This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/V_oMMTgFoWuuY2pFJTCd8RBDqAU.roa
File: V_oMMTgFoWuuY2pFJTCd8RBDqAU.roa (raw, json)
Hash identifier: 6++Fc1z5+O8bljyaPUkjtqhqNBYss1M9D2DcO9unmBo=
Subject key identifier: 57:FA:0C:31:38:05:A1:6B:AE:63:6A:45:25:30:9D:F1:10:43:A8:05
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019B7F140D4EF0B0EA009BD781529FE3D59E
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/V_oMMTgFoWuuY2pFJTCd8RBDqAU.roa
Signing time: Fri 02 Jan 2026 14:19:39 +0000
ROA not before: Fri 02 Jan 2026 14:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20115
IP address blocks: 84.37.32.0/20 maxlen: 24
84.37.176.0/20 maxlen: 24
84.37.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:0d:4e:f0:b0:ea:00:9b:d7:81:52:9f:e3:d5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Jan 2 14:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57fa0c313805a16bae636a4525309df11043a805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:55:51:8c:70:30:b7:3b:f2:5f:8f:d8:f2:
ed:62:bc:69:b6:f6:ef:e7:1f:60:b6:72:18:28:a6:
8d:10:fb:5f:a4:26:5e:64:84:f8:ae:61:f9:82:c6:
4d:e2:0d:71:6e:0f:7b:dc:2c:bc:86:64:d3:d0:5b:
28:90:a6:c0:40:c9:04:39:98:8b:aa:ca:32:0e:97:
bc:0f:34:53:df:cf:5f:65:f9:21:df:e5:5c:2e:e2:
c4:fd:24:a9:87:6a:aa:e1:b7:69:93:5d:e1:aa:26:
e2:f1:fc:2b:57:86:19:bc:58:20:5b:8f:21:10:4c:
8c:f4:d9:ef:fb:93:a5:70:75:e7:3c:a5:9f:4f:9b:
68:a8:c4:17:33:a3:8f:12:f2:bb:bc:9a:82:68:1f:
82:e6:38:e9:16:0b:10:40:a6:81:25:a6:b4:5b:3d:
c7:62:33:8f:09:3e:05:36:cb:93:85:7e:cc:95:c2:
ed:5a:75:04:ee:52:25:4f:71:cf:98:aa:32:8c:cd:
05:df:d8:12:45:43:ba:16:6a:ab:5f:0d:59:2e:d6:
49:8d:5b:b0:7c:90:09:1f:fa:de:28:62:b4:03:ca:
32:36:0c:b2:e0:8e:47:fb:60:44:fe:90:ee:0c:1b:
64:1c:71:89:06:ae:db:a9:98:c2:19:5a:e4:68:d9:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:0C:31:38:05:A1:6B:AE:63:6A:45:25:30:9D:F1:10:43:A8:05
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/V_oMMTgFoWuuY2pFJTCd8RBDqAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.32.0/20
84.37.176.0-84.37.255.255
Signature Algorithm: sha256WithRSAEncryption
0e:07:24:8b:3c:28:79:8e:11:aa:8e:cc:ff:aa:5c:7c:51:f5:
8a:e7:3b:ec:17:2b:61:41:33:70:ae:19:22:a8:23:70:6e:14:
6a:cc:b8:44:2f:33:bc:12:ec:32:1a:39:d9:08:9d:72:8a:49:
cd:d7:c9:03:4f:65:18:dd:dd:f8:ec:dd:36:ef:fb:58:a7:b8:
b7:5e:1f:65:bc:5d:af:9d:ff:54:03:7f:c3:df:3d:1a:99:48:
e3:1e:c9:ab:51:90:1a:17:71:a4:3a:de:d3:9c:1d:b5:74:b5:
01:a8:45:ec:5e:83:be:15:ea:8d:5c:4e:aa:82:12:0d:e9:9e:
cd:a2:81:86:7f:f9:c2:3b:6c:3a:90:df:31:af:b8:10:df:13:
f3:1c:a4:f0:b9:b8:63:c3:9e:a5:09:f8:bc:8a:33:44:85:2e:
8e:05:d5:f3:2c:52:6c:0b:f5:d4:91:4b:c1:6f:8a:3a:24:a1:
07:de:31:d8:b0:0d:91:19:f9:17:8a:f1:40:83:ca:7e:d9:ea:
4d:01:dd:c5:49:3c:ff:08:06:90:6d:35:6d:7f:c4:d4:8f:b0:
f6:e8:19:93:bb:5b:e8:5c:45:98:11:df:a9:ae:17:91:7e:f3:
87:3a:c5:4c:87:1e:bc:aa:9d:c8:d1:b1:cc:f8:78:06:9e:d9:
ad:36:5e:31
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZt/FA1O8LDqAJvXgVKf49WeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjYwMTAyMTQxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2ZhMGMzMTM4MDVhMTZiYWU2MzZhNDUyNTMwOWRmMTEwNDNhODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRxVUYxwMLc78l+P2PLtYrxptvbv
5x9gtnIYKKaNEPtfpCZeZIT4rmH5gsZN4g1xbg973Cy8hmTT0FsokKbAQMkEOZiL
qsoyDpe8DzRT389fZfkh3+VcLuLE/SSph2qq4bdpk13hqibi8fwrV4YZvFggW48h
EEyM9Nnv+5OlcHXnPKWfT5toqMQXM6OPEvK7vJqCaB+C5jjpFgsQQKaBJaa0Wz3H
YjOPCT4FNsuThX7MlcLtWnUE7lIlT3HPmKoyjM0F39gSRUO6FmqrXw1ZLtZJjVuw
fJAJH/reKGK0A8oyNgyy4I5H+2BE/pDuDBtkHHGJBq7bqZjCGVrkaNk9aQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFf6DDE4BaFrrmNqRSUwnfEQQ6gFMB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvVl9vTU1UZ0ZvV3V1WTJwRkpUQ2Q4UkJEcUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEVCUgMAsD
BARUJbADAwFUJDANBgkqhkiG9w0BAQsFAAOCAQEADgckizwoeY4Rqo7M/6pcfFH1
iuc77BcrYUEzcK4ZIqgjcG4Uasy4RC8zvBLsMho52QidcopJzdfJA09lGN3d+Ozd
Nu/7WKe4t14fZbxdr53/VAN/w989GplI4x7Jq1GQGhdxpDre05wdtXS1AahF7F6D
vhXqjVxOqoISDemezaKBhn/5wjtsOpDfMa+4EN8T8xyk8Lm4Y8OepQn4vIozRIUu
jgXV8yxSbAv11JFLwW+KOiShB94x2LANkRn5F4rxQIPKftnqTQHdxUk8/wgGkG01
bX/E1I+w9ugZk7tb6FxFmBHfqa4XkX7zhzrFTIcevKqdyNGxzPh4Bp7ZrTZeMQ==
-----END CERTIFICATE-----
Generated at Tue Jan 20 12:27:27 2026 by rpki-client