This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/Vs3cpjLkojhEeoteudtEVAgCQwo.roa
File: Vs3cpjLkojhEeoteudtEVAgCQwo.roa (raw, json)
Hash identifier: yiuHOMQwcx3KrxmcRKZ69rV4XNynfYY+/zYAKiGbSDw=
Subject key identifier: 56:CD:DC:A6:32:E4:A2:38:44:7A:8B:5E:B9:DB:44:54:08:02:43:0A
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 019C2898D427AC04F0305DF1ED0295AB7C7B
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/Vs3cpjLkojhEeoteudtEVAgCQwo.roa
Signing time: Wed 04 Feb 2026 12:20:30 +0000
ROA not before: Wed 04 Feb 2026 12:20:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33916
IP address blocks: 45.133.164.0/22 maxlen: 22
78.109.208.0/20 maxlen: 20
195.242.194.0/23 maxlen: 23
2a0e:76c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:98:d4:27:ac:04:f0:30:5d:f1:ed:02:95:ab:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Feb 4 12:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56cddca632e4a238447a8b5eb9db44540802430a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0c:1b:6f:27:fc:60:08:c1:31:47:2f:a4:c5:
eb:bf:8a:c2:f8:73:21:dd:a5:ad:58:0d:2c:49:47:
58:8e:d2:23:76:c6:88:a5:83:4b:a0:4d:8a:f7:f6:
c8:7d:3c:2f:96:8f:b4:9c:e0:f8:3f:b0:6f:11:9f:
a5:bd:77:87:4d:c7:dd:f4:c1:08:80:2c:be:a2:f6:
23:84:03:d2:91:bc:23:66:db:e4:bc:5b:18:c0:40:
f7:ea:3f:14:d1:1e:1a:2a:1d:32:00:66:28:df:59:
fd:e4:8b:2c:e3:2d:70:28:e7:0a:0b:f4:61:ff:b4:
31:37:ed:ca:9b:72:6b:79:93:9d:ad:d0:7b:ec:83:
88:26:ed:aa:97:6d:f9:47:13:5f:70:28:6a:71:f7:
ec:04:58:44:a2:0e:31:da:00:c1:1f:f2:a1:7e:e1:
d6:56:16:ee:bf:49:25:a1:10:c4:16:67:f0:4d:e7:
71:0c:0c:f8:db:23:77:b6:03:eb:7e:7d:f6:af:ec:
08:a1:f7:a6:c7:0e:5e:e3:92:e2:aa:17:5e:22:61:
13:9b:7d:43:dd:ed:bd:f8:fd:e1:95:73:38:1c:78:
67:63:04:4c:c9:6d:f7:06:60:ca:86:b5:ce:20:4f:
f3:6e:64:5f:ed:79:f6:69:bd:75:b1:1b:02:c5:85:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CD:DC:A6:32:E4:A2:38:44:7A:8B:5E:B9:DB:44:54:08:02:43:0A
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/Vs3cpjLkojhEeoteudtEVAgCQwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.164.0/22
78.109.208.0/20
195.242.194.0/23
IPv6:
2a0e:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:21:6e:e0:90:a1:2a:2f:26:e3:3c:84:d4:2f:0c:4e:ab:b0:
b9:35:e1:15:d3:d8:47:b8:3b:9f:6c:00:91:de:fc:25:39:bb:
f6:d8:b3:e2:7a:a2:48:f0:02:47:39:15:47:95:97:9e:3f:53:
77:c7:b0:68:51:af:8a:87:0d:07:af:ea:e9:6f:d7:5d:ef:8c:
c7:55:78:f0:00:1e:44:f4:db:a6:8d:ed:a6:a3:79:58:7f:90:
bd:2f:06:17:b2:94:ce:51:b4:64:37:2b:6a:21:09:2e:77:b4:
05:25:e1:4b:76:38:68:23:b3:d8:38:b1:ab:58:86:88:4a:3e:
3b:d7:10:1e:f0:f1:63:7d:dd:c0:d5:52:ad:63:39:27:8a:05:
95:76:33:f9:21:4c:6b:10:3b:68:c8:26:66:7d:6b:65:e9:c1:
08:d3:be:61:55:78:aa:ee:e3:0a:9f:33:22:06:42:95:6a:48:
e9:cf:a6:88:30:cb:05:d9:5f:aa:f7:7b:93:b3:c3:b4:c0:65:
de:23:41:7a:46:a7:57:30:4a:c0:54:a5:a9:ed:64:ac:de:ba:
80:17:b5:ad:b2:67:11:2a:bc:a8:d3:ad:a2:2d:b3:c7:23:99:
13:cb:e0:0d:38:22:41:9e:43:0a:25:38:94:72:73:a3:c3:f9:
93:2a:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:00:52 2026 by rpki-client