This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/vXqWSpoy-vUfdRhBjmIqtuILrrA.roa
File: vXqWSpoy-vUfdRhBjmIqtuILrrA.roa (raw, json)
Hash identifier: AP1nnsDukGUHxQL7JsdOeOGXem9GHtDYUmgA7WKjN3M=
Subject key identifier: BD:7A:96:4A:9A:32:FA:F5:1F:75:18:41:8E:62:2A:B6:E2:0B:AE:B0
Certificate issuer: /CN=a95f638862529b6dafd440e172a22f0120b09aea
Certificate serial: 019B77C6EFBA5636B9274C062E64EAAFE186
Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/vXqWSpoy-vUfdRhBjmIqtuILrrA.roa
Signing time: Thu 01 Jan 2026 04:18:04 +0000
ROA not before: Thu 01 Jan 2026 04:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24954
IP address blocks: 193.57.12.0/24 maxlen: 24
193.57.13.0/24 maxlen: 24
193.57.34.0/24 maxlen: 24
193.57.176.0/24 maxlen: 24
193.57.177.0/24 maxlen: 24
193.57.178.0/24 maxlen: 24
193.57.179.0/24 maxlen: 24
193.57.180.0/24 maxlen: 24
194.5.74.0/24 maxlen: 24
194.5.75.0/24 maxlen: 24
194.5.76.0/24 maxlen: 24
194.5.77.0/24 maxlen: 24
194.5.150.0/24 maxlen: 24
194.5.151.0/24 maxlen: 24
194.5.166.0/24 maxlen: 24
194.5.167.0/24 maxlen: 24
2001:67c:8a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:ef:ba:56:36:b9:27:4c:06:2e:64:ea:af:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea
Validity
Not Before: Jan 1 04:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd7a964a9a32faf51f7518418e622ab6e20baeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:b1:fe:50:67:78:b8:d1:03:29:d1:4e:27:
56:77:28:c4:13:4c:e3:37:eb:c9:42:0f:a9:8e:63:
63:75:ab:ff:ab:c8:98:83:e3:c9:87:03:70:c1:e1:
a2:30:aa:8b:e7:56:40:d2:ea:3a:59:73:95:54:9d:
7e:69:55:24:f1:db:d8:3f:62:cb:79:99:63:09:ac:
c0:ca:6f:e9:7a:5d:4d:82:ea:87:76:e8:ae:d0:63:
98:22:30:09:65:40:f3:4d:c5:60:75:b9:ae:c8:b6:
46:20:5d:de:06:b8:a8:53:c8:ae:6c:39:63:6d:a5:
a2:99:81:81:97:25:dc:40:db:9f:f3:4c:4b:2f:5c:
fe:54:c7:e5:b4:54:0a:d1:6d:e7:11:b1:1c:d3:9f:
43:2f:5c:fb:a1:f9:48:2b:a3:77:95:e5:79:9b:c9:
ce:9a:8a:cb:d5:2a:12:43:07:36:19:f3:d7:fe:58:
25:c8:0c:e8:b7:db:cf:8b:7a:31:bf:d0:ce:11:a9:
88:e1:b8:fa:17:60:e6:0b:c2:8a:61:5e:fe:93:91:
c4:6f:7b:f2:fd:77:d2:e4:db:74:6b:85:84:e7:2c:
9b:5d:02:37:48:ae:f9:0f:0b:8c:7e:d1:16:95:d8:
7a:2c:00:aa:df:76:05:1c:6f:9c:9e:0e:90:74:e1:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:96:4A:9A:32:FA:F5:1F:75:18:41:8E:62:2A:B6:E2:0B:AE:B0
X509v3 Authority Key Identifier:
keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/vXqWSpoy-vUfdRhBjmIqtuILrrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.12.0/23
193.57.34.0/24
193.57.176.0-193.57.180.255
194.5.74.0-194.5.77.255
194.5.150.0/23
194.5.166.0/23
IPv6:
2001:67c:8a0::/48
Signature Algorithm: sha256WithRSAEncryption
39:78:60:bc:d1:27:46:9d:2a:06:de:48:e9:a8:cb:5c:6b:17:
93:5b:a2:bb:18:74:6d:e2:c9:a8:ed:66:52:ff:47:71:04:c3:
80:f1:a9:3c:f9:e7:d0:93:13:01:d5:4c:de:05:55:2b:3a:89:
99:4c:56:e4:76:15:5e:87:a1:98:13:ee:85:28:6a:55:36:95:
86:bd:22:3d:05:c0:dc:34:d1:d8:e9:3e:e2:d3:0d:00:5e:9a:
b4:76:7a:08:21:e2:3c:4c:0d:5f:22:b7:86:f0:89:7f:5d:a2:
33:bb:ef:36:58:6e:ea:56:89:cc:e9:6e:a6:f1:c4:d8:46:f5:
a9:3f:0e:5b:ab:56:e8:d6:ba:58:c8:06:3b:35:f7:10:87:d8:
c6:2a:84:8a:fb:8a:50:de:7d:d1:6d:81:86:cb:5b:74:bd:02:
68:b5:bd:a7:e1:9a:49:7b:a1:80:f5:f0:f2:95:51:61:99:a7:
65:04:6e:c9:50:44:fa:84:fe:7a:5d:05:e9:56:19:c7:4e:59:
6c:88:ee:7b:2d:ce:5f:50:89:0b:da:9f:82:bc:37:bd:cd:dc:
38:71:12:76:be:ad:b5:a7:09:09:97:ff:e5:53:98:b4:ab:2c:
30:68:7c:0e:a3:7b:d0:af:46:c2:2a:5b:8d:ae:d3:15:70:a5:
78:0c:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:45 2026 by rpki-client