This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa
File: vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa (raw, json)
Hash identifier: KgFZjrNJ+4xk/AWdnTgN+umWyd65NfXlzGKus00+cNs=
Subject key identifier: BC:80:31:42:28:78:84:25:4A:41:C7:6C:80:5F:29:19:14:90:F4:07
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019B7C80787C6DBA687897B7D5B11E29F8B9
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa
Signing time: Fri 02 Jan 2026 02:19:12 +0000
ROA not before: Fri 02 Jan 2026 02:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8903
IP address blocks: 77.72.104.0/21 maxlen: 24
84.18.0.0/19 maxlen: 24
92.60.160.0/20 maxlen: 24
92.60.173.0/24 maxlen: 24
176.98.220.0/22 maxlen: 24
185.66.60.0/22 maxlen: 24
185.145.224.0/22 maxlen: 24
185.155.64.0/22 maxlen: 24
185.173.44.0/22 maxlen: 24
185.187.180.0/22 maxlen: 24
185.224.76.0/22 maxlen: 24
193.34.240.0/22 maxlen: 24
195.5.64.0/19 maxlen: 24
212.49.128.0/18 maxlen: 24
212.49.189.0/24 maxlen: 24
212.66.161.0/24 maxlen: 24
212.66.162.0/23 maxlen: 23
212.66.163.0/24 maxlen: 24
212.66.164.0/22 maxlen: 22
212.66.168.0/21 maxlen: 21
212.66.176.0/20 maxlen: 24
212.163.0.0/16 maxlen: 24
213.9.128.0/17 maxlen: 24
213.9.142.0/23 maxlen: 23
213.192.192.0/18 maxlen: 24
213.192.193.0/24 maxlen: 24
213.192.195.0/24 maxlen: 24
213.192.200.0/22 maxlen: 22
213.192.203.0/24 maxlen: 24
213.192.206.0/23 maxlen: 23
213.192.212.0/22 maxlen: 22
213.192.213.0/24 maxlen: 24
213.192.216.0/21 maxlen: 21
213.192.224.0/22 maxlen: 22
213.192.228.0/23 maxlen: 23
213.192.232.0/22 maxlen: 22
213.192.238.0/24 maxlen: 24
213.192.239.0/24 maxlen: 24
213.192.240.0/24 maxlen: 24
213.192.241.0/24 maxlen: 24
213.192.242.0/23 maxlen: 23
213.192.244.0/23 maxlen: 23
213.192.246.0/24 maxlen: 24
213.192.247.0/24 maxlen: 24
213.192.248.0/21 maxlen: 21
213.192.249.0/24 maxlen: 24
213.192.251.0/24 maxlen: 24
213.192.252.0/23 maxlen: 23
213.192.253.0/24 maxlen: 24
213.192.254.0/24 maxlen: 24
213.192.255.0/24 maxlen: 24
2001:ac0::/29 maxlen: 29
2001:ac0::/32 maxlen: 48
2001:ac0:c0c0::/44 maxlen: 44
2001:ac0:c880::/44 maxlen: 44
2a0d:59c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:78:7c:6d:ba:68:78:97:b7:d5:b1:1e:29:f8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 02:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc803142287884254a41c76c805f29191490f407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:71:20:a2:2f:0d:eb:80:f7:fc:b8:ae:5b:
a3:f9:a8:3f:29:26:76:fe:9f:42:fd:08:76:93:73:
dc:b3:5a:43:d4:e2:49:74:11:dd:2b:20:95:b1:4c:
8e:01:5e:fe:67:19:65:f7:de:d1:eb:09:a0:fd:a1:
86:20:3b:83:85:0e:62:bb:e5:26:1e:3f:6e:40:fc:
bc:61:24:7a:dd:85:48:6c:01:15:80:33:99:9f:91:
a8:d7:a3:ae:09:6d:7f:fb:09:09:48:67:b7:f2:1a:
0b:a2:87:15:cf:95:ed:b7:bf:d8:85:a5:3c:df:60:
7d:a4:b0:ae:84:8d:9a:1d:96:96:17:92:3c:b9:09:
79:67:7d:da:69:95:86:63:bf:67:3a:64:6c:b3:f0:
f3:33:0b:7b:cb:4b:e5:2e:2d:ce:0a:b4:f1:36:b1:
59:12:3f:4a:47:58:e1:9e:85:6b:c1:d0:8a:80:61:
3f:f2:88:76:c9:20:88:c0:e2:90:f7:2e:d1:04:b6:
df:c1:e0:d3:49:93:c0:a3:98:5b:98:0b:ee:32:eb:
34:0f:99:e4:15:29:7d:df:de:ff:0f:65:11:41:e7:
21:b4:13:f9:be:54:e5:5a:46:56:57:92:3c:bb:c2:
2b:bb:ff:13:e1:5d:e7:b2:21:3d:3d:78:76:d7:22:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:31:42:28:78:84:25:4A:41:C7:6C:80:5F:29:19:14:90:F4:07
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/vIAxQih4hCVKQcdsgF8pGRSQ9Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.104.0/21
84.18.0.0/19
92.60.160.0/20
176.98.220.0/22
185.66.60.0/22
185.145.224.0/22
185.155.64.0/22
185.173.44.0/22
185.187.180.0/22
185.224.76.0/22
193.34.240.0/22
195.5.64.0/19
212.49.128.0/18
212.66.161.0-212.66.191.255
212.163.0.0/16
213.9.128.0/17
213.192.192.0/18
IPv6:
2001:ac0::/29
2a0d:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
bd:90:e9:4d:b8:2d:94:86:8f:d9:ce:c7:6c:a6:ee:76:65:e4:
df:ea:4b:33:af:a3:13:8f:9f:44:aa:b6:35:a7:20:92:af:b0:
0f:df:96:32:b7:ac:ba:16:db:12:a7:03:9c:67:e1:54:fd:67:
c8:59:03:77:82:5e:27:38:9c:cc:d6:fe:67:f3:48:13:0c:28:
34:8f:66:ed:b5:0f:d3:dc:97:00:e0:4b:96:10:06:15:2f:4e:
42:a3:3c:26:5e:03:2d:03:26:37:f8:20:57:5f:08:f4:dd:55:
89:20:ee:82:f2:1f:0a:9c:1b:4f:5f:91:04:84:dd:16:04:77:
79:d2:12:b1:10:77:4d:b8:c4:5d:53:be:be:83:c6:ce:5d:5e:
aa:8e:38:af:47:eb:99:b2:20:fe:c0:79:7b:9e:3f:f9:94:6c:
0b:84:cb:91:9c:88:63:72:52:fb:d3:4d:73:bd:25:87:cb:63:
05:3d:b2:56:d1:62:48:e0:b1:94:10:b2:2e:50:3e:9a:9a:8c:
ab:05:0c:03:3c:fd:fb:f9:44:44:58:80:61:cc:8c:c9:e4:f4:
47:78:9f:09:e2:00:d9:45:52:3b:04:14:9b:45:5c:16:65:26:
8d:8f:9b:e8:99:a3:3e:0b:ae:48:86:fd:ba:d5:e7:2d:03:68:
86:63:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:35 2026 by rpki-client