This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vFmuetBZqj5zpom7OIPEuRwpxlc.roa
File: vFmuetBZqj5zpom7OIPEuRwpxlc.roa (raw, json)
Hash identifier: cP0QLGljZLCJzP6o76pszZkHn3foXTVJA0Uz8E3w60w=
Subject key identifier: BC:59:AE:7A:D0:59:AA:3E:73:A6:89:BB:38:83:C4:B9:1C:29:C6:57
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 019B7A5B238C8567856BD7A451A598ABB136
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vFmuetBZqj5zpom7OIPEuRwpxlc.roa
Signing time: Thu 01 Jan 2026 16:19:11 +0000
ROA not before: Thu 01 Jan 2026 16:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209096
IP address blocks: 80.249.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:23:8c:85:67:85:6b:d7:a4:51:a5:98:ab:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 16:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc59ae7ad059aa3e73a689bb3883c4b91c29c657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:7c:9c:f9:84:f7:1f:3e:b2:a3:27:2a:60:
de:33:89:36:9b:77:ae:5f:26:6c:42:91:14:62:23:
1b:a6:0f:80:5c:13:20:da:7d:0d:58:a8:42:cf:1e:
7d:5f:ac:4d:4c:2c:b2:fb:1e:de:e5:3a:5f:2a:38:
dd:66:c1:42:8c:6b:ff:5c:b7:6e:09:1f:e7:b7:29:
6c:a5:52:34:7c:8d:02:ed:96:16:6f:7c:0f:69:d2:
fd:20:9e:f8:61:e6:a3:1f:8a:d1:3c:14:3d:a7:5f:
88:98:f9:1b:46:7b:d8:09:da:0d:cb:0a:be:14:3a:
8a:85:2b:00:08:31:6a:cb:27:5b:45:f9:44:29:a2:
82:26:ee:43:98:87:1a:19:c0:63:37:69:be:d1:3b:
f9:76:87:8d:11:86:1d:a0:d5:c4:6e:38:95:98:2c:
aa:67:e1:56:05:8d:03:a0:b0:d3:bf:b6:96:06:a0:
63:ee:fd:99:8e:33:ed:45:a7:de:b8:68:48:e8:55:
e3:21:47:a6:64:96:9e:c6:2a:5f:a6:1b:3c:70:6d:
8c:db:91:bc:10:46:e3:f6:45:58:5d:8d:83:eb:a8:
63:3c:9a:be:ae:e7:ae:35:c7:0d:07:70:a7:59:85:
01:b3:bf:e8:cd:b6:02:3c:90:c3:dd:9f:e5:f8:50:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:AE:7A:D0:59:AA:3E:73:A6:89:BB:38:83:C4:B9:1C:29:C6:57
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vFmuetBZqj5zpom7OIPEuRwpxlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:07:4f:a5:88:ff:d0:74:e5:e9:64:8b:f3:7e:2e:66:13:54:
bb:ef:32:90:61:02:b5:cc:d0:b2:4e:ab:19:12:d5:42:5a:53:
6e:0a:f0:bd:26:ae:18:04:0c:ae:ff:3e:b2:e0:f5:bb:fd:8b:
58:6a:2e:f8:01:0a:d3:53:e9:f2:60:28:98:af:d5:21:bd:a3:
78:c0:23:f6:65:40:45:e4:01:e2:bf:58:42:8e:69:0a:2c:7d:
d9:f8:d4:6a:6e:64:02:12:3b:a5:24:2d:97:e9:78:b1:fd:5a:
4e:c7:9d:3b:fc:69:08:49:e0:e0:11:c2:a7:cc:b5:53:93:c2:
f4:ef:ac:33:db:d0:14:bb:6b:56:99:53:2b:5c:f4:14:eb:c1:
de:eb:ae:3e:f8:88:75:33:77:7a:31:3e:99:76:b6:19:95:9c:
75:d2:83:1b:46:5d:58:15:13:03:d2:43:90:ba:d9:b6:a6:bb:
4b:e2:4f:21:be:d4:82:35:43:1f:60:8a:18:64:af:4a:89:13:
bd:22:17:bd:88:07:73:66:2c:8d:1b:1e:99:7e:1d:cd:f5:49:
91:2f:59:0e:2d:15:e1:db:e3:ef:cd:90:f7:0a:e8:ff:78:0d:
20:3c:c9:de:21:33:7e:50:63:a8:ec:b3:e7:c1:9a:ea:4d:c7:
bd:f5:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:14:39 2026 by rpki-client