This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/VnzJRH-dJQ-dO_CFYq_t71s4Oyk.roa
File: VnzJRH-dJQ-dO_CFYq_t71s4Oyk.roa (raw, json)
Hash identifier: gIJOoL/O0S2gcfZbAglWFTP6arjfw9ZP6PtDcF7VgUU=
Subject key identifier: 56:7C:C9:44:7F:9D:25:0F:9D:3B:F0:85:62:AF:ED:EF:5B:38:3B:29
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 019ACAA9AB109C731B8546146690455C44B4
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/VnzJRH-dJQ-dO_CFYq_t71s4Oyk.roa
Signing time: Fri 28 Nov 2025 13:31:48 +0000
ROA not before: Fri 28 Nov 2025 13:31:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59956
IP address blocks: 5.53.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ca:a9:ab:10:9c:73:1b:85:46:14:66:90:45:5c:44:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Nov 28 13:31:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567cc9447f9d250f9d3bf08562afedef5b383b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:2d:ba:1d:5c:6d:db:b1:5b:07:9b:92:ef:
23:d9:60:8d:e7:8b:6c:42:11:16:01:ad:93:a6:ac:
5b:48:f2:39:00:c9:0d:a9:45:b4:03:64:af:58:f4:
a0:89:89:67:fb:30:33:a5:3a:aa:a0:e8:6b:0a:3a:
4c:1d:f9:1c:48:db:73:5f:13:35:08:f2:b5:5f:9d:
87:29:f8:1f:81:df:d9:e4:a2:b9:65:e7:0a:0a:bb:
63:89:08:13:db:c3:f0:34:7c:c8:b7:fe:e3:d6:04:
5f:e3:7a:96:aa:77:20:98:66:87:7d:0b:b5:4d:71:
76:70:84:0c:de:0a:45:62:cc:dc:f7:8c:2a:ba:fa:
6b:fe:ca:fa:81:94:1f:c1:5e:e0:e5:3a:42:97:61:
6e:b5:d9:58:d8:57:61:1b:13:ba:4d:ff:a5:a1:3f:
53:30:35:36:64:0e:26:ed:07:d0:d0:be:a2:64:74:
5e:28:6b:99:9a:8a:b2:40:60:f6:b2:c6:ef:51:4c:
c9:38:0d:dc:46:e2:28:b6:12:3b:dd:dc:1b:29:4a:
35:5c:bc:a4:8c:a3:71:a9:c1:d4:51:a0:4d:12:78:
68:55:cf:a6:89:a4:e3:94:7a:65:2a:51:c6:15:2c:
a4:78:36:44:65:56:0c:e7:ea:04:4b:63:14:eb:06:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:C9:44:7F:9D:25:0F:9D:3B:F0:85:62:AF:ED:EF:5B:38:3B:29
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/VnzJRH-dJQ-dO_CFYq_t71s4Oyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.116.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5e:7d:ed:b8:e1:84:14:66:85:75:11:be:ad:66:75:ae:6b:
2a:0b:1e:d6:60:7b:ed:0e:1f:c1:04:64:3f:28:c4:d4:07:11:
a3:ed:33:5f:90:3a:5f:69:8b:9c:84:3c:34:d9:70:d0:98:cc:
1e:d7:12:41:1d:b4:69:51:fc:b0:53:33:fd:c3:8d:ad:6a:05:
b6:1e:c4:68:4f:8f:c7:34:b9:e3:fc:f1:d4:97:43:42:d8:f3:
68:c3:c2:8f:17:f0:97:63:58:17:8f:fc:a2:a8:aa:73:39:ee:
28:44:c2:c8:3a:86:56:f7:8c:ce:62:9d:53:6e:68:61:10:6a:
80:9c:90:6f:3f:9b:e1:dc:cd:29:40:3d:2d:2e:33:59:45:1e:
2b:f1:c9:03:53:37:88:3b:d6:91:4a:7b:37:da:aa:33:1e:54:
cc:19:87:bd:0e:1d:b0:13:9a:8f:ed:79:7b:4e:b9:77:5b:6b:
cb:1a:c2:3b:e7:9a:42:9e:ab:6e:c9:52:e8:12:8b:96:77:14:
7d:62:7d:bc:70:c1:ce:73:4f:cb:8a:8d:6f:83:e2:d4:4f:3e:
79:f9:82:28:db:78:5d:35:86:0b:60:e5:24:5d:27:1f:00:82:
a8:b4:e1:2b:f7:fd:32:df:a9:c8:0c:1f:85:ce:a5:75:3d:e2:
1e:06:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:17:34 2025 by rpki-client