This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/VrIgLz2PFQgd63beVRzJrL2SQBc.roa
File: VrIgLz2PFQgd63beVRzJrL2SQBc.roa (raw, json)
Hash identifier: sXPs4ggxGfscBiESz3blqF00BOn9YaRW1W7ATtbBk3s=
Subject key identifier: 56:B2:20:2F:3D:8F:15:08:1D:EB:76:DE:55:1C:C9:AC:BD:92:40:17
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 019B7DCB2B39CF53C5FAB664F286B1452B35
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/VrIgLz2PFQgd63beVRzJrL2SQBc.roa
Signing time: Fri 02 Jan 2026 08:20:25 +0000
ROA not before: Fri 02 Jan 2026 08:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198692
IP address blocks: 82.150.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:2b:39:cf:53:c5:fa:b6:64:f2:86:b1:45:2b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 08:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56b2202f3d8f15081deb76de551cc9acbd924017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:8f:40:04:93:13:3a:a7:0e:6b:19:8f:ae:
86:12:0d:17:5e:32:54:d2:a1:4d:0d:3b:f7:92:8e:
2f:92:48:e5:f5:84:00:75:52:35:ae:38:96:61:47:
44:ad:ef:a3:04:5c:ae:4d:85:cd:7f:ef:7f:6f:39:
b7:5d:0c:57:24:17:54:11:be:e8:35:61:61:22:91:
08:d5:96:57:86:c9:2b:34:be:bf:60:f4:dd:a9:1c:
4d:e6:7d:87:e9:80:66:69:4b:60:e1:41:da:75:c4:
8c:73:ef:e0:5e:e1:23:47:c1:51:82:94:46:42:43:
fc:bc:13:ed:93:13:8b:2d:84:04:d2:31:c3:d6:d5:
bc:f8:fc:a9:16:69:79:e0:03:6e:02:3c:71:f2:27:
79:b4:b5:62:ed:25:b8:7a:5e:a6:d5:bc:ca:26:ea:
6b:1c:1f:d6:32:44:6d:76:ea:07:4a:91:4b:1c:8f:
e4:df:04:f1:ee:f7:c2:04:3e:60:24:3e:65:db:e9:
83:8f:72:0f:3a:d0:41:07:f4:8c:44:8c:c8:74:3b:
24:dd:0b:b2:f3:cc:78:b7:b8:48:52:b9:b4:f1:67:
f6:2b:98:2e:62:94:c1:ef:be:7e:fa:79:6d:b5:0d:
b5:32:a2:d8:9c:bf:48:ce:e5:8f:cc:0b:38:25:01:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B2:20:2F:3D:8F:15:08:1D:EB:76:DE:55:1C:C9:AC:BD:92:40:17
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/VrIgLz2PFQgd63beVRzJrL2SQBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.138.0/24
Signature Algorithm: sha256WithRSAEncryption
58:20:38:f6:f6:a1:8b:c1:e5:a9:14:19:9f:55:62:53:73:13:
7a:e5:73:82:70:59:c3:0f:39:6d:8f:61:23:2a:6b:57:82:9a:
80:44:b8:5f:6e:a5:95:75:e6:ff:1f:a3:31:3f:73:9e:d9:62:
e4:3e:3b:1c:81:00:11:e8:8b:11:f4:d5:3d:97:9c:6a:71:16:
6f:25:44:37:b2:04:b6:4f:c5:7a:a1:29:c5:80:2d:5e:34:98:
c2:b1:3a:83:0c:42:d8:5d:74:df:c3:84:bd:1d:be:62:52:45:
7e:6b:c1:37:78:1a:5c:b2:f7:57:d1:49:b8:89:f8:d6:9e:6f:
a7:8d:b1:4c:1c:e2:87:26:2f:4a:cb:2a:ea:ba:0e:f3:2f:ed:
dc:dd:e9:49:49:c5:de:c3:b1:9c:21:e5:ab:d1:80:e2:ad:e2:
39:e1:31:af:42:c2:d9:20:7e:b6:48:3e:b4:73:10:1b:70:af:
c1:4c:ea:3f:49:10:ab:ad:57:ad:fd:de:c8:44:8f:2a:d8:70:
4a:00:fa:ca:c0:97:30:c6:d8:cd:ac:29:1a:51:fc:64:ac:14:
29:da:20:4b:6c:6c:d6:82:8c:e4:ec:89:aa:8a:4d:90:ae:dd:
62:5c:64:19:e1:2e:81:1c:3f:53:2a:af:25:48:e7:08:a2:a4:
e7:d1:62:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:19 2026 by rpki-client