This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/mVRVMgeHIiRHH1B9AopIEK5wFXc.roa
File: mVRVMgeHIiRHH1B9AopIEK5wFXc.roa (raw, json)
Hash identifier: ZAiJ6w5hC5qYt0YAF2q1Nq0LbIcMdmay3YR/TW7dcS8=
Subject key identifier: 99:54:55:32:07:87:22:24:47:1F:50:7D:02:8A:48:10:AE:70:15:77
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019ABA35BE18F16E22E90D765F91B1A906D4
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/mVRVMgeHIiRHH1B9AopIEK5wFXc.roa
Signing time: Tue 25 Nov 2025 08:51:15 +0000
ROA not before: Tue 25 Nov 2025 08:51:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204227
IP address blocks: 193.57.20.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ba:35:be:18:f1:6e:22:e9:0d:76:5f:91:b1:a9:06:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Nov 25 08:51:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9954553207872224471f507d028a4810ae701577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:8a:a3:69:ce:da:f1:7b:4e:53:84:68:6a:
1e:43:72:a8:25:73:55:8c:a9:97:62:84:ed:43:c6:
01:87:fb:97:e6:49:d6:9f:59:0f:f0:a4:14:b9:8d:
eb:8d:b1:d7:38:78:cb:2a:55:12:f5:b2:bd:4f:10:
ee:c6:a7:4a:85:78:04:72:51:4d:2c:d0:c5:bb:42:
2e:53:4b:2b:3c:38:00:18:3c:74:69:58:e4:88:89:
3d:89:b1:d2:22:98:c9:05:47:4e:ac:66:90:da:ef:
1d:91:3e:93:a3:40:75:32:2d:41:84:f0:a3:2d:72:
df:9b:74:c8:e6:7d:59:10:33:e0:61:e5:66:9c:b9:
53:e3:32:2e:a1:60:95:51:b1:41:ee:34:68:6f:e9:
ca:64:9f:59:a7:db:27:01:f9:d6:7d:b3:2b:99:c3:
d7:4f:50:fe:03:63:9c:e5:68:c1:08:99:33:be:62:
5b:87:4e:b0:9a:ae:f1:86:33:00:57:86:0c:4b:76:
66:7b:10:49:a0:ae:a1:c5:1b:e3:af:38:ba:22:a7:
49:50:a5:e3:29:3b:ae:39:1d:cb:af:76:90:76:69:
07:bf:cd:4c:cf:cb:89:e8:82:e0:a6:05:2c:21:03:
1c:9e:9c:82:65:bc:f1:df:b2:d6:98:08:c2:bb:ba:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:55:32:07:87:22:24:47:1F:50:7D:02:8A:48:10:AE:70:15:77
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/mVRVMgeHIiRHH1B9AopIEK5wFXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.20.0/24
Signature Algorithm: sha256WithRSAEncryption
43:79:d0:eb:40:e4:01:bd:f9:86:62:75:ac:02:16:a8:8f:5f:
7b:1a:f8:d9:d1:59:76:1b:83:82:b6:d1:5a:f8:8a:15:78:02:
06:0e:da:d8:8a:cb:19:2e:5b:5b:a9:da:eb:b2:f0:6a:bb:c4:
7f:b3:4d:a3:f1:b4:7e:0e:eb:ec:58:90:dc:ed:02:b1:0b:63:
44:1b:66:e0:97:31:ee:53:7e:32:d0:e8:0a:ed:a7:69:f8:90:
12:28:a5:9e:e4:99:cc:84:50:c1:c9:ff:84:73:a5:3f:19:47:
64:36:1b:c5:27:ad:dd:49:ac:84:7f:24:a7:7e:b1:35:67:8a:
2c:b1:0e:f6:2c:24:0f:06:e4:bc:d5:1b:44:b2:f7:3c:a5:d7:
ad:b7:e1:9f:81:d5:92:fb:69:64:56:b7:1b:8d:0b:b9:b6:82:
ff:6c:ca:3e:91:48:e1:90:51:5e:ed:a2:c5:9e:8d:58:72:2d:
bd:05:af:6f:5a:3a:81:5c:1e:c6:a3:8d:23:7b:b5:63:2e:8a:
17:b3:3f:34:b9:99:a6:82:65:33:c1:7c:6f:ef:e0:2f:a8:d3:
43:b3:4c:c6:dd:b5:c4:7e:5d:35:03:18:b7:10:77:2e:c0:17:
70:20:ed:2b:97:1a:e7:d6:9c:41:1f:06:ec:5a:19:85:db:6c:
9a:5c:58:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZq6Nb4Y8W4i6Q12X5GxqQbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjUxMTI1MDg1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTU0NTUzMjA3ODcyMjI0NDcxZjUwN2QwMjhhNDgxMGFlNzAxNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaiKo2nO2vF7TlOEaGoeQ3KoJXNV
jKmXYoTtQ8YBh/uX5knWn1kP8KQUuY3rjbHXOHjLKlUS9bK9TxDuxqdKhXgEclFN
LNDFu0IuU0srPDgAGDx0aVjkiIk9ibHSIpjJBUdOrGaQ2u8dkT6To0B1Mi1BhPCj
LXLfm3TI5n1ZEDPgYeVmnLlT4zIuoWCVUbFB7jRob+nKZJ9Zp9snAfnWfbMrmcPX
T1D+A2Oc5WjBCJkzvmJbh06wmq7xhjMAV4YMS3ZmexBJoK6hxRvjrzi6IqdJUKXj
KTuuOR3Lr3aQdmkHv81Mz8uJ6ILgpgUsIQMcnpyCZbzx37LWmAjCu7raMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlUVTIHhyIkRx9QfQKKSBCucBV3MB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvbVZSVk1nZUhJaVJISDFCOUFvcElFSzV3RlhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTkUMA0G
CSqGSIb3DQEBCwUAA4IBAQBDedDrQOQBvfmGYnWsAhaoj197GvjZ0Vl2G4OCttFa
+IoVeAIGDtrYissZLltbqdrrsvBqu8R/s02j8bR+DuvsWJDc7QKxC2NEG2bglzHu
U34y0OgK7adp+JASKKWe5JnMhFDByf+Ec6U/GUdkNhvFJ63dSayEfySnfrE1Z4os
sQ72LCQPBuS81RtEsvc8pdett+GfgdWS+2lkVrcbjQu5toL/bMo+kUjhkFFe7aLF
no1Yci29Ba9vWjqBXB7Go40je7VjLooXsz80uZmmgmUzwXxv7+AvqNNDs0zG3bXE
fl01Axi3EHcuwBdwIO0rlxrn1pxBHwbsWhmF22yaXFgF
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:49:51 2025 by rpki-client