This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/VOc75q9rZMJA4FXqQscyX1ERS_8.roa
File: VOc75q9rZMJA4FXqQscyX1ERS_8.roa (raw, json)
Hash identifier: Ry99I0BJCRJbt6jtJzL48yrr1YlnIVfVbDfo1hLRwXY=
Subject key identifier: 54:E7:3B:E6:AF:6B:64:C2:40:E0:55:EA:42:C7:32:5F:51:11:4B:FF
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 019B7BA528A67F430328DCA7CBACF863A924
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/VOc75q9rZMJA4FXqQscyX1ERS_8.roa
Signing time: Thu 01 Jan 2026 22:19:39 +0000
ROA not before: Thu 01 Jan 2026 22:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 83.168.112.0/24 maxlen: 24
83.168.113.0/24 maxlen: 24
83.168.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:28:a6:7f:43:03:28:dc:a7:cb:ac:f8:63:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 1 22:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54e73be6af6b64c240e055ea42c7325f51114bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:4c:36:9f:7e:ea:e8:99:f9:08:52:b2:7d:
40:32:f5:15:8c:e8:f2:c5:97:ce:06:fd:44:ba:8b:
0f:2b:22:e0:db:4a:7c:6c:ab:0a:72:25:2a:03:ec:
38:90:1c:b3:3b:64:79:9a:cb:65:16:62:f8:34:05:
12:95:2f:37:a9:0b:ec:4d:11:42:81:89:c1:2a:9a:
99:1a:4b:81:38:b2:94:2f:55:33:1c:ce:1f:a5:52:
e3:3d:0f:f4:54:89:b9:1d:43:4e:aa:5d:7f:87:07:
bc:16:01:04:f3:de:90:96:ee:04:1a:fe:c4:fa:f9:
dc:63:af:40:9a:72:80:e7:d0:33:e5:be:23:84:a8:
33:ff:81:07:bd:a6:21:69:58:b2:61:2c:dd:81:c1:
72:ad:bc:b7:c9:02:d0:0d:5d:07:5f:d4:0f:e9:a3:
23:35:ae:1f:1d:4f:8d:0e:52:16:7d:00:23:8a:9e:
d2:af:81:57:75:6e:20:8f:ad:36:97:bb:88:b4:60:
67:ef:48:8a:f3:e7:1b:6a:0f:e3:97:11:18:39:ac:
f5:dc:24:b3:55:c4:d4:08:fa:46:e5:5b:f8:5d:fd:
3e:3e:73:13:b7:cc:2b:06:74:54:7f:56:e4:ce:31:
87:0c:70:bd:92:ee:9c:9a:4d:a4:39:a2:e7:c0:16:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:3B:E6:AF:6B:64:C2:40:E0:55:EA:42:C7:32:5F:51:11:4B:FF
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/VOc75q9rZMJA4FXqQscyX1ERS_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.112.0/23
83.168.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ee:d2:60:3b:94:7d:c0:49:f0:0b:61:ec:46:d9:c8:28:69:
fc:d6:09:ae:0a:9d:01:3f:68:22:74:5f:c4:02:2b:94:ea:b2:
3e:20:e1:c2:00:3d:d6:6a:fb:40:2c:f4:18:85:5d:8a:69:51:
db:26:c4:1e:9f:a2:70:62:e9:1b:b8:a4:0f:82:13:37:5b:0d:
83:b3:e8:ff:bd:48:d3:8a:3b:78:fb:67:48:db:4a:f0:6c:f5:
ec:67:29:27:b5:70:35:db:bb:2b:30:4b:2f:d8:03:5b:6e:b5:
8d:6f:ab:1b:a3:f2:22:48:17:be:6f:f1:e2:df:cf:2f:7d:a7:
ce:e2:3c:c7:0e:a8:82:f8:3d:c0:30:aa:31:7c:d9:15:28:12:
ea:be:f2:1d:20:36:0e:71:fe:65:71:33:44:2e:07:85:0b:63:
ab:aa:85:0e:4a:6b:3b:22:af:4c:7e:7a:62:55:66:23:3c:79:
90:39:f7:c1:54:24:45:b0:81:78:36:6e:f8:af:5d:b4:dc:ee:
b0:de:ed:8a:88:c5:dc:ea:2c:11:f2:c3:d4:b0:a2:5b:a4:7f:
47:78:14:6e:30:19:bd:2b:d3:65:f3:ed:0f:6e:79:61:16:31:
22:f7:63:b9:26:d4:e0:72:c0:44:bf:66:56:ea:8b:8a:28:95:
15:2c:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:39:42 2026 by rpki-client