This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa
File: VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa (raw, json)
Hash identifier: vfRsWV2tt63Zp2pKLXvqyz9hs71tP2T2P3y8dqOioMc=
Subject key identifier: 56:05:E6:8B:0D:C9:8E:B5:E8:05:22:33:95:8F:C3:69:66:96:C5:23
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019B7834431B040B50909F27493358821C94
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa
Signing time: Thu 01 Jan 2026 06:17:29 +0000
ROA not before: Thu 01 Jan 2026 06:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43957
IP address blocks: 144.208.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:43:1b:04:0b:50:90:9f:27:49:33:58:82:1c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 06:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5605e68b0dc98eb5e8052233958fc3696696c523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:51:6b:76:36:e8:00:e7:39:5d:95:39:8a:
48:68:95:59:b8:b6:39:34:31:9c:55:03:2e:5a:62:
f0:87:b6:a5:2f:54:2d:6c:45:1e:40:bb:c6:e1:97:
fa:67:71:71:da:9a:8b:d5:a6:46:ae:8c:f3:7d:67:
df:0f:6a:9d:71:60:9c:41:f4:79:cd:0e:c6:47:c2:
1c:05:4f:a4:fc:ad:3e:25:69:5b:d4:97:64:97:6f:
61:a2:0d:54:0b:1a:53:4f:36:a0:b0:66:de:0a:c1:
8c:83:e7:e3:77:e2:a6:24:9c:40:c7:13:1b:37:37:
d5:15:68:04:19:3c:19:64:67:89:cd:c2:b7:b8:c0:
f0:4b:bb:7b:c3:49:2b:11:e8:9f:5c:7c:92:03:87:
9e:ea:0f:5b:dd:1e:19:b1:90:e6:23:9a:ce:9f:18:
a1:83:d6:9d:2b:39:88:47:b6:16:52:89:80:b8:ba:
c9:6d:4e:bc:5b:b0:ae:96:98:3c:9a:ae:0f:9d:8d:
83:b4:5d:96:41:e4:22:70:af:d0:ff:54:10:92:a8:
f8:0d:d9:80:90:1c:a4:63:8a:57:9f:ef:4b:6f:a5:
9f:ef:e3:94:11:92:dc:7a:39:35:54:86:37:57:0e:
32:5e:ac:1b:c6:58:af:c4:b3:eb:23:cf:19:8c:28:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:E6:8B:0D:C9:8E:B5:E8:05:22:33:95:8F:C3:69:66:96:C5:23
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/VgXmiw3JjrXoBSIzlY_DaWaWxSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:38:15:72:8b:7a:c7:a1:69:1a:db:b7:f5:fa:02:64:bb:63:
81:3d:1e:69:a7:5d:3c:d0:1f:14:0f:ad:97:aa:20:6e:50:e2:
b8:a3:3f:15:af:ce:5e:42:53:75:8b:d1:62:3a:30:17:b9:7c:
bf:71:dc:12:60:c4:3c:d0:30:bd:6c:ff:ac:c8:1d:33:56:e5:
14:4b:9e:4c:9f:21:6a:7f:66:db:6e:bf:32:0d:5c:7a:d1:96:
75:c0:00:2f:e5:df:34:1f:bc:d8:4f:d8:47:b9:20:03:cd:82:
d2:23:63:f1:5b:07:92:48:9e:bd:1d:35:e6:54:71:c7:52:4b:
d6:12:02:52:62:26:74:07:84:93:c8:99:4b:78:b2:79:2d:ef:
93:9e:96:06:81:5f:0e:6b:60:a7:f9:5c:eb:5b:fe:1b:57:bc:
e4:e0:d6:b4:e7:4c:80:e4:73:8b:4f:d1:60:a9:ab:ef:87:b2:
d3:51:27:5d:87:78:d1:03:07:87:c5:99:85:25:6e:27:79:4a:
2c:a9:d3:1a:1a:08:b6:e0:15:c9:d0:41:ec:b3:f8:09:5c:96:
db:7c:8e:af:eb:4d:46:1a:42:ae:26:55:d5:f0:dc:75:8a:87:
c0:e3:1c:d5:39:1f:ff:b6:aa:9e:cf:9c:e0:e7:47:4f:89:fc:
db:69:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:56 2026 by rpki-client