This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VmcPjWRYl1uKkoUK7-ek-dhu9pA.roa
File: VmcPjWRYl1uKkoUK7-ek-dhu9pA.roa (raw, json)
Hash identifier: emq3qoTzbfx5tTB35a1dkCxOSHaR3cQngwio7p841hY=
Subject key identifier: 56:67:0F:8D:64:58:97:5B:8A:92:85:0A:EF:E7:A4:F9:D8:6E:F6:90
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019BE0722DEC3A67F1FB76AE55DA5C6CB97D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VmcPjWRYl1uKkoUK7-ek-dhu9pA.roa
Signing time: Wed 21 Jan 2026 12:05:37 +0000
ROA not before: Wed 21 Jan 2026 12:05:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210415
IP address blocks: 31.15.7.0/24 maxlen: 24
45.67.245.0/24 maxlen: 24
45.130.163.0/24 maxlen: 24
45.137.139.0/24 maxlen: 24
45.145.135.0/24 maxlen: 24
91.132.30.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
201.49.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 18:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e0:72:2d:ec:3a:67:f1:fb:76:ae:55:da:5c:6c:b9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 21 12:05:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56670f8d6458975b8a92850aefe7a4f9d86ef690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:f6:4a:72:36:45:1e:04:fc:dc:ab:c5:42:
21:cb:80:b8:06:06:a9:69:c5:a9:bf:cb:01:14:ad:
6b:0e:b0:3b:52:41:b7:a8:c4:07:d1:82:62:c8:b4:
b9:7e:7b:23:4c:a7:b0:ff:b3:62:d4:6b:01:2a:37:
a2:fe:fa:7c:ac:57:c4:9e:82:4b:e3:45:0c:ba:63:
9a:40:ee:4b:ad:f2:9d:11:c7:b8:29:3c:d7:42:8c:
2e:ae:44:ec:74:11:d3:b1:b9:14:07:69:10:f9:7a:
a1:95:2f:9f:cd:8b:1f:ed:0f:4d:24:79:fe:15:19:
44:ad:35:ba:eb:b6:ec:6f:6f:c6:f5:55:a3:70:8f:
af:98:7d:9a:e0:45:37:f2:89:45:50:21:c6:c0:2e:
96:9f:35:7b:b6:c0:d9:e3:93:eb:e9:33:30:02:9a:
99:eb:aa:62:50:c6:91:d7:3e:d4:52:0f:43:cb:15:
c7:42:77:26:82:2f:d1:8b:0a:21:83:60:99:3a:92:
99:5a:18:cb:11:8f:d0:5a:d1:0d:6e:03:52:51:95:
19:27:16:f7:2b:c6:69:99:c8:ec:c0:82:aa:bb:06:
32:93:b3:89:0e:aa:59:7b:ad:f8:05:fb:b0:eb:f8:
26:3c:72:42:6a:20:31:46:88:c8:e4:14:88:e0:27:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:0F:8D:64:58:97:5B:8A:92:85:0A:EF:E7:A4:F9:D8:6E:F6:90
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VmcPjWRYl1uKkoUK7-ek-dhu9pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.7.0/24
45.67.245.0/24
45.130.163.0/24
45.137.139.0/24
45.145.135.0/24
91.132.30.0/24
185.246.15.0/24
201.49.189.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1d:31:e6:07:63:ed:3d:08:d1:75:a1:33:1f:8c:ec:44:30:
d9:f9:77:7f:ce:08:b5:83:58:83:d6:d3:f9:1e:44:f0:d2:c2:
4c:52:8a:6b:65:41:70:0b:d7:32:8b:95:5d:25:29:b0:d4:94:
51:af:9f:1a:ec:85:cb:4d:ae:bb:03:82:a4:21:08:3b:8e:62:
5a:c4:5e:7b:9d:e1:9b:14:b8:cd:1e:04:96:fe:68:f2:f4:0f:
6b:5a:9f:f4:8f:33:2d:d1:4e:af:c9:88:eb:47:98:85:96:f9:
bc:de:fd:2e:4a:15:ea:99:1d:e0:11:8e:6a:f0:03:8f:f0:ae:
4d:d6:c4:11:f2:d4:48:29:8d:89:ff:ed:ca:35:30:70:61:86:
99:5e:01:8c:61:38:78:f4:ce:50:d7:f7:83:ba:8c:17:0f:e0:
c2:7e:8b:b6:17:c1:ad:2f:4e:b6:93:34:8e:a0:7b:df:ad:0c:
5f:18:42:81:cf:7b:51:aa:17:7a:42:ed:d8:e2:73:2f:f5:25:
39:4b:c6:d2:c1:85:34:f1:bd:f3:04:d3:a5:44:6d:a3:00:65:
9b:9b:27:3b:c5:2f:69:bd:32:c1:8e:85:3d:bd:74:40:d2:b3:
56:82:d7:f5:72:f1:8a:d1:05:c9:26:34:5b:12:8a:21:c8:d5:
14:7e:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:38:52 2026 by rpki-client