This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vnd5d8HYc-F8IZfObEYE0UD-KqU.roa
File: Vnd5d8HYc-F8IZfObEYE0UD-KqU.roa (raw, json)
Hash identifier: 3N4nuJRZkFbJCMhzjHZNMQEOd8ikfJieu57PWO7gDwA=
Subject key identifier: 56:77:79:77:C1:D8:73:E1:7C:21:97:CE:6C:46:04:D1:40:FE:2A:A5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019B797DFAB70D706440FED2713AC2AAFE2A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vnd5d8HYc-F8IZfObEYE0UD-KqU.roa
Signing time: Thu 01 Jan 2026 12:17:37 +0000
ROA not before: Thu 01 Jan 2026 12:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207713
IP address blocks: 212.192.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 16:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:fa:b7:0d:70:64:40:fe:d2:71:3a:c2:aa:fe:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 12:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56777977c1d873e17c2197ce6c4604d140fe2aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:13:24:c0:7b:04:aa:15:4b:c6:27:d3:e5:
bc:0b:57:d2:2c:65:44:74:d6:68:1d:67:1d:cb:67:
3e:2b:bb:f9:5a:53:f2:b2:eb:6e:b0:f8:3c:7a:2f:
d2:69:e9:fa:bd:0c:89:43:72:dc:26:49:56:74:a5:
aa:5e:c6:d8:15:99:24:2a:94:07:b2:e8:51:28:c6:
a2:85:39:3e:19:e7:f3:60:08:e1:60:31:7a:49:f4:
c0:8e:0f:bd:67:2d:d0:fb:d7:e5:98:be:f9:8a:f9:
af:28:8f:c9:31:21:e4:ea:8a:24:f3:85:fc:f8:8e:
8d:f5:2d:9c:61:ee:a8:0a:a2:fc:0d:4d:1d:0e:72:
87:52:23:8b:e3:78:1d:ab:d4:9d:01:9c:75:94:c5:
fe:67:9c:16:87:82:4b:ab:da:9a:5f:a4:f3:26:03:
ad:0d:0a:ff:b6:33:86:d4:74:2b:f6:af:be:c4:36:
68:fd:c4:e8:f3:0b:36:21:33:40:64:0f:76:89:15:
b0:d4:e1:bf:7c:0a:cb:aa:55:b2:1a:8a:5a:93:a9:
3c:67:3c:86:1b:9e:d2:75:61:a7:3b:b3:96:d2:4a:
d4:48:d5:e4:13:ce:a3:47:ac:22:a2:09:25:bd:40:
b9:cd:a5:52:e6:5b:f8:28:b7:13:cf:b8:3e:c8:90:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:77:79:77:C1:D8:73:E1:7C:21:97:CE:6C:46:04:D1:40:FE:2A:A5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vnd5d8HYc-F8IZfObEYE0UD-KqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
90:66:b2:b8:81:07:11:ab:45:a6:0f:a6:6b:fa:5f:b5:ca:39:
39:89:44:ff:19:94:fb:7f:d2:de:09:cb:68:95:d4:b6:16:71:
6b:06:9a:a0:5a:04:54:a7:28:0b:3e:5f:68:e7:02:41:ba:96:
20:0f:d6:ab:99:71:da:02:c9:4c:b9:2e:c2:b4:fd:1c:b7:88:
6b:09:47:a8:71:09:c1:cf:74:23:7f:60:63:a3:ef:f0:24:b4:
fb:18:e4:76:aa:42:69:ca:c1:34:51:c9:03:33:ea:54:de:0b:
ae:3f:3c:e2:13:ea:be:bf:cc:fc:a1:fd:81:9f:fa:54:98:92:
ff:ef:76:b8:8f:51:2f:0c:98:15:70:0b:f4:63:94:b1:61:7e:
f0:f9:e8:ad:f0:c9:1b:c2:e4:ae:78:4f:31:21:ed:77:c1:5e:
5c:0b:16:03:d2:bf:8a:83:4d:f6:b1:33:a6:ae:0b:e8:98:62:
c7:e3:50:5b:e2:58:81:56:16:13:8a:46:a2:1a:20:5e:d5:99:
fe:d8:e2:91:f7:52:bf:bc:86:9b:ac:a0:6d:e1:01:80:b7:da:
5a:48:ed:f0:7e:44:74:82:83:56:c7:87:6b:4c:d3:44:ae:21:
bf:6d:99:1d:97:01:69:1e:13:58:33:09:ce:44:19:8d:5f:b8:
3e:72:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:15:27 2026 by rpki-client