This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/VJ76kPFRh3Ww8Is5M704WVV-vPA.roa
File: VJ76kPFRh3Ww8Is5M704WVV-vPA.roa (raw, json)
Hash identifier: yBUtgXGi1nLg+3akssVacnV8r6cvgHcXwp/SrlxIpHQ=
Subject key identifier: 54:9E:FA:90:F1:51:87:75:B0:F0:8B:39:33:BD:38:59:55:7E:BC:F0
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019B7D5B8F910B935E9E03408CA43EEF275B
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/VJ76kPFRh3Ww8Is5M704WVV-vPA.roa
Signing time: Fri 02 Jan 2026 06:18:31 +0000
ROA not before: Fri 02 Jan 2026 06:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208396
IP address blocks: 194.26.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:8f:91:0b:93:5e:9e:03:40:8c:a4:3e:ef:27:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Jan 2 06:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=549efa90f1518775b0f08b3933bd3859557ebcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bc:7e:26:50:b9:f0:00:24:a9:93:36:ef:4a:
45:86:be:d8:74:e3:5d:96:fd:e0:c9:65:71:a1:fd:
40:b1:00:2b:fc:f7:11:a5:1c:af:9f:8c:e1:87:b9:
57:da:bc:da:bb:12:1a:8c:70:32:d4:8e:1d:6b:d5:
11:69:ec:08:66:96:59:8e:ac:11:b6:ed:2b:3d:29:
60:9b:06:13:33:6b:b8:6a:d3:97:a4:68:13:a8:f8:
44:af:e6:78:6f:02:76:bb:f3:5a:b6:29:16:75:0e:
bc:79:b8:94:2a:85:c3:c4:09:df:42:d8:65:07:08:
d7:89:25:2a:c5:ed:7a:84:15:a4:48:ea:c8:52:f4:
be:d9:7d:45:e3:90:79:e3:f8:0e:2b:9d:2c:6c:7f:
dc:aa:9f:fa:4f:8d:b3:b7:d4:7d:34:58:85:d7:a4:
bb:8a:b7:9d:81:a6:af:fc:4e:8d:d5:56:43:2e:dc:
c1:d5:28:f4:96:7f:82:1a:f1:2c:d0:16:8a:b0:43:
43:29:17:cc:41:2a:b3:18:48:02:fb:92:f7:21:8c:
c7:32:d3:2f:f6:d4:e0:96:9b:7c:d3:dc:84:dc:5c:
46:e9:d6:1d:46:01:3e:92:69:90:df:28:6e:a1:f8:
1e:a4:93:46:04:2e:18:74:70:84:5b:1a:4a:77:d9:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:FA:90:F1:51:87:75:B0:F0:8B:39:33:BD:38:59:55:7E:BC:F0
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/VJ76kPFRh3Ww8Is5M704WVV-vPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2e:dc:a6:89:7b:c6:6e:30:bb:ab:11:0d:75:fd:7b:20:cf:
4f:3b:87:62:07:62:37:69:05:df:e7:03:a3:68:dc:1e:62:0d:
e6:67:95:c4:5a:80:7b:a8:c7:09:38:a2:1d:16:ae:93:95:27:
d8:85:d9:b0:da:2d:23:81:66:b3:d9:0a:80:c8:e7:37:94:e9:
3e:a7:07:93:70:ea:06:9f:2c:d5:b6:38:8c:4f:02:d0:8b:9a:
75:f5:44:75:66:f8:80:0a:8d:90:bc:e3:01:a3:31:21:87:0e:
e9:3f:38:89:5f:75:d8:69:7f:35:81:c1:3c:b3:e5:40:6f:98:
9f:54:06:4d:2a:41:0f:70:7f:73:40:38:cf:f3:4f:52:38:63:
dd:46:58:c9:93:e1:61:8e:25:00:ff:fe:4a:91:c1:ae:d3:a0:
90:68:62:76:a5:c7:ee:76:c4:59:b8:a4:65:d2:9c:0f:8e:f6:
0a:e1:ac:31:f7:fb:dc:56:91:f4:d1:c7:72:f7:ef:bb:17:fd:
45:1a:68:78:da:0f:74:22:16:c9:c9:76:29:87:5d:f7:7c:fb:
bb:b0:e8:9f:e6:c4:d3:6f:79:43:4b:e9:03:2e:58:ba:e2:f0:
e2:56:8e:3d:85:39:c4:fd:7f:e0:3c:49:2b:e4:1a:31:30:ff:
d5:86:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:13 2026 by rpki-client