This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_VVNfxdA5_FHj05YYq547OSKmlQ.roa
File: _VVNfxdA5_FHj05YYq547OSKmlQ.roa (raw, json)
Hash identifier: 13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=
Subject key identifier: FD:55:4D:7F:17:40:E7:F1:47:8F:4E:58:62:AE:78:EC:E4:8A:9A:54
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 019B79ECDF5AC2233C93DDE2C7D405C7B5C7
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_VVNfxdA5_FHj05YYq547OSKmlQ.roa
Signing time: Thu 01 Jan 2026 14:18:45 +0000
ROA not before: Thu 01 Jan 2026 14:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207044
IP address blocks: 185.106.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:df:5a:c2:23:3c:93:dd:e2:c7:d4:05:c7:b5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Jan 1 14:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd554d7f1740e7f1478f4e5862ae78ece48a9a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:71:aa:e8:7f:68:0d:2c:85:7a:2e:99:da:
9d:0a:d5:5c:e1:31:6a:f8:54:63:d2:5d:25:34:a0:
2f:eb:82:cd:87:c3:16:74:d6:96:55:7c:1a:ee:e9:
85:f9:d7:1b:22:2d:14:6e:80:c6:e3:90:5f:54:28:
bc:69:f2:1a:d0:87:be:40:67:1a:ee:0f:75:a9:57:
26:8f:7c:b1:db:43:97:17:f1:85:cc:a1:96:71:50:
b0:cf:07:25:f8:8e:5b:d9:4d:7e:5a:b8:89:cc:e5:
90:88:a9:ea:23:74:f1:c0:92:99:79:76:6c:92:bc:
de:18:47:a6:84:04:0e:a5:bd:c7:4b:21:be:4e:8b:
93:82:e6:47:3c:b2:0c:64:d5:9d:c0:78:ea:9a:0d:
79:2a:e1:ab:89:3b:73:42:ae:d0:15:40:65:01:0c:
43:fa:79:55:84:7e:c8:e0:91:94:45:92:40:54:a9:
38:e7:6c:3d:37:b0:f0:d2:a6:ba:c3:c9:36:5d:f4:
0e:8a:8b:b2:99:1b:93:e6:17:8a:c6:f3:7b:f8:95:
6a:f2:af:07:d7:b5:1b:a0:3b:24:ea:c9:13:da:a5:
40:1b:5e:86:e5:ea:03:c7:4d:8e:5c:fd:41:d7:4c:
a3:81:68:67:cd:fe:01:12:c3:c7:4e:77:b7:62:a8:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:55:4D:7F:17:40:E7:F1:47:8F:4E:58:62:AE:78:EC:E4:8A:9A:54
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/_VVNfxdA5_FHj05YYq547OSKmlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.88.0/22
Signature Algorithm: sha256WithRSAEncryption
88:ef:4d:68:ef:89:6b:f8:6e:cd:27:93:13:f4:39:8f:e9:aa:
ba:7d:fe:e9:4e:e5:c6:2a:60:17:09:ea:e6:f2:6d:1c:9c:8d:
0f:f0:dc:68:5e:de:90:1d:04:83:1d:61:21:49:08:31:6a:11:
67:ce:6f:83:f7:56:ed:40:4a:f2:f2:0a:42:af:89:f7:7c:63:
c3:98:90:01:3c:f4:fb:47:b3:45:8b:f4:79:d4:3a:31:af:d8:
2b:76:9b:f6:00:5e:0a:06:31:68:2a:7d:96:9a:17:74:d9:9a:
75:c6:32:c2:45:7b:20:53:74:76:fc:4b:19:7e:8e:a6:3d:68:
2d:ad:88:d5:40:24:8c:0a:3f:1a:72:46:e0:a2:71:f2:66:74:
30:f0:a7:3e:09:64:ad:7c:12:9d:95:ba:31:2a:fb:dc:14:90:
e1:27:21:de:1a:0d:2d:3e:e5:d6:9d:69:cc:6f:69:7e:6b:5f:
b7:d0:2e:e7:19:5c:40:46:22:5e:fb:0a:23:74:63:61:67:a9:
75:00:a1:00:37:63:51:32:9f:11:6c:cf:60:ad:b2:2f:43:0a:
af:3f:b9:a7:06:aa:e4:f3:b9:66:f9:fc:a0:59:96:4e:e8:ce:
fe:a6:b7:6f:3a:57:72:c7:1e:41:e4:dd:97:f9:47:c4:b4:dc:
bb:f5:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:26 2026 by rpki-client