This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/vLT1U1k90JDYd1QSTpdp7-5jPm8.roa
File: vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (raw, json)
Hash identifier: tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=
Subject key identifier: BC:B4:F5:53:59:3D:D0:90:D8:77:54:12:4E:97:69:EF:EE:63:3E:6F
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 019B7F833FBFB5D91F065CAE59C782A5398C
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/vLT1U1k90JDYd1QSTpdp7-5jPm8.roa
Signing time: Fri 02 Jan 2026 16:21:06 +0000
ROA not before: Fri 02 Jan 2026 16:21:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20570
IP address blocks: 194.127.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:3f:bf:b5:d9:1f:06:5c:ae:59:c7:82:a5:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Jan 2 16:21:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcb4f553593dd090d87754124e9769efee633e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:8a:26:6c:65:fa:8b:66:20:cc:af:8c:9e:
dd:bc:2a:bd:25:8c:90:35:02:ad:84:c3:47:e8:de:
17:e6:17:d9:6d:5a:4b:70:8b:d9:cb:9a:09:4a:e2:
f0:1d:74:44:05:f0:55:d6:30:89:fd:9d:ff:1c:56:
63:5e:6a:51:00:3b:38:e8:94:10:b3:48:9a:1a:db:
13:e5:f3:e8:20:98:d0:9d:fb:f8:9d:f3:95:4d:bb:
3e:f4:27:33:83:32:81:9f:4a:ec:9d:ad:4d:5c:ab:
63:5e:0a:4d:10:7f:c2:96:27:45:de:11:66:57:a9:
c0:20:ef:c5:3c:a8:49:73:86:68:3f:a2:51:a7:0a:
d0:48:0c:63:4a:15:3e:9d:ac:e7:9a:29:e8:34:a4:
9f:d4:f3:98:7c:08:6c:4a:5a:38:3d:b1:a7:fe:12:
26:cf:3d:44:ad:ab:a0:5b:a4:dd:d6:4b:1c:01:39:
ce:87:fa:82:6f:6e:44:79:db:12:db:e3:3b:54:14:
f1:d0:f0:9b:a9:20:7d:b3:7d:35:a5:f7:39:e5:2f:
af:56:24:b9:47:82:92:71:36:54:c4:7a:b2:0b:aa:
3e:91:42:1d:fd:f5:12:64:3b:89:0a:60:61:1e:38:
82:09:c2:62:06:13:d4:42:76:3a:01:b3:82:43:76:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:F5:53:59:3D:D0:90:D8:77:54:12:4E:97:69:EF:EE:63:3E:6F
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/vLT1U1k90JDYd1QSTpdp7-5jPm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.208.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:cd:9d:cf:50:e6:b3:99:87:f3:64:ca:80:03:7b:3b:ce:55:
5f:29:b0:01:bc:5e:e3:6e:e6:ea:7f:d2:75:05:15:1d:4d:ae:
6d:9d:14:e5:0d:c1:75:d2:cd:bf:3b:bf:30:fe:ad:e5:8e:4b:
15:f9:b8:15:69:70:af:ad:a1:4a:5d:59:62:0e:5c:90:81:48:
5c:92:69:43:7c:a3:f0:6e:8b:ff:5d:63:8f:96:f9:4c:b5:c0:
8d:f6:89:86:c0:b5:f1:2d:d2:f9:df:d3:73:40:98:79:06:74:
8c:6a:64:ac:df:13:ab:7a:49:ef:f3:50:05:46:f7:d4:02:37:
7c:44:9d:ad:7a:e7:8b:6b:59:d8:94:bf:2e:cf:b4:f1:3b:42:
89:f0:de:b9:ad:87:02:17:8a:1c:23:77:9c:f3:ba:7b:6c:1d:
76:68:f8:5e:74:9c:a4:8e:9e:e4:d9:21:e4:6c:bd:15:6e:8e:
0a:2e:8f:93:a9:ea:e1:1b:a7:f0:77:02:3c:f6:a9:13:52:79:
3f:2b:78:b7:56:ec:ba:04:57:1f:52:11:86:63:85:3c:cd:7c:
e4:6f:fc:28:8a:d0:88:9a:7f:c3:67:53:ce:3a:23:d8:07:f5:
04:6e:ea:f5:e6:a6:12:b9:f8:cf:94:55:0d:1a:61:69:f1:6f:
42:ae:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:19:20 2026 by rpki-client