This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VypOkX2QnCIzeORFGyFAHZoBjX8.roa
File: VypOkX2QnCIzeORFGyFAHZoBjX8.roa (raw, json)
Hash identifier: zZd7YIEZOV8etwSedG8AOg7n2d+7ctZX4nhgZDpQPAE=
Subject key identifier: 57:2A:4E:91:7D:90:9C:22:33:78:E4:45:1B:21:40:1D:9A:01:8D:7F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019B7DCB82A93026E2947E08216012637ABA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VypOkX2QnCIzeORFGyFAHZoBjX8.roa
Signing time: Fri 02 Jan 2026 08:20:47 +0000
ROA not before: Fri 02 Jan 2026 08:20:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212913
IP address blocks: 62.3.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:82:a9:30:26:e2:94:7e:08:21:60:12:63:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 2 08:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=572a4e917d909c223378e4451b21401d9a018d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:42:f9:52:6d:c2:20:6a:b7:46:54:05:b7:
1d:f0:8e:72:7f:c5:2c:ce:11:8f:dc:f2:fb:b4:f5:
ae:3c:4c:4a:6b:70:b5:2c:dd:e8:46:e1:2c:5d:34:
af:f8:e8:07:87:e2:73:f5:e1:58:35:34:9c:59:06:
38:ef:68:80:47:47:a1:8e:9c:79:7c:54:5d:62:4c:
ce:a7:0b:2f:64:f2:a6:2b:5b:31:bc:ac:f9:af:88:
47:22:6d:5c:93:09:79:7d:97:25:fb:6e:5c:07:00:
79:49:5b:eb:97:69:e3:16:69:44:82:75:10:21:b3:
5a:ab:1e:24:4b:6e:a2:bd:d8:d6:06:db:a7:00:b3:
0d:0a:61:91:05:19:9d:1b:32:4d:31:87:de:f1:44:
36:2f:98:24:17:ee:3c:20:d7:60:4a:08:e8:07:aa:
5b:18:85:98:83:6f:26:30:13:df:19:81:c1:28:5d:
c9:e3:66:5a:34:4e:54:87:f1:98:02:af:9b:04:4a:
85:59:11:ab:a7:5f:b3:99:01:d9:23:bd:df:b7:bb:
56:20:17:74:e3:a1:af:0c:3f:77:7b:16:e5:43:f7:
40:74:72:73:19:96:3e:bf:c0:bb:ae:d3:9f:e4:0e:
71:91:bd:e2:4e:6c:18:df:70:17:e4:c5:39:d3:24:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:4E:91:7D:90:9C:22:33:78:E4:45:1B:21:40:1D:9A:01:8D:7F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/VypOkX2QnCIzeORFGyFAHZoBjX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.58.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6e:c5:e2:e3:b4:a9:2e:85:02:ce:99:f8:52:39:2a:7d:77:
1f:ed:39:78:27:2c:c6:d5:50:cc:6e:6b:4b:02:43:09:9c:05:
6e:1f:32:23:bd:97:9f:ef:68:84:ae:46:4e:81:a7:c0:75:43:
fb:dd:44:a2:40:1e:6f:fe:cf:75:71:ab:e4:21:d1:13:48:5c:
fd:1e:d3:5b:c7:1a:da:92:5e:11:4f:49:fc:83:02:13:d7:0f:
8a:64:09:85:b8:d6:14:5f:c7:b9:80:f9:c7:98:74:af:d3:92:
c8:f7:19:19:ce:7b:29:9f:1a:16:e9:12:a7:7c:d1:c2:3a:52:
76:f3:73:c9:11:94:2b:4a:e4:40:73:c6:8b:90:7e:ef:e1:4e:
67:e4:41:f4:df:4e:34:7a:36:fd:08:df:67:b7:70:0d:d3:e8:
c3:a0:37:6e:9c:c6:3d:70:31:e4:e3:2f:f2:1d:3b:7e:d3:2a:
7d:9b:f3:93:4b:5f:cc:77:6e:e6:1c:6e:bb:01:ed:21:8c:ef:
33:36:7d:f4:1e:d4:dc:88:38:62:b9:27:f3:01:56:a4:64:42:
82:3f:09:c4:a8:b9:84:ae:f6:99:3e:71:e1:9b:c6:af:c3:b9:
09:ec:20:f9:6e:a8:6e:34:b3:55:46:f6:d7:ae:ba:78:59:90:
77:9f:f5:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y4KpMCbilH4IIWASY3q6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzJhNGU5MTdkOTA5YzIyMzM3OGU0NDUxYjIxNDAxZDlhMDE4ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4dC+VJtwiBqt0ZUBbcd8I5yf8Us
zhGP3PL7tPWuPExKa3C1LN3oRuEsXTSv+OgHh+Jz9eFYNTScWQY472iAR0ehjpx5
fFRdYkzOpwsvZPKmK1sxvKz5r4hHIm1ckwl5fZcl+25cBwB5SVvrl2njFmlEgnUQ
IbNaqx4kS26ivdjWBtunALMNCmGRBRmdGzJNMYfe8UQ2L5gkF+48INdgSgjoB6pb
GIWYg28mMBPfGYHBKF3J42ZaNE5Uh/GYAq+bBEqFWRGrp1+zmQHZI73ft7tWIBd0
46GvDD93exblQ/dAdHJzGZY+v8C7rtOf5A5xkb3iTmwY33AX5MU50yQH6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFcqTpF9kJwiM3jkRRshQB2aAY1/MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvVnlwT2tYMlFuQ0l6ZU9SRkd5RkFIWm9Calg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM6MA0G
CSqGSIb3DQEBCwUAA4IBAQAUbsXi47SpLoUCzpn4UjkqfXcf7Tl4JyzG1VDMbmtL
AkMJnAVuHzIjvZef72iErkZOgafAdUP73USiQB5v/s91cavkIdETSFz9HtNbxxra
kl4RT0n8gwIT1w+KZAmFuNYUX8e5gPnHmHSv05LI9xkZznspnxoW6RKnfNHCOlJ2
83PJEZQrSuRAc8aLkH7v4U5n5EH03040ejb9CN9nt3AN0+jDoDdunMY9cDHk4y/y
HTt+0yp9m/OTS1/Md27mHG67Ae0hjO8zNn30HtTciDhiuSfzAVakZEKCPwnEqLmE
rvaZPnHhm8avw7kJ7CD5bqhuNLNVRvbXrrp4WZB3n/UX
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:00 2026 by rpki-client