This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/VdgeZDIeVNPfFDruPnZ1hu3S9e0.roa
File: VdgeZDIeVNPfFDruPnZ1hu3S9e0.roa (raw, json)
Hash identifier: Qq2NngHafLIvO2R0hWPLxLIlO+UaWWV0xfhSeKiG+84=
Subject key identifier: 55:D8:1E:64:32:1E:54:D3:DF:14:3A:EE:3E:76:75:86:ED:D2:F5:ED
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 019B77588A365E9BEDBA70D220B4F4B676CE
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/VdgeZDIeVNPfFDruPnZ1hu3S9e0.roa
Signing time: Thu 01 Jan 2026 02:17:29 +0000
ROA not before: Thu 01 Jan 2026 02:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210987
IP address blocks: 195.230.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:8a:36:5e:9b:ed:ba:70:d2:20:b4:f4:b6:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jan 1 02:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55d81e64321e54d3df143aee3e767586edd2f5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:19:38:12:a6:a2:f3:c7:00:86:9c:06:0c:
aa:34:2a:a1:c1:61:21:4d:23:89:34:12:b4:53:59:
c0:c2:1b:42:d3:4d:02:73:ed:f4:82:0f:e3:6a:ed:
06:7c:f3:de:47:2b:bd:e8:a5:da:1e:a0:91:7d:4e:
1b:36:f8:9e:d8:c8:0b:a8:87:45:67:90:2f:e9:4c:
79:7f:d7:1b:ed:61:7a:d1:0f:36:a9:ce:84:d8:7c:
16:ea:5b:59:e1:7a:3b:37:d4:53:3a:e1:e5:16:ad:
01:85:ed:f5:0c:3f:e5:a8:74:f2:cc:ca:a9:8e:d9:
a7:3e:4d:4c:67:16:77:20:0f:f6:5f:d9:82:23:18:
58:32:c6:f6:eb:75:f6:8d:09:52:10:05:fb:ee:f9:
3f:67:14:73:78:a2:03:23:03:72:fb:21:a6:b7:54:
6c:37:cf:74:af:2e:d8:c0:86:82:34:fc:2a:0d:4f:
a9:3f:7b:f8:7b:40:df:ae:cd:72:e0:e8:1e:ef:a1:
bd:91:fb:85:87:10:a3:e0:d2:c0:84:6b:5c:82:7b:
fa:27:11:2d:6a:35:3a:83:da:20:f9:d4:d9:3e:18:
05:7f:5e:13:54:fb:69:72:c3:0c:8c:56:58:41:96:
84:21:dc:51:46:bd:df:c1:00:be:54:26:89:a4:41:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D8:1E:64:32:1E:54:D3:DF:14:3A:EE:3E:76:75:86:ED:D2:F5:ED
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/VdgeZDIeVNPfFDruPnZ1hu3S9e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:39:63:7b:fe:99:1a:46:67:f3:41:51:bd:a3:45:71:f1:13:
ba:0d:d9:89:8b:a2:dc:d3:01:5f:ea:6d:07:46:10:b9:c0:88:
35:22:b4:aa:e8:de:35:4b:46:f2:32:1c:2c:db:93:f4:ee:16:
4f:3f:12:91:24:b5:d5:39:53:a8:54:d4:3e:5d:c1:5f:1c:19:
03:74:a4:6a:6d:fc:2b:b0:6c:33:68:49:c9:df:bd:50:fc:83:
24:9b:0a:2b:cc:29:66:53:a3:ed:b9:81:a4:7b:41:93:27:57:
c1:af:1b:04:98:f5:de:3b:d4:85:3d:a2:04:a8:9e:06:44:f0:
ae:8a:ff:5b:f8:18:8f:d3:ea:d5:e8:8d:c0:6f:a7:d5:0a:19:
93:5a:cb:a6:f5:82:22:c7:10:9c:8b:91:db:22:5a:eb:7f:4b:
40:78:6d:cc:dc:f1:0e:fa:16:fd:f5:e1:97:ff:fe:a0:be:ca:
be:9d:ed:a5:9a:88:c2:a8:7f:b2:15:6d:0d:12:4e:fb:b2:c0:
7e:1b:9e:5e:18:2e:d7:98:1d:c0:50:79:40:d3:08:f1:1d:57:
a1:50:e8:9c:c3:20:cc:55:57:fa:6f:a5:7b:5f:87:94:e6:d0:
aa:60:23:27:4f:00:73:2b:61:30:fa:93:df:5c:0f:97:10:29:
01:8f:30:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WIo2XpvtunDSILT0tnbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj
MDJmMTcwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWQ4MWU2NDMyMWU1NGQzZGYxNDNhZWUzZTc2NzU4NmVkZDJmNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGMZOBKmovPHAIacBgyqNCqhwWEh
TSOJNBK0U1nAwhtC000Cc+30gg/jau0GfPPeRyu96KXaHqCRfU4bNvie2MgLqIdF
Z5Av6Ux5f9cb7WF60Q82qc6E2HwW6ltZ4Xo7N9RTOuHlFq0Bhe31DD/lqHTyzMqp
jtmnPk1MZxZ3IA/2X9mCIxhYMsb263X2jQlSEAX77vk/ZxRzeKIDIwNy+yGmt1Rs
N890ry7YwIaCNPwqDU+pP3v4e0Dfrs1y4Oge76G9kfuFhxCj4NLAhGtcgnv6JxEt
ajU6g9og+dTZPhgFf14TVPtpcsMMjFZYQZaEIdxRRr3fwQC+VCaJpEGqbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXYHmQyHlTT3xQ67j52dYbt0vXtMB8GA1UdIwQY
MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt
OTM3ZTI3ZWUxYjViLzEvVmRnZVpESWVWTlBmRkRydVBuWjFodTNTOWUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi
LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+aIMA0G
CSqGSIb3DQEBCwUAA4IBAQArOWN7/pkaRmfzQVG9o0Vx8RO6DdmJi6Lc0wFf6m0H
RhC5wIg1IrSq6N41S0byMhws25P07hZPPxKRJLXVOVOoVNQ+XcFfHBkDdKRqbfwr
sGwzaEnJ371Q/IMkmworzClmU6PtuYGke0GTJ1fBrxsEmPXeO9SFPaIEqJ4GRPCu
iv9b+BiP0+rV6I3Ab6fVChmTWsum9YIixxCci5HbIlrrf0tAeG3M3PEO+hb99eGX
//6gvsq+ne2lmojCqH+yFW0NEk77ssB+G55eGC7XmB3AUHlA0wjxHVehUOicwyDM
VVf6b6V7X4eU5tCqYCMnTwBzK2Ew+pPfXA+XECkBjzC9
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:40:12 2026 by rpki-client