This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/2VGlQCljw9cFJl5EHzBeMDJwXVo.roa
File: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (raw, json)
Hash identifier: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=
Subject key identifier: D9:51:A5:40:29:63:C3:D7:05:26:5E:44:1F:30:5E:30:32:70:5D:5A
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 019B7A5AB0C8A433AD65491A8FFD5FDEE985
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/2VGlQCljw9cFJl5EHzBeMDJwXVo.roa
Signing time: Thu 01 Jan 2026 16:18:42 +0000
ROA not before: Thu 01 Jan 2026 16:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 82.115.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:b0:c8:a4:33:ad:65:49:1a:8f:fd:5f:de:e9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 1 16:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d951a5402963c3d705265e441f305e3032705d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:1d:7a:b1:65:f6:e4:ec:ea:46:15:61:fe:
b2:3a:e1:fa:5f:3c:32:66:a2:e0:30:00:45:d6:01:
ed:f2:41:7e:ad:ac:40:8c:50:45:3c:79:de:23:c9:
dd:31:f2:eb:93:85:90:45:d3:d6:c4:e8:0e:20:67:
d6:2f:1b:96:7a:d0:7f:3f:5e:bf:c7:d0:bd:b6:f5:
5a:83:9e:0b:b1:7e:10:6e:ce:30:0d:fe:08:b4:c1:
b4:b4:6e:53:88:de:23:ba:ec:e4:a7:69:b9:2d:16:
93:98:e7:03:f9:7d:fd:3c:88:9a:db:5b:d2:10:2c:
8c:59:85:30:0f:20:94:f0:a3:8e:0f:fd:4d:98:5d:
32:ac:fa:a6:3f:ea:96:40:eb:3d:23:d8:ae:a6:08:
77:d4:1b:64:89:5c:6e:da:5c:73:ca:58:d7:d8:56:
72:c9:cc:2d:68:f8:72:f0:79:29:b2:65:a3:15:70:
b3:1a:48:dd:4a:4e:62:c6:b4:84:df:ec:87:b7:bf:
90:fa:cd:ad:76:60:bf:ec:02:6b:76:f4:70:51:b4:
69:21:ae:55:2c:98:d4:fc:64:3e:55:0b:81:e6:ed:
37:75:48:ed:2f:ef:0a:c9:94:94:df:ec:1a:da:f3:
99:40:fb:62:3c:fe:a1:10:5d:63:7b:41:fc:c1:83:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:A5:40:29:63:C3:D7:05:26:5E:44:1F:30:5E:30:32:70:5D:5A
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/2VGlQCljw9cFJl5EHzBeMDJwXVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:2c:4f:2f:4a:e7:ef:e7:d8:24:f1:64:a1:5d:5d:fb:cd:73:
4a:24:83:21:fd:7c:5a:ad:fc:ed:b3:b8:ad:1f:a2:be:3d:1c:
01:6a:7c:e8:df:db:0f:9c:22:3b:5f:e5:73:76:29:d7:b3:59:
41:9a:3b:67:d7:0d:7f:27:f7:16:f2:bd:6c:c7:3f:53:42:a6:
51:f1:2b:de:ff:f9:f2:c0:16:77:f7:a6:ba:ca:03:9d:f2:fd:
e9:a0:f4:6b:a0:0d:af:67:2e:0e:5d:e7:57:8b:8a:1c:aa:bf:
d4:ee:28:a2:59:bb:97:b3:1b:5e:cf:33:35:9d:fa:9a:e3:d1:
3a:0e:cb:32:3d:8d:f6:03:ea:46:7c:99:26:5f:96:05:78:aa:
c7:01:cc:76:f4:b2:aa:b6:d4:14:3c:49:2d:d4:64:f1:58:5e:
2f:b3:34:49:36:f2:3d:fa:f6:50:06:fc:6a:0b:4a:7b:7d:e9:
7a:4d:99:c4:94:71:01:b4:15:34:2a:23:3d:f0:23:e2:ff:d4:
b4:38:9d:87:cf:f6:41:f9:dd:78:da:9a:57:f8:64:a5:19:80:
fb:ee:f7:44:a5:b0:e5:c4:d5:29:3c:ff:bc:58:c9:08:83:06:
c3:f1:25:0e:9d:de:8d:84:1a:04:fe:d1:03:4c:18:81:06:cc:
7e:de:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:16 2026 by rpki-client