This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/v2V_vI8w7ZXM1sii1UDeeWcwpCA.roa
File: v2V_vI8w7ZXM1sii1UDeeWcwpCA.roa (raw, json)
Hash identifier: l5yrsl5tfKirXCQFQ9UTcOUZgIWs2Z58yXBB5pkbhOs=
Subject key identifier: BF:65:7F:BC:8F:30:ED:95:CC:D6:C8:A2:D5:40:DE:79:67:30:A4:20
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 019B7AC79DAF8E2CA9F8C6436DD2DE5CDE3B
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/v2V_vI8w7ZXM1sii1UDeeWcwpCA.roa
Signing time: Thu 01 Jan 2026 18:17:40 +0000
ROA not before: Thu 01 Jan 2026 18:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208922
IP address blocks: 45.15.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:9d:af:8e:2c:a9:f8:c6:43:6d:d2:de:5c:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Jan 1 18:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf657fbc8f30ed95ccd6c8a2d540de796730a420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:5f:c2:11:64:4c:d8:9c:ce:78:cd:3c:9e:
79:68:e2:1d:2e:23:e0:3f:da:60:b1:9e:3b:3c:43:
04:18:11:d3:57:5b:38:31:ae:5f:5f:6e:07:bf:05:
30:ab:a8:b4:36:dd:d4:21:29:53:48:14:d2:60:9f:
fa:b8:67:c6:73:0b:0b:ba:f4:b1:5f:de:9b:b1:a4:
77:87:b7:e9:dd:fb:17:6a:0b:62:8c:09:2e:a6:23:
09:8d:46:07:85:f2:71:c3:e9:85:00:11:22:a6:26:
a8:a2:f3:b1:99:13:84:0f:af:28:bc:1b:13:c9:fb:
15:94:61:e9:57:22:36:62:26:94:e0:f0:a1:54:95:
19:d6:8c:8a:07:55:fd:af:23:cc:6a:8e:d9:06:36:
3e:5b:81:a3:07:f5:22:ad:2c:d7:99:c0:63:55:61:
1b:ba:f7:96:4e:f8:5f:6b:d9:e4:4e:5f:4f:f8:c0:
5b:1e:3a:78:8c:b1:11:44:b0:83:e5:82:89:d1:56:
5a:bb:6e:c9:8c:05:38:a5:35:a9:34:8c:14:9b:49:
e4:36:4d:ff:b2:ae:59:4b:e7:a8:97:37:7b:ff:83:
3f:5b:c1:21:55:7f:15:3b:13:e5:a6:91:33:1b:11:
19:f9:00:89:d9:19:ed:83:51:ad:a7:ac:ea:2f:ed:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:65:7F:BC:8F:30:ED:95:CC:D6:C8:A2:D5:40:DE:79:67:30:A4:20
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/v2V_vI8w7ZXM1sii1UDeeWcwpCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.172.0/22
Signature Algorithm: sha256WithRSAEncryption
60:7f:f9:68:ae:a5:b0:23:d2:16:24:7b:89:7c:0d:af:d5:57:
5c:7e:98:a8:ef:68:2d:78:6f:cc:4c:f1:f3:31:84:8b:94:4d:
d0:88:fe:4b:98:b6:38:eb:67:ad:a6:08:66:bd:b1:b5:da:d7:
0f:5d:e1:87:46:3a:c1:83:a0:c5:02:d2:a4:35:22:6c:f7:e0:
52:21:58:e7:64:8a:d8:85:a2:21:ab:10:6d:45:6c:21:23:c1:
58:be:3e:b1:bc:59:09:b6:5c:7d:5f:2c:53:00:b0:8a:2f:85:
45:41:77:64:03:ac:c2:72:4f:52:f9:97:c0:56:58:a7:6a:7d:
33:4f:8d:72:25:ea:1c:10:13:dd:38:b5:d0:76:36:03:0b:fa:
2c:2e:19:d8:bb:7d:8b:4f:98:99:14:16:d2:95:67:5d:cf:4d:
ed:a0:f3:92:b6:32:fe:23:57:79:9a:d1:d9:15:3d:7b:d5:d1:
86:14:73:70:3e:f4:1c:d1:dc:1d:0e:6e:4e:f4:45:d3:1c:38:
3b:88:5d:e4:03:f0:28:be:6d:2a:89:03:0c:23:aa:02:5d:b0:
c1:85:eb:69:dd:57:4f:d7:5b:51:8c:db:6a:ab:28:ba:0d:57:
23:de:fb:6f:83:05:16:6a:6b:9f:61:06:77:5e:43:6b:bb:f3:
01:ac:d7:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x52vjiyp+MZDbdLeXN47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZTBiNmQxM2NkMTFmMzYxMTRmYTk4NDAzMzgwNDk0MWM4
MmYxNDMwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjY1N2ZiYzhmMzBlZDk1Y2NkNmM4YTJkNTQwZGU3OTY3MzBhNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcBfwhFkTNicznjNPJ55aOIdLiPg
P9pgsZ47PEMEGBHTV1s4Ma5fX24HvwUwq6i0Nt3UISlTSBTSYJ/6uGfGcwsLuvSx
X96bsaR3h7fp3fsXagtijAkupiMJjUYHhfJxw+mFABEipiaoovOxmROED68ovBsT
yfsVlGHpVyI2YiaU4PChVJUZ1oyKB1X9ryPMao7ZBjY+W4GjB/UirSzXmcBjVWEb
uveWTvhfa9nkTl9P+MBbHjp4jLERRLCD5YKJ0VZau27JjAU4pTWpNIwUm0nkNk3/
sq5ZS+eolzd7/4M/W8EhVX8VOxPlppEzGxEZ+QCJ2Rntg1Gtp6zqL+031wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL9lf7yPMO2VzNbIotVA3nlnMKQgMB8GA1UdIwQY
MBaAFKngttE80R82EU+phAM4BJQcgvFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUt
ZDMyZjhkODc1Zjk4LzEvdjJWX3ZJOHc3WlhNMXNpaTFVRGVlV2N3cENBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUtZDMyZjhkODc1Zjk4
LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ+sMA0G
CSqGSIb3DQEBCwUAA4IBAQBgf/lorqWwI9IWJHuJfA2v1Vdcfpio72gteG/MTPHz
MYSLlE3QiP5LmLY462etpghmvbG12tcPXeGHRjrBg6DFAtKkNSJs9+BSIVjnZIrY
haIhqxBtRWwhI8FYvj6xvFkJtlx9XyxTALCKL4VFQXdkA6zCck9S+ZfAVlinan0z
T41yJeocEBPdOLXQdjYDC/osLhnYu32LT5iZFBbSlWddz03toPOStjL+I1d5mtHZ
FT171dGGFHNwPvQc0dwdDm5O9EXTHDg7iF3kA/Aovm0qiQMMI6oCXbDBhetp3VdP
11tRjNtqqyi6DVcj3vtvgwUWamufYQZ3XkNru/MBrNdX
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:02:11 2026 by rpki-client