This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vPIPys_ck72jylL-AUvqLHtAd44.roa
File: vPIPys_ck72jylL-AUvqLHtAd44.roa (raw, json)
Hash identifier: EaJRNirRwPO81qiwnsAEnRZoQLT1oD2oeGnXmmJGVRQ=
Subject key identifier: BC:F2:0F:CA:CF:DC:93:BD:A3:CA:52:FE:01:4B:EA:2C:7B:40:77:8E
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019B7C128CE438FCFC7BBA1334925C984F6C
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vPIPys_ck72jylL-AUvqLHtAd44.roa
Signing time: Fri 02 Jan 2026 00:19:09 +0000
ROA not before: Fri 02 Jan 2026 00:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 80.66.72.0/24 maxlen: 24
87.251.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:8c:e4:38:fc:fc:7b:ba:13:34:92:5c:98:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 00:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcf20fcacfdc93bda3ca52fe014bea2c7b40778e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:ad:0f:15:a5:ed:9e:e2:74:0f:06:1f:80:
6a:f9:ef:60:66:8b:35:ff:41:ca:5b:aa:a3:1d:09:
9f:4e:58:66:ad:65:02:a7:45:c1:4a:c4:4c:9f:eb:
4b:e3:95:7d:d2:39:05:a4:8f:57:ee:d0:88:ae:96:
90:c7:3f:5b:7a:82:c7:d3:86:5f:1d:16:dc:db:4e:
8e:a9:5e:75:e1:41:1c:7b:25:a2:85:62:0f:cc:94:
28:76:36:b0:e6:ab:3d:fc:dc:83:a3:d6:34:e9:4c:
48:27:3e:6e:58:f7:06:da:5f:58:da:ef:3a:8b:6e:
6a:77:d6:db:b5:4a:80:51:af:5a:78:bb:12:90:5a:
f3:3e:01:35:bb:7b:b4:76:80:ec:f1:eb:d1:d4:96:
f8:0b:70:88:98:d9:63:74:c6:61:ed:c4:55:87:ef:
b2:01:4c:c7:8d:44:47:b4:cb:17:86:f1:0c:f8:63:
64:2e:c9:37:41:51:fa:c6:a8:4d:bf:60:d4:f3:50:
01:19:a0:fd:27:0a:04:d0:ea:a6:b3:0e:71:9b:53:
02:95:e0:20:aa:e2:f5:4d:e5:c7:d1:a6:04:f8:f2:
46:c1:2e:44:97:a7:14:26:ef:79:8b:89:7e:0e:48:
9b:ee:bd:42:11:40:bb:f3:68:91:26:13:e9:ef:fe:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:0F:CA:CF:DC:93:BD:A3:CA:52:FE:01:4B:EA:2C:7B:40:77:8E
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/vPIPys_ck72jylL-AUvqLHtAd44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.72.0/24
87.251.69.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6a:03:b9:94:2b:a8:eb:ce:62:38:91:98:53:56:c7:a6:9f:
93:5b:be:b7:2e:fc:fb:40:d5:38:93:25:be:ce:b1:92:a9:2b:
c0:09:dc:b0:e5:e1:cf:93:a5:c6:9a:06:73:30:ee:a0:4e:e0:
92:6f:50:2a:61:bc:68:4c:df:c3:ab:cf:b1:d9:8b:d2:56:f6:
4c:f7:ae:98:9f:c6:5a:d0:d4:31:73:7f:0d:12:ed:f1:07:02:
b8:8e:5a:6b:38:c4:19:34:93:ee:6c:63:a2:1e:56:f2:35:0f:
b5:c3:26:6b:fb:79:00:f2:ed:31:b4:86:08:60:c2:c5:65:fb:
6f:35:73:94:47:fd:af:e6:7a:25:4f:93:88:06:35:cd:05:cc:
b4:ee:54:3d:f3:96:02:a2:1e:25:cd:16:1a:26:c0:34:05:dc:
ea:21:d4:0d:97:b2:92:b1:1d:f1:8c:96:45:10:2f:d5:bd:cc:
80:36:a3:50:93:1a:ad:bb:c5:03:e1:c9:66:ad:5b:1a:48:2c:
c1:8e:4a:26:34:dd:42:54:bf:40:1e:42:45:b8:52:3f:b3:0d:
6e:da:5e:78:88:5e:a4:3f:d2:ca:76:a9:2c:9b:a3:58:ad:71:
2b:29:b1:75:30:93:30:07:05:58:a2:c9:b3:46:05:a9:8e:89:
ee:2b:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:29 2026 by rpki-client