This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa
File: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (raw, json)
Hash identifier: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=
Subject key identifier: 57:37:B2:A7:66:BF:DB:26:E3:D9:85:3E:D2:2D:8E:A1:99:67:C2:72
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019B7DCB65F2210284F6AF599D781E3E5F01
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa
Signing time: Fri 02 Jan 2026 08:20:40 +0000
ROA not before: Fri 02 Jan 2026 08:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16235
IP address blocks: 109.95.63.0/24 maxlen: 24
185.186.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:65:f2:21:02:84:f6:af:59:9d:78:1e:3e:5f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 2 08:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5737b2a766bfdb26e3d9853ed22d8ea19967c272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:67:4d:b2:de:a2:6e:70:3b:3f:ad:57:c3:
5c:19:e5:6f:cd:ef:e9:98:51:dd:bb:f2:c3:cb:0b:
13:f5:50:44:91:af:cf:6e:d3:48:ba:19:38:6e:68:
a4:bd:1d:25:2c:ae:4d:c5:f9:fa:74:d7:ca:98:c5:
31:84:ad:8f:5b:4b:87:fa:9e:0b:c5:4c:3f:53:08:
fc:36:0a:bc:4b:4a:6c:63:8a:52:28:0e:33:40:a1:
42:b5:a6:7a:12:fa:a6:b8:5d:2b:ee:68:42:98:77:
01:55:2b:0b:a8:f1:82:da:83:5a:ff:aa:e0:39:af:
46:09:df:7d:8b:42:43:98:ec:f7:d7:38:a4:a2:db:
4a:fd:e7:86:2e:7f:52:0a:4d:cd:0d:37:41:ba:21:
e2:43:65:01:39:fd:b2:25:aa:17:26:e8:f6:00:f9:
33:4b:39:95:5f:42:9a:3d:30:e6:f5:2e:5e:07:7c:
c8:7d:bb:ef:e9:8f:d7:7f:22:30:cc:77:dd:ee:02:
f0:c7:34:16:12:bc:f6:c4:06:7a:c3:cb:cb:21:28:
3b:9e:0d:9b:12:ac:bb:e5:a5:bf:f2:c2:29:8a:a5:
22:29:41:7a:b8:8e:9e:79:19:22:ea:42:ec:a6:6d:
2f:5e:61:19:12:49:03:b6:74:42:2e:56:0e:72:62:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:37:B2:A7:66:BF:DB:26:E3:D9:85:3E:D2:2D:8E:A1:99:67:C2:72
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.63.0/24
185.186.241.0/24
Signature Algorithm: sha256WithRSAEncryption
70:36:1b:61:37:fd:3a:ee:92:b3:e9:54:bf:5f:5d:9d:a6:8a:
fb:61:c3:94:0f:ab:82:7a:1f:9e:dc:3f:0a:26:93:f1:47:da:
db:30:c5:0c:e9:ec:9e:51:cb:29:67:fc:dc:c0:e9:16:d7:d1:
30:b8:b0:4a:35:56:3f:af:09:2f:a7:62:a5:e7:bb:a5:fc:fb:
c4:ac:f0:10:c1:45:c7:83:cc:2f:2b:63:1c:d8:75:a0:9a:dd:
cb:ba:fe:70:c6:01:e7:bc:57:0e:1b:f1:40:04:db:43:97:4d:
61:63:0e:00:d9:dc:3e:e5:14:0d:74:56:d3:19:f7:9c:46:ce:
9c:e3:61:b0:7a:d4:19:cf:a2:4a:a2:17:7c:5b:ac:c4:de:06:
29:18:d2:16:40:88:df:1f:55:ba:58:21:29:fc:9a:e3:bd:72:
1c:81:ed:71:f1:2a:b2:6f:9f:59:5c:e1:cd:60:03:e8:24:b7:
e9:57:69:99:84:6b:bd:37:03:65:00:ec:40:31:d3:d1:ea:05:
b4:38:1b:91:a0:a4:11:b8:ac:ff:07:ca:15:ab:5d:52:d1:f2:
8f:74:ad:ee:19:95:28:8a:06:42:90:94:ad:f3:e2:b2:38:92:
58:a1:bb:3f:a9:a9:ab:15:ba:f3:4c:4b:de:08:8e:90:1a:4b:
e5:51:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:27 2026 by rpki-client