This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/vc3_2HwZU1b1IDix6yqY246HGsI.roa
File: vc3_2HwZU1b1IDix6yqY246HGsI.roa (raw, json)
Hash identifier: C2RwLxlNEFwKzGr5sfPtGfDi2mMkvqCKZMvxOHJKA+M=
Subject key identifier: BD:CD:FF:D8:7C:19:53:56:F5:20:38:B1:EB:2A:98:DB:8E:87:1A:C2
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 019B76EB67B1E0172393BAB429E9732E6214
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/vc3_2HwZU1b1IDix6yqY246HGsI.roa
Signing time: Thu 01 Jan 2026 00:18:17 +0000
ROA not before: Thu 01 Jan 2026 00:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211387
IP address blocks: 2a0b:6b86:f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:67:b1:e0:17:23:93:ba:b4:29:e9:73:2e:62:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 00:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdcdffd87c195356f52038b1eb2a98db8e871ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:e1:c6:54:e4:e6:a5:9c:73:07:6d:fd:b7:
ff:49:f1:09:a7:a7:1a:2d:ce:a3:22:e3:5b:d3:75:
44:01:d8:52:4f:f3:42:15:5a:83:56:8f:e5:cf:e7:
0c:9f:04:99:54:cf:c7:7e:d1:fd:11:33:e3:cb:57:
5d:6a:20:b3:07:9d:91:f8:88:11:fb:c3:4e:8a:0d:
03:0c:be:e2:c5:a4:16:a6:6f:d6:cb:3a:88:ff:44:
f4:75:02:c5:fa:43:55:0a:5b:01:98:d8:6c:39:b5:
91:f4:13:a5:b0:39:3d:24:ff:cd:c5:7d:8d:ae:c4:
92:79:57:34:eb:dc:73:0a:ce:8a:51:c0:d7:21:35:
63:87:a0:09:d2:27:bf:36:c7:19:26:ba:a7:ae:d1:
c0:e6:40:bf:48:6b:d5:b3:ab:6b:0d:28:ca:ea:b1:
bc:fc:95:e3:90:a4:a7:d1:d7:b7:58:76:33:2e:27:
f1:1f:1c:4a:12:e0:ed:9c:25:cd:8b:8e:77:08:d3:
65:59:6c:26:f6:c3:5c:84:2c:15:ad:e4:a2:06:cf:
b6:1e:60:7e:29:f3:ce:4a:6a:cf:68:cd:ff:f3:b0:
26:31:f8:24:56:00:49:cf:4b:0b:2a:ed:19:7e:f7:
47:8e:53:db:40:1f:43:d2:f2:06:a1:9c:44:88:e8:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:FF:D8:7C:19:53:56:F5:20:38:B1:EB:2A:98:DB:8E:87:1A:C2
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/vc3_2HwZU1b1IDix6yqY246HGsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:f00::/40
Signature Algorithm: sha256WithRSAEncryption
22:19:4a:a5:4d:f3:70:f5:74:17:8d:6d:ee:d7:55:95:0a:1a:
45:9f:b4:88:ab:50:3e:8d:4a:bf:52:bb:1e:f4:85:b2:ef:0a:
4b:19:af:41:0b:4b:4e:f2:b0:48:eb:22:b4:1a:49:0c:c2:a8:
ea:38:9c:70:7c:34:74:81:2f:e4:e4:55:0c:61:ca:e2:d9:2a:
1f:16:1e:5d:6c:e0:f3:6d:9c:e3:c4:e4:bd:b3:cc:44:a6:3a:
92:14:55:cb:50:14:f7:5f:33:53:9c:e4:c3:10:d8:69:3d:70:
53:cc:30:5d:8e:10:84:56:36:59:34:f9:98:32:35:36:85:1f:
1e:66:60:8d:17:79:a4:95:1a:23:81:ce:26:fa:d5:10:4c:ff:
9b:6b:36:19:9b:af:ef:7e:48:23:56:d0:8f:8b:6d:3a:61:17:
91:7f:17:56:03:03:be:94:82:18:1e:db:d4:fc:30:5c:22:c1:
b7:55:00:bf:b7:7a:01:e9:07:60:07:36:46:3a:21:7c:99:a2:
aa:25:69:58:c6:02:05:6a:45:77:e4:ef:ac:ce:4c:2f:99:6d:
90:fa:9d:98:0f:f9:57:a1:4f:cc:11:bc:52:6d:c6:eb:54:8b:
b1:66:f5:25:d7:d1:78:15:9e:73:32:7b:7a:b3:26:5c:a8:fc:
91:39:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:23 2026 by rpki-client