This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/a_V5J3Vi7G28PHlX5WI1gqWWPqQ.roa
File: a_V5J3Vi7G28PHlX5WI1gqWWPqQ.roa (raw, json)
Hash identifier: V7Qb7O3ayDy2ziDj46g/EQOgoAU5eN5xUch4BkUXkak=
Subject key identifier: 6B:F5:79:27:75:62:EC:6D:BC:3C:79:57:E5:62:35:82:A5:96:3E:A4
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 019B7CEE5ABF272AA25C59746B6C6D11894E
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/a_V5J3Vi7G28PHlX5WI1gqWWPqQ.roa
Signing time: Fri 02 Jan 2026 04:19:14 +0000
ROA not before: Fri 02 Jan 2026 04:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35280
IP address blocks: 132.66.0.0/16 maxlen: 16
132.67.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:5a:bf:27:2a:a2:5c:59:74:6b:6c:6d:11:89:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: Jan 2 04:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bf579277562ec6dbc3c7957e5623582a5963ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:12:0b:7e:fb:6b:35:ee:40:7f:fe:63:b3:
31:d1:34:32:ba:fa:f8:67:2e:79:0c:6d:2d:a2:03:
46:60:a0:d0:92:7f:fa:c3:d2:ce:d6:73:82:41:5c:
dd:23:a6:50:5c:9c:43:a9:a2:46:89:5e:4a:fa:34:
b5:fe:5c:a7:70:c3:0b:49:f9:e6:fb:87:b7:6a:c5:
d0:38:4a:da:3f:71:a7:31:a3:30:67:18:4d:38:d4:
1a:b1:e2:a8:b2:06:b4:b8:b5:a4:4a:ec:ab:b0:a3:
78:ed:e4:17:70:c8:03:d7:b8:69:f2:18:8f:21:58:
0f:15:58:b7:e3:44:83:67:e8:1a:8a:09:27:96:29:
63:ff:fe:dc:f7:02:a5:34:8c:a0:d1:02:8a:8d:f2:
de:dd:85:98:49:d3:6d:db:d2:17:62:34:70:6e:a1:
fe:b5:4f:c2:10:e6:8f:d7:53:9b:9d:39:00:8f:5c:
3f:3b:04:a7:d6:54:9c:a6:d2:19:05:eb:dc:d0:a8:
74:56:44:ac:57:e3:fa:79:52:77:2d:db:91:c4:39:
de:d4:ad:5a:b2:48:51:cd:79:5e:c2:81:2f:8c:1b:
0c:8d:31:18:b3:88:66:35:13:2b:4f:81:00:81:c2:
a7:42:2a:9c:ca:fa:9d:ac:f7:69:60:4c:54:54:b5:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:79:27:75:62:EC:6D:BC:3C:79:57:E5:62:35:82:A5:96:3E:A4
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/a_V5J3Vi7G28PHlX5WI1gqWWPqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1d:a4:6f:b2:6d:aa:15:86:d0:7c:53:9b:2f:1f:85:ac:a5:19:
02:15:13:87:9a:ce:2b:dd:a9:23:82:41:89:bb:84:0c:4b:38:
a5:17:4c:58:31:49:ea:15:bb:3f:38:d1:f7:43:9b:14:1c:5c:
01:37:89:f2:70:3c:ab:00:8a:4b:16:96:25:45:0f:81:5a:22:
68:5c:4a:0c:c8:68:18:ec:aa:f8:20:a3:81:89:07:e7:c2:53:
f8:a5:af:9d:db:a3:49:3f:8c:22:51:ae:68:f3:e8:80:4c:d4:
8f:3e:e7:34:bf:57:64:04:2c:d6:67:31:a9:0d:6f:93:dc:31:
94:28:ab:02:a0:1c:3d:f4:8b:9b:86:d6:30:97:62:ad:be:e7:
b2:18:97:73:30:46:06:37:8b:62:9f:1b:bc:0e:74:00:b2:38:
81:12:c7:83:08:fa:0f:56:f7:25:13:7c:42:9e:7a:4f:41:bf:
c2:21:53:15:92:1c:12:22:02:cb:8f:7a:34:e9:02:3d:73:32:
5b:06:43:e8:65:80:08:8f:fc:37:24:29:99:0c:34:16:7e:ac:
bc:79:93:6b:ee:78:74:4d:cb:b2:eb:fc:0c:c0:5c:c5:1e:09:
10:01:e2:8c:9e:aa:0a:19:77:dc:e1:78:e8:27:5b:e1:47:7f:
ea:7f:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:02:39 2026 by rpki-client