This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VeHqLROfdS_jL-AwmtThhDT6_is.roa
File: VeHqLROfdS_jL-AwmtThhDT6_is.roa (raw, json)
Hash identifier: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=
Subject key identifier: 55:E1:EA:2D:13:9F:75:2F:E3:2F:E0:30:9A:D4:E1:84:34:FA:FE:2B
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 019B7D5D004FD48C90E99B06513822A4D7C2
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VeHqLROfdS_jL-AwmtThhDT6_is.roa
Signing time: Fri 02 Jan 2026 06:20:05 +0000
ROA not before: Fri 02 Jan 2026 06:20:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62416
IP address blocks: 31.7.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:51:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:00:4f:d4:8c:90:e9:9b:06:51:38:22:a4:d7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 2 06:20:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55e1ea2d139f752fe32fe0309ad4e18434fafe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:85:bb:17:1e:36:13:26:a6:e0:b4:58:c9:
ac:99:e2:32:0a:4d:da:23:55:cf:91:29:6f:aa:0e:
36:0c:52:96:c6:b5:e3:4c:0d:60:03:9d:b2:ef:b6:
14:1d:37:b9:e6:2e:a9:03:72:9f:c3:0a:a2:37:82:
07:1f:5c:06:a2:fa:44:e5:75:d5:94:3b:9e:e9:1d:
82:40:75:2b:d9:f0:53:46:9d:7b:b2:e4:cd:59:e0:
26:41:cc:7f:82:34:19:d7:f2:33:cb:b2:25:c8:68:
85:54:05:8a:22:6b:5c:c1:41:ca:90:17:37:f6:d7:
2e:68:d0:83:f6:dd:92:96:07:fa:ba:51:73:f9:2d:
d9:1b:57:1e:53:8f:29:22:06:4a:71:cf:a2:fc:a3:
12:b0:ca:a3:dc:60:18:c2:3b:21:49:40:f0:c3:01:
ed:96:d2:b2:62:28:75:6e:7e:b0:1d:ff:4f:6a:d5:
ef:d0:c0:71:08:14:4f:c9:59:da:8d:81:57:a8:3a:
5e:3a:dd:56:41:f2:8a:24:f9:d5:06:69:0b:82:c1:
fe:2b:9b:d3:77:d7:4b:59:d4:d8:cf:c7:b8:49:69:
38:ce:00:f2:18:12:ae:e2:f9:f8:ec:2d:e1:a9:b5:
db:e8:29:50:7b:a3:85:59:63:a0:eb:00:ec:a1:87:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E1:EA:2D:13:9F:75:2F:E3:2F:E0:30:9A:D4:E1:84:34:FA:FE:2B
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/VeHqLROfdS_jL-AwmtThhDT6_is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.74.0/23
Signature Algorithm: sha256WithRSAEncryption
44:3e:4c:ff:8f:52:ac:6d:4d:1c:e9:e3:b6:13:dc:a7:83:c2:
d2:5d:82:b7:db:ef:90:6e:55:b8:73:41:b9:89:30:9f:27:a4:
51:27:ac:1e:c0:eb:9b:ec:1f:bb:99:aa:2c:ea:c2:15:2d:fd:
21:55:a8:25:45:22:6e:5a:67:9c:6a:de:5a:53:b3:39:52:32:
82:8b:3b:00:df:89:e0:63:46:7e:b6:24:20:31:cb:dc:c5:32:
0a:86:d8:41:b1:94:c5:70:c8:13:00:ea:66:66:e9:b3:1f:a6:
60:b8:08:dc:2c:f2:31:e4:c6:50:41:84:6d:03:a9:fb:56:d9:
28:82:95:4d:40:e9:a7:41:f2:82:3d:e3:80:80:b3:97:1a:a5:
b0:d5:0b:47:05:38:63:66:88:b9:70:de:6f:94:af:9e:b6:43:
f0:ff:2b:0c:2d:ed:4e:70:57:33:7b:a7:42:29:0b:c4:29:5e:
12:dd:a7:ee:bb:ac:97:82:c9:3a:31:82:90:f1:d8:8f:62:03:
77:78:9d:1f:52:76:92:e5:09:0a:bc:24:fd:48:33:2a:a7:e8:
be:c2:4d:39:ba:ce:2d:9b:a6:f9:49:e2:74:74:b5:3f:2d:e8:
77:3e:9b:13:50:6e:a6:fa:a1:c1:f0:93:3e:c1:47:63:17:44:
c5:7c:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:43 2026 by rpki-client