This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/vc11EuHx6MJU_mO-zji1HAUTYuE.roa
File: vc11EuHx6MJU_mO-zji1HAUTYuE.roa (raw, json)
Hash identifier: zhFF5QQjqlWRX/BGdtV5T8ItAEzBBJfA2vn8FYdOVvU=
Subject key identifier: BD:CD:75:12:E1:F1:E8:C2:54:FE:63:BE:CE:38:B5:1C:05:13:62:E1
Certificate issuer: /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial: 019B7BA332488307F5B9DC29DBF97EE330F0
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/vc11EuHx6MJU_mO-zji1HAUTYuE.roa
Signing time: Thu 01 Jan 2026 22:17:31 +0000
ROA not before: Thu 01 Jan 2026 22:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207540
IP address blocks: 2001:678:bf0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:32:48:83:07:f5:b9:dc:29:db:f9:7e:e3:30:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Validity
Not Before: Jan 1 22:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdcd7512e1f1e8c254fe63bece38b51c051362e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:65:ae:e5:13:1b:43:ad:ea:f1:d3:f9:26:
87:c0:20:17:fc:9f:02:ab:c8:2d:4a:3d:cb:e8:bf:
86:a4:b0:14:8a:06:2c:f7:05:4f:0f:bd:b2:bf:9f:
c0:f8:f3:c7:3f:70:2d:a7:fe:0a:37:59:ef:68:eb:
c1:55:24:d7:ab:06:95:09:69:70:d8:9e:19:00:b9:
0b:2f:1b:59:d2:8b:23:99:82:53:1b:18:3e:ad:ae:
74:ab:15:bb:d0:6e:29:8a:7a:f6:c4:fc:64:27:2e:
6a:19:6b:44:85:53:91:18:47:72:df:31:99:f9:34:
53:4b:3c:27:31:6e:66:11:42:c1:ad:a2:e9:5f:75:
a9:94:33:7b:e6:f8:af:1d:04:d4:1c:a3:60:9a:47:
0d:79:7b:f6:3c:25:6f:53:b4:1f:6f:e7:12:f4:55:
df:ee:52:25:72:77:76:57:af:49:a8:be:be:cf:34:
7a:75:73:76:c8:a5:44:7b:78:72:31:59:02:23:78:
9f:94:42:cb:6a:ce:62:1b:dc:c7:19:c8:3e:d3:ff:
40:b1:d8:e3:99:38:d9:1b:12:38:f5:bd:41:10:e5:
93:b8:af:2a:b4:bf:e0:9f:0d:db:a1:54:f9:d4:c4:
e2:41:bb:00:88:55:4c:f5:6e:e8:6f:32:c6:8e:03:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:75:12:E1:F1:E8:C2:54:FE:63:BE:CE:38:B5:1C:05:13:62:E1
X509v3 Authority Key Identifier:
keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/vc11EuHx6MJU_mO-zji1HAUTYuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:bf0::/48
Signature Algorithm: sha256WithRSAEncryption
7d:a4:9e:7d:1a:23:26:2f:cf:97:d4:05:79:91:c3:02:e3:8d:
27:93:e7:bf:14:bd:d0:6e:61:01:8f:b7:c9:8a:42:02:9a:26:
e5:51:07:f0:4c:ee:45:70:d3:4d:94:94:bc:50:89:07:cf:ce:
d8:42:a2:e7:52:3a:bf:13:76:fb:0a:c5:f5:5d:3b:20:d4:a0:
65:d6:0a:a4:49:2a:a7:8b:20:ee:d3:86:c1:0d:97:ac:dd:21:
e3:27:2b:81:a7:d5:c9:d1:1f:77:75:42:6a:1e:29:4b:3e:ef:
bd:bc:57:5f:58:95:3c:df:d5:f1:cb:53:19:42:3e:27:85:b9:
19:01:3f:a3:74:01:20:9a:5e:60:6d:ea:d8:c3:00:04:34:bf:
24:0d:b8:84:af:21:5b:2b:87:f8:32:f8:18:9f:5f:9f:55:58:
d1:61:f7:60:db:e7:b1:34:9f:f2:75:f6:f0:9e:d7:f2:f0:00:
a7:6d:71:af:a9:67:94:fa:db:89:fa:a0:ff:20:90:c5:9c:26:
a1:1d:75:b8:9b:99:56:3d:e0:46:a4:45:ea:69:f8:98:0c:78:
ed:71:22:66:8b:60:98:3c:66:4b:5a:1c:ec:ed:cb:73:21:5a:
0d:dd:ab:c7:4a:67:c7:51:08:22:cb:21:39:2f:60:56:c5:f4:
30:14:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:24:18 2026 by rpki-client