This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/vrE3hwEnS1QTByXaca8_W_PJzRA.roa
File: vrE3hwEnS1QTByXaca8_W_PJzRA.roa (raw, json)
Hash identifier: OeImgN/hpE2K0k56AQ1gCUZZMDfEiohfiJN6dfI77C0=
Subject key identifier: BE:B1:37:87:01:27:4B:54:13:07:25:DA:71:AF:3F:5B:F3:C9:CD:10
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 019B76EB1E6FE466E61AC91558395C6CAA08
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/vrE3hwEnS1QTByXaca8_W_PJzRA.roa
Signing time: Thu 01 Jan 2026 00:17:58 +0000
ROA not before: Thu 01 Jan 2026 00:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57219
IP address blocks: 185.198.18.0/23 maxlen: 23
2001:7f8:b3::/48 maxlen: 48
2a0a:8240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:1e:6f:e4:66:e6:1a:c9:15:58:39:5c:6c:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Jan 1 00:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beb1378701274b54130725da71af3f5bf3c9cd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:30:6d:5e:63:ef:11:2a:29:c8:90:20:63:
fa:67:31:95:f7:f8:76:a6:00:ec:b5:11:cd:92:02:
31:98:db:03:46:33:75:55:71:ae:cc:7a:40:d8:89:
5d:2f:65:0e:87:54:63:d5:bb:4c:8c:4e:31:5a:4c:
5e:60:77:20:34:93:a5:67:02:db:d5:87:d7:36:25:
07:fa:a6:39:5e:c9:08:c9:56:24:f8:eb:67:36:62:
d0:ce:6c:58:8c:40:b9:95:61:2c:d8:76:99:0f:0d:
5f:5f:6f:64:d0:b3:34:fd:3f:99:e9:7d:33:3c:8c:
4e:67:cb:54:bc:59:5b:0f:97:a1:81:a4:e7:99:5c:
d5:dd:ac:61:53:41:ac:0c:dd:82:67:ca:e6:b2:ac:
93:e4:6b:35:13:46:8c:71:fc:09:15:a2:35:7e:e8:
1e:4e:84:91:84:9b:a9:89:17:cd:61:eb:8c:52:e2:
80:46:37:f7:33:62:0a:3f:5d:82:f4:bc:e5:11:a9:
fb:f5:d3:69:4c:0a:1c:ba:b9:14:1d:b5:be:59:8f:
b7:93:ce:5f:d4:fd:c7:33:b1:7f:f7:6b:fe:10:dc:
18:24:d6:f1:7a:22:71:55:84:f2:9c:8f:85:36:f6:
0b:11:f5:59:b5:4d:4e:fe:35:10:77:1c:b6:81:09:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:37:87:01:27:4B:54:13:07:25:DA:71:AF:3F:5B:F3:C9:CD:10
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/vrE3hwEnS1QTByXaca8_W_PJzRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.18.0/23
IPv6:
2001:7f8:b3::/48
2a0a:8240::/29
Signature Algorithm: sha256WithRSAEncryption
2d:86:ac:29:7b:50:ff:15:94:f8:4d:79:4a:09:cc:5f:ad:12:
d8:50:cd:b3:01:46:08:ff:2d:fc:95:cb:78:18:e8:c9:21:7c:
01:86:36:a7:f8:82:98:0e:a7:e6:f9:a7:98:a6:2a:1f:66:46:
2a:55:41:41:22:10:b6:63:fd:25:d5:4d:c0:eb:50:47:ca:56:
86:84:36:40:46:12:19:e3:f8:a0:ee:a5:d0:99:97:54:b6:c1:
f8:c6:1e:35:1c:22:c5:3b:1a:ca:e5:08:df:e5:d4:41:4a:d6:
07:c2:81:fd:3b:f1:dc:93:61:39:2f:8b:db:39:8b:94:f4:0e:
7f:00:62:f9:15:1c:e0:a4:43:91:00:7f:71:7d:98:91:6a:60:
9e:c0:eb:30:53:01:94:10:36:a8:53:29:af:f2:28:10:13:6a:
f9:a6:7a:50:26:7b:8d:f3:b5:d3:86:f6:d2:06:de:00:25:3a:
bf:99:2f:7f:68:1b:ca:25:90:c7:82:2c:7f:2f:32:ac:bd:ba:
b2:96:c7:67:7e:aa:24:57:b5:4b:24:f7:d9:05:23:40:e1:f7:
7a:65:99:da:19:40:0b:1f:5d:36:48:98:9b:3d:ad:73:1f:53:
ad:53:a6:5a:35:96:90:f0:93:82:39:ef:1b:97:3c:25:f8:1c:
ba:02:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:58 2026 by rpki-client