This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa
File: vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa (raw, json)
Hash identifier: i9XFeCZuakWWqMNbjgXUo7/eL4g2IBgqmIa52Z/2v4w=
Subject key identifier: BC:A9:ED:B9:3D:F1:57:07:60:5A:66:77:F8:D3:CD:6E:6C:18:22:EA
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 019B797ED7E08BCFBD694D8F1AF69CA73344
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa
Signing time: Thu 01 Jan 2026 12:18:34 +0000
ROA not before: Thu 01 Jan 2026 12:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51242
IP address blocks: 193.239.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:d7:e0:8b:cf:bd:69:4d:8f:1a:f6:9c:a7:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Jan 1 12:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bca9edb93df15707605a6677f8d3cd6e6c1822ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:00:4e:52:2e:d3:23:a4:02:62:2c:cb:88:
c0:8f:66:b5:4b:75:e8:86:1c:48:e4:49:81:f1:0c:
d7:cc:58:61:f5:8c:5f:50:01:b2:05:a0:02:fa:1b:
fa:32:40:68:28:b2:41:25:45:45:f2:88:80:ac:80:
48:f0:62:6d:50:8a:fe:ae:02:99:be:49:b4:68:10:
af:30:da:ac:20:3d:9e:e2:b9:2b:4f:cd:2e:21:05:
1a:f0:f6:07:91:f5:ad:22:4d:6b:a2:b3:c8:4e:05:
30:6e:a0:ac:88:f9:8a:48:2e:cf:ca:3c:c5:c1:0f:
60:67:c2:66:db:ee:c9:b2:4b:b9:aa:96:44:1c:a4:
88:12:38:36:0d:46:4d:c3:61:f0:e6:83:b9:d6:0a:
53:8f:c3:8e:1e:a5:ba:23:5d:c4:7e:76:5b:a6:78:
be:69:b9:b8:e9:c5:44:98:61:88:d5:a5:e0:81:a0:
2d:75:9f:64:ad:f6:42:d7:23:d6:6b:e3:97:7d:9e:
ea:32:a8:3a:f2:b5:db:9b:7b:02:d1:ce:fd:3b:06:
5d:90:d3:b1:a4:88:40:b2:a4:26:ed:69:30:33:bb:
7a:e9:8e:be:d7:b9:69:1c:0f:9a:27:3d:80:b9:be:
09:d2:ca:97:91:56:8f:5d:51:e2:e9:bb:d0:b4:d5:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:ED:B9:3D:F1:57:07:60:5A:66:77:F8:D3:CD:6E:6C:18:22:EA
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.162.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b0:db:15:2b:45:2e:a3:f9:f1:0c:47:db:a3:84:f6:9b:81:
ba:b2:6d:8a:57:cf:61:58:2a:f2:01:55:71:b2:db:a7:ba:31:
df:7b:6c:29:75:38:af:27:40:4a:53:b9:f2:58:27:be:b3:e8:
f5:d2:07:21:37:29:a4:ca:12:d2:af:04:61:6e:d5:e3:b7:55:
50:70:73:a4:83:bf:20:40:27:e7:e9:a3:45:cd:05:a9:df:25:
42:9e:c9:1e:c9:a0:37:c8:7d:57:51:d9:29:f7:e0:b8:fb:3b:
15:6f:66:e4:6e:e3:73:c3:5d:e1:a0:07:e1:34:8c:6f:cd:1c:
37:21:31:80:35:34:ba:0d:32:f1:97:88:b0:29:15:a8:1e:7e:
87:6d:8f:c5:4b:ed:98:6e:2e:7b:d2:8d:e7:78:dd:c0:fb:6e:
0d:d4:cd:aa:e5:41:34:6f:a7:85:48:75:b8:ef:14:e2:d0:87:
16:cc:e2:a5:ab:80:9f:53:8b:b4:a2:3b:66:67:5f:27:32:bc:
3e:a2:27:36:06:a7:6e:74:9e:1d:48:00:3f:55:b7:14:ac:33:
b3:14:86:da:8b:65:54:3c:c6:c7:a8:e7:41:d3:69:1b:53:13:
e9:d0:9e:7e:9b:56:d0:5e:36:e2:23:89:42:98:a9:57:d4:f1:
04:5c:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:45:39 2026 by rpki-client