This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa
File: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (raw, json)
Hash identifier: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=
Subject key identifier: 55:53:B6:C7:A2:FB:2C:54:D9:B1:56:3F:CD:A6:6B:72:3C:FE:08:B5
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019B7C8092E6BF85663B7A56D232ED1B1B34
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa
Signing time: Fri 02 Jan 2026 02:19:19 +0000
ROA not before: Fri 02 Jan 2026 02:19:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3399
IP address blocks: 193.178.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:92:e6:bf:85:66:3b:7a:56:d2:32:ed:1b:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jan 2 02:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5553b6c7a2fb2c54d9b1563fcda66b723cfe08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:76:64:71:a5:7f:c0:55:9f:3b:69:3d:9d:
ee:fd:5d:a8:f2:53:44:f7:d1:da:1f:dc:34:63:c4:
e0:b3:50:37:d8:6b:cd:61:28:f0:c3:15:34:71:18:
ed:e5:33:e0:69:04:43:fa:2a:1b:9d:0a:c2:0f:34:
e2:dc:ec:d0:e8:2d:2d:a5:1c:8b:10:d8:e5:b1:d1:
45:35:be:3a:f4:41:48:fe:d0:b6:89:a0:b6:6b:44:
8e:4f:79:43:7d:0e:0d:06:0e:48:c9:77:d5:fd:c6:
04:2f:c1:06:70:a1:76:b8:95:35:3f:bf:d7:c5:f6:
d6:c3:21:a1:26:90:02:47:2a:04:c4:0f:05:76:0e:
8e:1e:5c:ce:63:2b:75:46:46:cd:7d:a9:42:d0:bd:
87:50:b3:b8:24:e8:39:90:32:e2:e4:63:e0:d0:a1:
ec:f3:ec:eb:1c:07:8e:2f:1d:ea:87:32:52:c6:e2:
ab:ef:db:c2:c0:df:29:21:60:26:19:bd:fc:7c:ce:
63:93:d1:df:e7:f9:79:83:01:5f:35:d6:8a:83:e7:
c8:ff:93:98:5a:3f:e4:b8:b6:b6:cd:db:f6:dc:7f:
6b:d8:10:4b:82:01:b2:b0:9a:53:8b:92:79:f7:5b:
55:c3:18:58:ff:28:ed:59:aa:fa:ed:9f:c1:fa:23:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:53:B6:C7:A2:FB:2C:54:D9:B1:56:3F:CD:A6:6B:72:3C:FE:08:B5
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4b:04:d9:63:ba:5f:3f:60:2f:15:97:cc:f2:4d:51:93:1d:
bd:71:11:47:95:09:0d:82:85:82:a0:4b:1d:17:23:29:5a:b4:
5f:81:fb:31:06:5d:bb:00:d3:c0:65:ee:51:45:ec:ae:2f:e4:
26:97:77:b2:5e:42:c7:66:6e:fe:41:20:ca:2d:84:e0:88:88:
e7:e2:e2:6f:ab:41:83:ed:03:63:3b:62:82:fb:26:9b:1e:bd:
48:c1:d7:f2:e6:1f:70:60:40:0e:eb:1b:41:5b:65:26:e5:14:
a6:73:2d:06:72:32:71:2d:b0:ea:1d:d3:6c:61:1c:34:09:d9:
9f:e7:c2:bb:e1:8e:b7:ca:a3:3d:97:77:ab:e6:87:33:1c:f0:
61:2e:4c:e7:aa:79:05:ca:a9:cb:7a:92:44:1c:10:66:e5:94:
dd:bc:d7:e1:3e:fe:e2:8c:48:74:5c:8a:2c:5c:f9:20:6f:ea:
99:63:bd:27:62:9d:a5:ec:b5:69:60:76:76:46:63:10:97:54:
2a:b4:5a:3f:ec:18:bf:be:6a:27:9c:03:40:fd:9e:c4:55:8d:
70:d4:3f:43:dc:35:cd:27:84:45:61:9a:56:6b:d3:35:b7:5a:
cd:1f:20:b9:21:d8:fc:8a:e4:b4:1c:b9:3b:ee:db:ab:cf:2a:
b9:5c:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:30:05 2026 by rpki-client