This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa
File: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (raw, json)
Hash identifier: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=
Subject key identifier: 54:41:87:A3:18:61:1D:50:7E:0F:86:98:D1:8D:FF:E2:36:D4:77:2A
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019BA340D74AC20ECFFCCE4653DD35224320
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa
Signing time: Fri 09 Jan 2026 14:54:54 +0000
ROA not before: Fri 09 Jan 2026 14:54:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30818
IP address blocks: 82.221.0.0/20 maxlen: 20
82.221.4.0/24 maxlen: 24
82.221.16.0/20 maxlen: 20
82.221.32.0/20 maxlen: 20
82.221.48.0/20 maxlen: 20
82.221.57.0/24 maxlen: 24
82.221.64.0/20 maxlen: 20
82.221.80.0/20 maxlen: 20
82.221.96.0/20 maxlen: 20
82.221.112.0/20 maxlen: 20
82.221.164.0/24 maxlen: 24
82.221.166.0/24 maxlen: 24
82.221.167.0/24 maxlen: 24
82.221.168.0/24 maxlen: 24
82.221.170.0/24 maxlen: 24
82.221.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a3:40:d7:4a:c2:0e:cf:fc:ce:46:53:dd:35:22:43:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jan 9 14:54:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=544187a318611d507e0f8698d18dffe236d4772a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:d0:db:a2:9f:1a:97:39:9a:fe:e9:4d:e7:
6b:ba:27:a5:53:fb:74:55:17:36:bd:15:15:94:c4:
8a:3e:1c:d2:b8:48:7b:39:8a:ee:3a:1b:96:1a:8f:
90:f7:6c:69:05:c5:e6:96:93:20:a0:e7:cf:cc:bc:
a3:74:06:07:51:96:a8:c8:27:79:c6:4d:3c:d3:68:
c0:16:00:87:4b:d1:55:d4:48:e7:c9:c2:2c:53:24:
06:08:cb:af:ef:f1:81:cb:e7:01:b9:2b:64:f7:0f:
04:66:02:92:b1:85:3f:86:3e:00:eb:48:fc:e1:0f:
ce:ae:2a:c9:20:4a:96:d9:95:31:ba:f9:ab:bb:8a:
cb:d7:0a:7f:58:27:4b:99:a0:20:32:e9:3c:fc:eb:
56:a8:96:8d:e6:aa:7e:a3:d0:35:9f:0f:ba:e5:0e:
70:27:8f:39:1f:78:1e:9f:57:2f:42:7d:42:55:47:
32:4a:ea:77:43:ae:d4:e5:45:92:84:84:95:d5:c0:
8c:92:48:7a:a1:7f:61:ca:ef:7e:c2:14:37:51:71:
2e:56:be:e1:b1:a7:6c:c7:7b:ef:24:12:cb:42:b1:
83:bb:43:46:75:42:a7:99:50:2b:be:ce:2c:67:38:
f1:26:f4:ec:d4:7f:dc:85:21:5a:89:04:00:0b:66:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:87:A3:18:61:1D:50:7E:0F:86:98:D1:8D:FF:E2:36:D4:77:2A
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.221.0.0/17
82.221.164.0/24
82.221.166.0-82.221.168.255
82.221.170.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:b1:95:82:3a:71:ab:64:b2:d6:ca:8a:c0:e2:ad:a2:da:ea:
21:09:8a:ae:68:99:d5:b3:e6:fa:07:77:88:74:91:81:a8:04:
83:2f:31:47:c5:78:8c:20:2e:c9:83:b6:77:88:7d:c5:d2:e9:
05:0a:87:89:40:b8:4c:a0:33:ac:c1:9a:69:1d:3a:c7:44:0a:
39:b3:ca:19:fc:e1:97:2b:fa:35:77:b6:48:db:ca:fb:65:76:
d7:10:a9:91:64:e7:ad:b7:e7:40:6d:81:32:0f:d2:3f:a0:12:
fc:bf:99:11:49:2e:29:2a:03:82:ec:76:51:64:c4:a4:ca:71:
96:02:f4:88:a0:9f:d0:a3:73:2e:96:e6:ec:b7:88:f4:89:f2:
12:00:43:8c:03:8d:f7:30:88:9e:12:a9:77:78:05:14:a4:ec:
f9:60:20:f7:0e:ae:7c:36:67:a0:1e:38:40:ce:fb:1f:16:d2:
f7:cd:c3:e6:eb:79:00:d3:b4:bb:ee:8e:61:31:25:81:0b:41:
0b:45:fe:a9:1c:df:13:60:59:ad:17:8e:49:20:10:8b:7c:8b:
b5:9f:2d:c0:8d:2a:8c:cc:07:86:64:3c:7b:e9:d4:d1:15:7f:
02:91:6a:93:a3:62:da:a4:92:21:32:19:2b:42:11:5b:97:f4:
fe:f0:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:43:08 2026 by rpki-client