This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa
File: VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa (raw, json)
Hash identifier: PjwhiA7JGNs6MbNHIzd4jnryrVDjAI+5D7u5r33tbKg=
Subject key identifier: 54:2B:41:DD:7A:56:00:B8:A2:61:99:51:F2:42:7D:F9:3F:23:16:53
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 019B7AC8107BA53F4CCDA990296FCABDA49C
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa
Signing time: Thu 01 Jan 2026 18:18:10 +0000
ROA not before: Thu 01 Jan 2026 18:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 178.236.233.0/24 maxlen: 24
178.236.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:10:7b:a5:3f:4c:cd:a9:90:29:6f:ca:bd:a4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 1 18:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=542b41dd7a5600b8a2619951f2427df93f231653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:eb:9e:59:73:41:c6:c1:6c:46:5e:02:99:
91:5b:b3:72:7a:3e:78:84:de:b9:78:b2:8b:74:df:
aa:9c:64:d7:02:29:b4:8c:75:04:d7:f6:54:0c:d9:
08:1a:1a:0d:e6:32:04:a1:37:c9:32:90:f4:38:96:
ae:77:8f:96:e9:ff:26:ce:02:50:ec:3b:20:3a:56:
6d:7e:4a:05:27:0c:90:be:c2:84:de:a6:86:d7:8f:
60:dd:92:8b:ff:b3:dc:8e:54:61:b0:d2:98:c5:06:
d4:ca:fc:5a:0e:11:c0:bc:b6:b7:c2:d9:31:db:d5:
5e:ab:80:d9:ae:33:ca:23:73:69:a6:01:49:70:ef:
77:67:ba:5d:2c:70:a9:ea:3e:df:35:8e:f9:72:03:
42:7c:62:02:db:cc:aa:b5:2d:f8:5f:b0:a2:0a:88:
82:36:f4:8a:56:05:75:eb:65:29:f5:56:8a:94:13:
65:32:22:e8:b9:e6:39:ea:87:31:98:8a:fb:9f:16:
a3:14:a2:89:89:4a:e0:ac:68:c4:9a:31:45:3b:be:
8e:3b:c2:78:74:fa:06:47:3e:7e:53:56:68:79:8e:
17:36:87:ca:70:b0:fe:96:92:b9:f5:7f:fa:46:5f:
c8:6a:ee:fa:4c:2f:6c:7f:6a:43:25:b9:c6:3e:2d:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2B:41:DD:7A:56:00:B8:A2:61:99:51:F2:42:7D:F9:3F:23:16:53
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/VCtB3XpWALiiYZlR8kJ9-T8jFlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.233.0/24
178.236.237.0/24
Signature Algorithm: sha256WithRSAEncryption
85:19:51:f9:de:77:e4:c9:58:56:63:25:66:c3:84:42:9f:74:
ef:8f:d5:48:7b:fb:2d:60:96:a3:f6:cc:1c:0e:84:2b:ca:5c:
3d:f0:5e:f5:d9:bf:b4:b8:43:84:c8:b8:97:b4:41:76:0d:37:
fc:dc:5f:89:8b:56:3e:06:13:b6:58:10:50:a4:2d:42:ae:1f:
c1:24:ab:a8:37:ea:9b:9b:a5:7a:99:15:10:aa:9b:31:cb:8d:
d3:38:be:24:a9:36:97:a8:8e:c0:c5:e6:f0:b0:1b:93:09:3c:
2b:3e:e6:62:b1:08:ad:30:9e:e6:79:8b:fe:5a:c3:46:ef:d3:
7f:79:62:f1:78:e8:20:b9:5b:04:a8:1b:8c:55:c2:7b:36:ac:
6b:64:6e:c1:fb:ad:23:21:78:11:fe:34:5b:d9:3f:0e:69:71:
63:dd:96:ec:05:37:dc:2e:71:b8:81:a3:c8:ca:b7:7c:ba:a7:
f6:48:16:51:39:59:e4:d0:8e:3e:b4:b1:c4:9c:09:93:cf:5c:
a9:a2:b4:bb:aa:e0:47:7a:6c:61:6b:a9:c2:45:e7:a9:8a:08:
1f:1f:55:56:13:0b:b3:5d:2d:ce:21:0e:d0:20:1b:3e:2d:19:
43:90:c1:99:6a:c8:78:a7:4e:d8:85:60:5d:58:bc:38:2f:82:
63:e6:35:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt6yBB7pT9MzamQKW/KvaScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjYwMTAxMTgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDJiNDFkZDdhNTYwMGI4YTI2MTk5NTFmMjQyN2RmOTNmMjMxNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTbrnllzQcbBbEZeApmRW7Nyej54
hN65eLKLdN+qnGTXAim0jHUE1/ZUDNkIGhoN5jIEoTfJMpD0OJaud4+W6f8mzgJQ
7DsgOlZtfkoFJwyQvsKE3qaG149g3ZKL/7PcjlRhsNKYxQbUyvxaDhHAvLa3wtkx
29Veq4DZrjPKI3NppgFJcO93Z7pdLHCp6j7fNY75cgNCfGIC28yqtS34X7CiCoiC
NvSKVgV162Up9VaKlBNlMiLoueY56ocxmIr7nxajFKKJiUrgrGjEmjFFO76OO8J4
dPoGRz5+U1ZoeY4XNofKcLD+lpK59X/6Rl/Iau76TC9sf2pDJbnGPi2GuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFQrQd16VgC4omGZUfJCffk/IxZTMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvVkN0QjNYcFdBTGlpWVpsUjhrSjktVDhqRmxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsuzpAwQA
suztMA0GCSqGSIb3DQEBCwUAA4IBAQCFGVH53nfkyVhWYyVmw4RCn3Tvj9VIe/st
YJaj9swcDoQrylw98F712b+0uEOEyLiXtEF2DTf83F+Ji1Y+BhO2WBBQpC1Crh/B
JKuoN+qbm6V6mRUQqpsxy43TOL4kqTaXqI7AxebwsBuTCTwrPuZisQitMJ7meYv+
WsNG79N/eWLxeOgguVsEqBuMVcJ7NqxrZG7B+60jIXgR/jRb2T8OaXFj3ZbsBTfc
LnG4gaPIyrd8uqf2SBZROVnk0I4+tLHEnAmTz1yporS7quBHemxha6nCReepiggf
H1VWEwuzXS3OIQ7QIBs+LRlDkMGZash4p07YhWBdWLw4L4Jj5jUT
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:32:38 2026 by rpki-client