This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/VWwoGO2sGQjK21cMFf3XwlF6U0E.roa
File: VWwoGO2sGQjK21cMFf3XwlF6U0E.roa (raw, json)
Hash identifier: G+mIqYh3iGFVL9m6/VUywuW90iG64GkP4wAw6JgPgy4=
Subject key identifier: 55:6C:28:18:ED:AC:19:08:CA:DB:57:0C:15:FD:D7:C2:51:7A:53:41
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019B77C65F789F97C5FB5410809898E635F2
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/VWwoGO2sGQjK21cMFf3XwlF6U0E.roa
Signing time: Thu 01 Jan 2026 04:17:27 +0000
ROA not before: Thu 01 Jan 2026 04:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41743
IP address blocks: 193.187.156.0/22 maxlen: 22
2a09:c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:5f:78:9f:97:c5:fb:54:10:80:98:98:e6:35:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Jan 1 04:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=556c2818edac1908cadb570c15fdd7c2517a5341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5c:3c:04:7a:e7:9c:0d:5f:ef:50:78:28:d0:
35:ed:48:bf:5d:aa:4e:46:6e:04:ef:fc:32:cf:4a:
1a:59:d7:5f:95:ee:e5:b5:ae:c1:53:d0:40:31:78:
46:63:b0:85:39:2a:d2:3f:50:07:6c:95:39:9a:8a:
36:e4:2a:58:df:a0:cc:f0:91:6f:85:fd:d9:20:f0:
af:39:b0:f1:63:0a:86:92:08:df:af:db:79:1f:3a:
1e:14:aa:70:cb:4b:23:1f:05:82:9f:2b:37:b1:01:
61:60:c4:9d:7f:9b:dc:38:6b:cb:78:30:67:94:ed:
4e:cd:de:32:21:e7:f1:74:de:d7:80:0e:cf:cf:93:
5b:01:72:5c:4a:b7:3d:9e:3b:27:64:5e:bd:35:82:
fb:25:3f:3d:0c:53:da:fc:87:4f:e9:6f:e8:8b:8f:
fd:29:b9:70:9c:ab:11:0e:77:81:cc:de:0f:e7:d8:
73:f6:ca:ad:73:ec:b6:ac:72:03:55:64:d6:3e:4b:
f0:83:51:a6:a9:b2:81:1b:56:be:e8:27:b9:66:b8:
f8:2a:c2:5a:de:06:c3:a0:6a:4f:1d:32:6e:e1:fb:
a0:ab:90:ae:5b:99:a4:12:c6:81:5e:1d:71:41:5e:
62:c6:07:c5:77:67:c9:7e:24:a6:06:23:1e:b2:8d:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6C:28:18:ED:AC:19:08:CA:DB:57:0C:15:FD:D7:C2:51:7A:53:41
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/VWwoGO2sGQjK21cMFf3XwlF6U0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.156.0/22
IPv6:
2a09:c80::/29
Signature Algorithm: sha256WithRSAEncryption
56:73:1c:92:a1:4d:f0:bb:ba:3d:0b:e4:77:30:24:cb:fd:d9:
3b:b7:15:33:07:47:2d:b9:ff:72:b4:1b:72:d0:3f:a2:65:eb:
66:1b:17:ed:42:45:6f:60:f3:e3:93:64:44:f1:e3:b4:60:3f:
0c:fd:5f:b1:c4:13:4c:67:b4:55:74:17:bc:84:1f:ed:a0:50:
41:2f:d9:b9:3c:cd:e4:ad:b2:1c:26:aa:91:22:72:1e:80:d3:
f0:d6:d3:f0:ea:3c:cf:1e:0b:0a:16:35:f2:ac:cb:27:18:af:
63:15:36:90:f9:99:3f:fd:93:e7:6b:42:64:1b:ed:d3:fc:ca:
c6:75:67:cb:ad:1f:6c:42:11:99:60:26:a2:28:27:40:aa:1a:
0c:8a:70:88:67:ea:fb:26:3d:d1:f9:ec:ea:39:74:1d:bd:12:
2a:94:a9:b1:69:ed:07:17:b3:5d:a3:6b:e1:fa:7b:a0:c7:a1:
90:df:49:75:32:7f:19:8f:78:30:5c:96:dc:2d:f6:13:21:8f:
ee:0d:62:a8:75:c2:36:97:f7:56:16:47:81:8d:09:b1:ce:2d:
1e:ec:d9:ac:99:d9:fa:54:b5:f8:37:f1:ab:58:f6:86:85:58:
c1:7e:ec:6b:af:0d:26:95:d4:c8:df:69:e3:46:c5:cb:34:55:
19:e9:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:22 2026 by rpki-client