e2:5f:f8:d7:26:b4:57:c2:b4:b4:7c:bd:57:98:
a1:15:2e:13:a7:6d:57:23:bb:6d:69:d3:a6:73:e8:
55:04:cb:ff:f9:09:d7:d3:4b:a5:36:d6:27:36:90:
94:8d:f4:25:61:c9:ea:69:f6:d8:2d:66:9c:33:17:
8a:3b:ea:58:34:e9:ea:6f:ec:7d:d7:23:5e:f4:73:
14:cb:13:33:75:07:0b:63:1c:db:df:be:45:8f:92:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:D9:0A:D1:6E:59:E8:5C:12:0C:91:0D:50:07:60:A0:C4:B7:02
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/vwfZCtFuWehcEgyRDVAHYKDEtwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.119.0/24
Signature Algorithm: sha256WithRSAEncryption
22:95:78:0a:f0:dd:f2:2c:7e:c1:3f:99:da:7c:ef:6a:62:6d:
a3:9b:84:29:7d:11:ac:ea:3f:c7:b7:3e:25:78:a0:da:28:a2:
ae:ab:5e:96:7a:d2:7d:36:6e:ac:aa:c0:e0:e8:ce:c9:1b:0b:
9e:d5:60:a3:17:70:a0:2a:ae:e8:db:13:c2:12:a4:50:b8:d5:
a9:1a:25:16:9e:f8:58:a9:6f:92:01:04:d6:cc:1e:45:6f:a8:
f3:ca:43:e6:f3:8c:c6:0c:c2:4e:b8:e1:85:7a:db:4c:d7:c9:
50:36:e5:9e:18:da:1f:64:6e:0d:d9:74:08:e0:1f:42:25:cf:
4f:8f:20:8a:e6:28:a7:d9:29:54:f3:fd:8b:7c:d4:65:cb:74:
61:bb:ea:43:10:07:41:b3:d3:71:2e:27:8e:64:cf:02:a1:6b:
6f:26:5c:b0:67:be:78:55:f2:d6:76:2c:17:05:21:18:2b:ea:
a2:e0:1d:4d:7a:8b:e7:a4:af:59:90:e1:71:a7:18:bc:51:d7:
31:9b:d7:8f:d2:e6:e9:9e:fa:34:a1:8d:bc:e7:ae:a3:3c:73:
7b:3e:4f:fd:54:3b:f0:43:bf:45:6e:22:72:b4:4a:7e:be:15:
43:4c:3d:90:78:24:42:7e:f3:1f:51:52:0f:73:3a:44:24:68:
c5:24:6d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:25:53 2026 by rpki-client