This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/VfT1jovZQbB_GOxrewqAg31IJD4.roa
File: VfT1jovZQbB_GOxrewqAg31IJD4.roa (raw, json)
Hash identifier: rEaYnnOYpTkHENGl1d6pSu6EPvs3HHaHkQH4luV+aMI=
Subject key identifier: 55:F4:F5:8E:8B:D9:41:B0:7F:18:EC:6B:7B:0A:80:83:7D:48:24:3E
Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Certificate serial: 019B76EB7FCB2D91A9251F98485379DF8666
Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/VfT1jovZQbB_GOxrewqAg31IJD4.roa
Signing time: Thu 01 Jan 2026 00:18:23 +0000
ROA not before: Thu 01 Jan 2026 00:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209386
IP address blocks: 193.29.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:7f:cb:2d:91:a9:25:1f:98:48:53:79:df:86:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12
Validity
Not Before: Jan 1 00:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55f4f58e8bd941b07f18ec6b7b0a80837d48243e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:0c:4a:8c:69:84:4e:d8:9c:81:69:a5:f8:
91:23:a1:2a:58:13:45:88:56:2e:17:33:12:a5:e3:
db:c0:07:19:21:3e:7e:71:01:e6:96:30:ef:48:bc:
3c:3a:b2:93:c0:9b:4b:df:fe:e3:70:bf:49:0a:1e:
ac:26:51:07:9c:dd:12:d7:c8:a7:50:76:26:9f:ea:
73:53:63:85:9d:43:4d:be:3f:e5:48:e6:ee:00:c2:
16:30:4a:51:a7:f1:9b:da:c6:eb:9a:21:45:49:11:
ec:b1:e7:c8:b4:de:31:d4:1f:fb:e1:78:ff:06:49:
2e:49:08:b8:e4:a5:a7:af:7f:4a:07:93:2b:f4:ac:
a2:fe:d1:c4:ff:67:15:8e:26:a1:9d:5b:f7:ae:6d:
10:95:ec:14:14:e4:3b:41:97:a5:6e:42:98:2e:97:
d8:9a:91:1a:af:b4:7e:ac:14:9f:02:de:e0:12:1d:
42:ec:3b:8c:ac:41:4c:e7:09:f1:64:2d:dd:a4:c3:
36:c3:58:d9:9c:f3:e2:f8:ec:e2:30:8a:cc:20:2a:
e2:87:41:a0:95:9d:0a:5a:2c:ab:6c:0f:37:ca:d1:
12:78:70:68:a8:51:a1:0b:56:7e:91:25:c3:42:ad:
30:9c:d3:2f:1f:0e:df:e0:83:68:97:2c:6f:88:92:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F4:F5:8E:8B:D9:41:B0:7F:18:EC:6B:7B:0A:80:83:7D:48:24:3E
X509v3 Authority Key Identifier:
keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/VfT1jovZQbB_GOxrewqAg31IJD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.44.0/22
Signature Algorithm: sha256WithRSAEncryption
05:4b:77:45:93:ca:c1:8e:17:8f:41:55:59:05:fb:19:a1:b2:
d8:9e:4f:5b:c0:54:2e:9a:85:fd:cd:33:ac:8b:cd:02:0e:0c:
8b:59:6f:44:3e:49:7d:52:bd:22:71:da:3e:fb:be:d8:55:6f:
e7:9e:64:d5:f2:92:06:4a:79:ed:6c:4f:9c:cc:4c:7f:fe:38:
a4:8c:e0:f6:1c:41:8c:79:43:0c:77:8f:c6:77:17:a9:57:45:
b1:9f:6e:3f:a2:eb:b2:fb:d0:3d:5d:0f:80:3c:e3:ae:b6:1f:
bd:63:3b:d9:ea:2b:f8:5a:68:66:ca:cb:c2:0e:0c:e2:9a:cf:
bb:4e:5b:3b:67:a5:51:75:1a:6e:4a:3c:70:99:e0:02:1e:81:
85:46:57:f2:fd:bb:d3:0b:f0:f5:d5:0c:6a:9a:d9:4e:a3:44:
80:03:78:c9:48:68:cf:6e:91:41:cc:a7:3a:b5:b2:c1:51:e9:
07:67:d9:af:49:77:75:ab:95:e5:7d:10:dc:a1:b0:0f:32:74:
24:e2:33:69:89:e5:38:fc:7f:e2:0c:cd:f9:c2:3f:9f:fe:22:
12:d4:26:9e:11:4b:6f:a6:41:1b:04:d2:d9:49:da:17:26:4c:
ef:04:14:c9:e4:f2:6c:73:de:8f:c0:56:0e:93:5f:87:59:7a:
7b:3f:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:56 2026 by rpki-client