This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/V6VlaWA1K-C9MyNU228wIIvdWko.roa
File: V6VlaWA1K-C9MyNU228wIIvdWko.roa (raw, json)
Hash identifier: 1CcDBQN60ZlZdF+oTvwDg2BxgmLENhu2Ibg8dddCRwg=
Subject key identifier: 57:A5:65:69:60:35:2B:E0:BD:33:23:54:DB:6F:30:20:8B:DD:5A:4A
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019AC0057ADB60ADE9EDF025CDCFBAF2A5D7
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/V6VlaWA1K-C9MyNU228wIIvdWko.roa
Signing time: Wed 26 Nov 2025 11:56:15 +0000
ROA not before: Wed 26 Nov 2025 11:56:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209806
IP address blocks: 176.120.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:c0:05:7a:db:60:ad:e9:ed:f0:25:cd:cf:ba:f2:a5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Nov 26 11:56:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57a5656960352be0bd332354db6f30208bdd5a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:e0:bd:d9:50:c7:70:13:1a:6f:83:07:fc:
41:e3:7d:46:1f:99:20:ca:3d:60:32:2a:f1:ea:75:
b6:ce:3e:48:3c:64:df:0c:d0:fb:c4:16:85:57:18:
ca:25:96:d3:e9:8f:4a:b5:71:3f:38:15:a5:8b:9c:
94:44:bd:15:60:2f:81:ae:4c:20:a8:a7:d7:9a:7a:
a5:7d:e6:b3:8f:c7:1e:ec:b5:a0:56:68:ae:00:fe:
a2:38:75:dd:86:68:2b:8e:c5:93:46:8d:f2:48:99:
20:50:d9:4b:38:a7:33:1a:bb:5d:7a:95:93:03:52:
9b:26:a3:db:9e:5e:ae:e3:c3:5d:23:e8:8a:3a:37:
29:56:4d:53:8f:04:c2:88:3e:ea:04:de:1b:66:f0:
29:04:5a:b2:45:2d:cd:1e:db:57:cc:c4:c9:61:e9:
80:e1:b6:4b:a6:55:5e:4c:30:02:56:16:ae:33:23:
8a:4d:44:74:0a:25:fd:2d:f8:8e:e0:ce:ed:1f:1d:
43:3d:62:04:a8:d8:bd:e4:44:ea:c5:49:c9:f1:f6:
7c:48:4d:92:c7:6c:c5:64:20:97:27:cb:ad:a0:83:
f5:51:32:63:5f:7d:8d:af:e4:df:12:13:3a:fd:05:
9e:be:42:d5:6e:ec:5a:51:74:6e:9e:0d:f9:51:05:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:65:69:60:35:2B:E0:BD:33:23:54:DB:6F:30:20:8B:DD:5A:4A
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/V6VlaWA1K-C9MyNU228wIIvdWko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.99.0/24
Signature Algorithm: sha256WithRSAEncryption
92:01:d5:ae:ea:87:ce:6b:39:dd:68:ab:dc:db:b1:bb:62:b9:
fa:77:f2:f0:77:64:e3:ee:83:b7:85:d4:84:5a:0d:66:1f:3a:
4e:0d:39:b8:27:23:0c:b4:1c:d6:c6:ed:ca:b1:bd:36:f8:4e:
3b:66:a3:c5:3f:1e:bf:7a:19:8f:ac:5e:17:ec:97:56:29:8d:
a4:29:d5:90:40:ea:3d:93:d8:cb:fd:52:34:49:b5:d8:ff:f1:
c7:1b:87:77:3a:21:b9:6e:78:a9:18:fe:97:86:c7:53:95:b2:
be:c8:2a:a0:70:9e:ed:cc:35:f8:ed:15:ac:99:74:52:bc:1e:
a9:b6:af:0e:bc:4c:02:41:07:b8:bb:56:be:eb:8d:79:b5:7b:
05:59:20:1c:a7:81:45:d3:18:3b:cc:0a:89:ac:c9:8f:a1:0c:
ed:69:31:b0:d6:77:ba:49:c2:f8:d1:1c:dc:58:34:cf:4c:00:
a7:7c:a6:1a:b7:42:04:8f:de:57:2c:75:5b:11:13:af:bf:28:
ba:ba:0e:e2:2d:6c:dc:06:a7:21:ab:6e:fc:53:90:c6:98:f0:
26:23:14:60:c8:3b:e8:4d:df:7d:af:9c:bb:26:bd:00:7b:02:
fb:3f:06:6d:b0:96:48:7a:09:39:c3:22:fc:d0:f6:67:74:c1:
b0:8d:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:53:10 2025 by rpki-client