This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/VJaS-jYIuprV7YtO1DCuyd2g5wY.roa
File: VJaS-jYIuprV7YtO1DCuyd2g5wY.roa (raw, json)
Hash identifier: hL/BN/PlAs7Bgm3HIeGTv4CgOWk68zftN+8vu/Zh/Kk=
Subject key identifier: 54:96:92:FA:36:08:BA:9A:D5:ED:8B:4E:D4:30:AE:C9:DD:A0:E7:06
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 019B7F1569B86BBFF712877E6552AA219B56
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/VJaS-jYIuprV7YtO1DCuyd2g5wY.roa
Signing time: Fri 02 Jan 2026 14:21:08 +0000
ROA not before: Fri 02 Jan 2026 14:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204639
IP address blocks: 185.44.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:69:b8:6b:bf:f7:12:87:7e:65:52:aa:21:9b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Jan 2 14:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=549692fa3608ba9ad5ed8b4ed430aec9dda0e706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:5c:ca:dd:99:07:c0:01:b9:b6:dc:ed:f4:
f3:44:cc:1a:b1:7e:6f:78:65:c8:91:31:ee:1e:0b:
7c:36:d5:86:9a:15:a5:9f:ca:a9:76:e4:3c:3a:95:
51:7a:71:cd:4c:b0:b6:00:7f:1a:6c:a2:84:b6:0c:
65:9f:b4:2e:e2:7c:0e:1f:f9:15:4b:3b:56:70:ff:
a3:b6:1a:06:18:e9:ef:a8:8f:f8:04:78:11:8b:3a:
f4:1c:02:f4:61:05:51:3f:08:2b:a4:8d:4c:74:c2:
d1:06:b0:b6:61:c3:de:8b:5d:f8:a5:a6:56:05:a0:
ee:2c:40:2d:3e:ea:e5:38:b4:de:6d:0b:17:72:75:
31:7f:00:86:a6:46:cd:ec:21:33:4b:6d:0d:5c:ab:
6f:ff:a9:47:6a:70:ba:ec:26:90:e0:5e:a3:a6:6a:
f1:10:00:88:b7:4b:be:dd:69:23:aa:cf:a2:8a:a3:
35:25:1f:fe:03:e1:0a:19:b7:48:2a:68:ce:cb:81:
d3:7e:7f:01:f1:ef:e4:15:e9:d1:55:ab:34:fd:23:
d1:80:e0:38:a8:bf:82:28:a4:92:41:7e:f3:83:bc:
2d:b1:c4:17:5d:df:f1:42:91:ef:76:7c:01:f4:c6:
a9:36:a7:77:28:9f:7e:ee:1a:36:61:44:a0:ed:0d:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:92:FA:36:08:BA:9A:D5:ED:8B:4E:D4:30:AE:C9:DD:A0:E7:06
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/VJaS-jYIuprV7YtO1DCuyd2g5wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:04:23:08:c2:cb:a4:2f:c9:e6:59:51:20:64:f4:c7:b1:bc:
0d:23:0c:96:de:c7:08:0e:43:e5:2b:7b:f3:28:4a:a9:1e:14:
92:7d:76:54:b9:da:ab:12:24:fd:de:0d:58:a4:13:4a:fd:76:
5e:72:9a:47:19:d6:9b:14:0a:dc:7f:54:59:1d:60:25:72:e8:
96:0f:db:79:fd:48:73:46:5c:84:c1:ff:6e:64:b8:2b:91:6b:
cc:5e:2c:58:5f:8e:c9:17:36:34:07:3a:e9:09:68:d6:2d:b3:
a3:ca:1e:b4:42:d1:c7:84:c3:c1:06:a9:ef:be:90:ff:db:02:
1e:22:3b:1d:f9:27:e6:61:59:e2:61:cb:1d:47:73:70:4a:9f:
cf:bc:69:b5:b1:cc:96:f0:83:1e:45:ca:72:b1:32:db:ba:24:
97:ba:a9:cd:d3:8c:ff:ce:7d:eb:30:a9:11:98:7e:5f:35:ef:
5f:a9:44:b8:73:af:31:d2:a9:ab:5e:0f:1d:2c:a9:b9:51:6f:
3c:a3:4a:e6:d1:a5:2a:e7:c6:eb:02:9c:bf:c8:c7:a1:76:be:
39:79:5d:3f:48:b6:61:08:45:a3:a5:40:4e:66:51:92:35:6d:
4b:37:a0:2b:04:6c:e3:21:e8:7c:8e:ab:25:e2:6c:1c:78:e5:
55:c8:4c:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FWm4a7/3Eod+ZVKqIZtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3
MWEyYTIwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDk2OTJmYTM2MDhiYTlhZDVlZDhiNGVkNDMwYWVjOWRkYTBlNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFVcyt2ZB8ABubbc7fTzRMwasX5v
eGXIkTHuHgt8NtWGmhWln8qpduQ8OpVRenHNTLC2AH8abKKEtgxln7Qu4nwOH/kV
SztWcP+jthoGGOnvqI/4BHgRizr0HAL0YQVRPwgrpI1MdMLRBrC2YcPei134paZW
BaDuLEAtPurlOLTebQsXcnUxfwCGpkbN7CEzS20NXKtv/6lHanC67CaQ4F6jpmrx
EACIt0u+3Wkjqs+iiqM1JR/+A+EKGbdIKmjOy4HTfn8B8e/kFenRVas0/SPRgOA4
qL+CKKSSQX7zg7wtscQXXd/xQpHvdnwB9MapNqd3KJ9+7ho2YUSg7Q1XswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFSWkvo2CLqa1e2LTtQwrsndoOcGMB8GA1UdIwQY
MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt
ZmQyMmRmM2I1N2Y2LzEvVkphUy1qWUl1cHJWN1l0TzFEQ3V5ZDJnNXdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2
LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSx2MA0G
CSqGSIb3DQEBCwUAA4IBAQCjBCMIwsukL8nmWVEgZPTHsbwNIwyW3scIDkPlK3vz
KEqpHhSSfXZUudqrEiT93g1YpBNK/XZecppHGdabFArcf1RZHWAlcuiWD9t5/Uhz
RlyEwf9uZLgrkWvMXixYX47JFzY0BzrpCWjWLbOjyh60QtHHhMPBBqnvvpD/2wIe
Ijsd+SfmYVniYcsdR3NwSp/PvGm1scyW8IMeRcpysTLbuiSXuqnN04z/zn3rMKkR
mH5fNe9fqUS4c68x0qmrXg8dLKm5UW88o0rm0aUq58brApy/yMehdr45eV0/SLZh
CEWjpUBOZlGSNW1LN6ArBGzjIeh8jqsl4mwceOVVyExD
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:41:09 2026 by rpki-client