This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VOSGFQtklFgLJ0gE8jRbDiIpoQc.roa
File: VOSGFQtklFgLJ0gE8jRbDiIpoQc.roa (raw, json)
Hash identifier: uzHasKSvF0PqhxHOG30GH2frHudDzyOplyyCYZYZvM4=
Subject key identifier: 54:E4:86:15:0B:64:94:58:0B:27:48:04:F2:34:5B:0E:22:29:A1:07
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019B797DECA0AA9B0D79666BA0C7116AFF14
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VOSGFQtklFgLJ0gE8jRbDiIpoQc.roa
Signing time: Thu 01 Jan 2026 12:17:34 +0000
ROA not before: Thu 01 Jan 2026 12:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44592
IP address blocks: 89.125.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:ec:a0:aa:9b:0d:79:66:6b:a0:c7:11:6a:ff:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 12:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54e486150b6494580b274804f2345b0e2229a107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:0d:62:8e:d4:05:c5:e6:05:c4:59:19:43:
3e:eb:6f:1c:3a:bd:c4:a2:61:f7:d9:57:57:11:62:
cc:db:c2:15:3c:4b:c3:79:09:2a:98:a8:32:ff:e5:
73:e9:32:72:cb:57:13:3d:39:27:71:75:b1:84:b1:
15:4e:a3:84:6d:25:fb:1d:18:b2:8c:67:01:b6:7f:
04:12:e5:a3:a1:be:60:03:c8:2a:57:ec:18:50:e5:
ba:8c:96:c2:9b:08:f0:20:2d:a7:7b:18:c4:f1:c3:
cb:7b:96:97:a9:95:a3:58:12:f5:6a:b3:69:cc:8a:
b0:5c:e8:21:1d:42:86:89:50:0f:32:da:87:7c:65:
2d:d0:e5:81:08:a7:40:c8:63:98:ab:d9:ab:1c:29:
08:de:e8:c4:91:c2:0d:d8:9a:69:e2:37:a0:00:52:
4d:c7:d2:88:2a:0c:e9:db:68:64:91:26:8f:6d:a1:
a2:9f:57:0c:c8:ea:f1:4e:7c:cc:ed:97:3d:47:2c:
35:62:b4:39:06:61:aa:81:74:ce:08:0d:1f:6f:6c:
db:a1:86:84:3f:94:3c:28:b2:c3:c5:01:51:d4:68:
d8:85:98:ed:1c:19:77:81:5e:77:3d:21:19:07:12:
74:9f:93:8c:dd:81:7c:bc:13:7b:b6:c2:2f:30:cd:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E4:86:15:0B:64:94:58:0B:27:48:04:F2:34:5B:0E:22:29:A1:07
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VOSGFQtklFgLJ0gE8jRbDiIpoQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.69.0/24
Signature Algorithm: sha256WithRSAEncryption
04:dd:2d:c6:d9:23:8b:f8:d9:e1:98:71:b6:65:bf:9b:95:7a:
1c:41:19:f5:9d:2d:2f:7e:2e:8e:a9:55:81:12:88:5b:27:82:
4f:e6:5f:e3:4f:f1:4c:61:79:b3:72:97:af:71:c1:f1:a8:99:
cf:8c:01:16:9b:14:50:68:c9:e0:db:65:b3:19:a1:8a:8b:a7:
98:f1:6e:91:34:83:28:4e:03:28:de:43:75:61:77:fe:e0:72:
5a:ea:51:88:11:67:5e:7b:6d:bd:9d:fa:7b:c0:4e:57:ca:70:
0d:59:d4:15:5b:77:05:14:95:ac:a5:00:ed:00:f3:e1:3b:93:
d3:23:35:a0:d5:06:48:5f:d1:8d:44:1a:72:c4:d6:50:5d:79:
ae:75:be:58:8f:f4:93:43:14:0b:30:6d:a7:c1:94:c6:98:9b:
42:ae:51:d0:d8:df:c0:30:b9:93:d8:b3:a3:73:ee:cc:6a:04:
e5:d6:10:ee:cd:66:57:fb:6e:3d:45:1e:85:88:28:b4:7f:51:
44:ae:17:d0:1b:41:fc:14:c6:33:20:3d:43:bc:29:1a:0f:e5:
8a:a4:72:99:4f:e6:df:fb:cc:39:73:22:23:0f:94:b6:21:c8:
c4:91:8b:03:5a:1e:03:2f:05:50:81:65:20:9f:9b:51:07:99:
39:e4:c0:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5feygqpsNeWZroMcRav8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGU0ODYxNTBiNjQ5NDU4MGIyNzQ4MDRmMjM0NWIwZTIyMjlhMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHgNYo7UBcXmBcRZGUM+628cOr3E
omH32VdXEWLM28IVPEvDeQkqmKgy/+Vz6TJyy1cTPTkncXWxhLEVTqOEbSX7HRiy
jGcBtn8EEuWjob5gA8gqV+wYUOW6jJbCmwjwIC2nexjE8cPLe5aXqZWjWBL1arNp
zIqwXOghHUKGiVAPMtqHfGUt0OWBCKdAyGOYq9mrHCkI3ujEkcIN2Jpp4jegAFJN
x9KIKgzp22hkkSaPbaGin1cMyOrxTnzM7Zc9Ryw1YrQ5BmGqgXTOCA0fb2zboYaE
P5Q8KLLDxQFR1GjYhZjtHBl3gV53PSEZBxJ0n5OM3YF8vBN7tsIvMM2BtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTkhhULZJRYCydIBPI0Ww4iKaEHMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVk9TR0ZRdGtsRmdMSjBnRThqUmJEaUlwb1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX1FMA0G
CSqGSIb3DQEBCwUAA4IBAQAE3S3G2SOL+NnhmHG2Zb+blXocQRn1nS0vfi6OqVWB
EohbJ4JP5l/jT/FMYXmzcpevccHxqJnPjAEWmxRQaMng22WzGaGKi6eY8W6RNIMo
TgMo3kN1YXf+4HJa6lGIEWdee229nfp7wE5XynANWdQVW3cFFJWspQDtAPPhO5PT
IzWg1QZIX9GNRBpyxNZQXXmudb5Yj/STQxQLMG2nwZTGmJtCrlHQ2N/AMLmT2LOj
c+7MagTl1hDuzWZX+249RR6FiCi0f1FErhfQG0H8FMYzID1DvCkaD+WKpHKZT+bf
+8w5cyIjD5S2IcjEkYsDWh4DLwVQgWUgn5tRB5k55MAX
-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:25 2026 by rpki-client