This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ve-jf9EP-jZkCjaun2Gx06psfDo.roa
File: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (raw, json)
Hash identifier: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=
Subject key identifier: BD:EF:A3:7F:D1:0F:FA:36:64:0A:36:AE:9F:61:B1:D3:AA:6C:7C:3A
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 019B7F145877020C7EFD721423C899AC75FE
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ve-jf9EP-jZkCjaun2Gx06psfDo.roa
Signing time: Fri 02 Jan 2026 14:19:58 +0000
ROA not before: Fri 02 Jan 2026 14:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51964
IP address blocks: 185.84.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:58:77:02:0c:7e:fd:72:14:23:c8:99:ac:75:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jan 2 14:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdefa37fd10ffa36640a36ae9f61b1d3aa6c7c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:23:a7:b1:ab:19:b9:cc:31:bb:00:40:ca:
47:af:61:4a:a0:f8:fc:58:5c:45:17:68:5d:af:56:
9e:b0:e9:f3:ae:41:ea:4d:b9:e7:21:89:33:11:39:
bb:0d:80:3a:5b:db:ad:2b:d3:4c:31:a0:ed:c8:7a:
e0:41:a2:31:49:ef:c7:99:af:48:0e:f8:30:8d:6a:
53:69:90:ef:84:3a:fb:92:f4:6b:5e:3a:fb:ea:b0:
a7:be:4d:9d:9b:53:bd:6d:cd:88:43:9b:0c:95:06:
b3:40:cb:d7:bb:65:05:12:74:3f:38:70:23:d8:00:
e0:e7:c5:2c:b9:c8:ed:7e:60:b2:e6:4a:91:84:c4:
8b:01:0e:b5:8f:4f:ac:ee:8e:3e:d4:82:97:c5:82:
fb:42:04:ee:0f:bf:79:3b:45:b3:19:e9:a3:76:6b:
e6:4a:09:3f:8b:c0:59:40:64:c4:83:74:09:a8:da:
4e:33:6c:30:80:37:63:04:11:da:bc:6e:13:c1:46:
71:60:6b:fa:23:6e:a6:6b:5d:28:5d:6b:e6:ed:c9:
97:1c:9e:3a:30:c3:8a:9a:73:0c:50:b3:9e:5b:60:
30:95:70:b5:89:30:3c:b9:7d:12:d4:aa:92:64:07:
62:13:d0:19:70:a9:2d:76:46:f4:19:e1:09:4d:59:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:A3:7F:D1:0F:FA:36:64:0A:36:AE:9F:61:B1:D3:AA:6C:7C:3A
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/ve-jf9EP-jZkCjaun2Gx06psfDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.217.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c4:d2:c2:74:c4:b8:e0:ca:02:69:eb:64:00:77:1c:82:11:
94:d2:af:2a:61:dd:0d:05:b4:7f:bb:02:8e:dd:77:51:e1:ef:
19:b2:80:fb:08:92:05:80:4f:a4:f1:b3:76:98:29:cf:14:44:
82:80:d8:11:c6:72:33:0a:4a:af:d9:e1:4d:24:52:88:be:8f:
eb:b9:c6:69:38:16:e7:fa:71:83:e4:cc:1b:98:e4:6c:ba:2d:
cf:09:7f:27:77:bb:6b:ea:1c:cd:91:cc:53:bf:53:e7:43:56:
b6:32:a1:3c:ea:78:1c:8e:c7:50:d0:6c:ef:67:26:2a:95:96:
77:5b:18:14:35:4d:ad:53:a5:d5:03:29:79:a3:4d:ad:07:f6:
c0:8f:5f:78:2a:f6:a0:a9:e2:0e:51:5e:0b:4c:6a:05:05:9c:
1d:2c:a4:63:91:38:6f:9e:8b:96:aa:6b:8d:7e:2f:f0:28:94:
e0:98:f1:5f:0a:dc:ec:26:17:99:ae:48:35:e9:9e:98:5a:34:
b5:d4:d3:aa:b8:ad:67:50:fc:dd:25:8d:0f:95:22:85:24:10:
67:bf:3b:3b:16:49:f2:32:be:04:05:30:f9:99:7c:6c:53:37:
44:99:74:cb:6f:94:c3:4b:25:71:a4:2f:63:be:2b:c4:81:0f:
f4:82:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:08:35 2026 by rpki-client