This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/vc4rQV1btws3GoUjJ72MXPBLjsA.roa
File: vc4rQV1btws3GoUjJ72MXPBLjsA.roa (raw, json)
Hash identifier: vJx5UKv6BgNsvAF5bCtGkQAa0ljtx4RqY02ta/bz2CY=
Subject key identifier: BD:CE:2B:41:5D:5B:B7:0B:37:1A:85:23:27:BD:8C:5C:F0:4B:8E:C0
Certificate issuer: /CN=a5618936eae39f274040a0d3327cf88102c84c6f
Certificate serial: 019C2AB94E477C36F19468CA3985E5A90FB1
Authority key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/vc4rQV1btws3GoUjJ72MXPBLjsA.roa
Signing time: Wed 04 Feb 2026 22:15:13 +0000
ROA not before: Wed 04 Feb 2026 22:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 109.232.16.0/24 maxlen: 24
109.232.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2a:b9:4e:47:7c:36:f1:94:68:ca:39:85:e5:a9:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5618936eae39f274040a0d3327cf88102c84c6f
Validity
Not Before: Feb 4 22:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdce2b415d5bb70b371a852327bd8c5cf04b8ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:f7:f7:37:8a:8a:1f:f9:4b:c9:94:c8:e8:
6c:20:c7:70:9f:3c:5a:75:b8:91:f8:94:05:db:8c:
24:df:17:dc:c6:e7:87:9e:53:e5:f2:28:6e:d7:48:
c0:d8:d6:f2:0c:e0:39:28:38:7c:a9:a1:3f:33:24:
56:01:46:4c:3c:9d:b9:b1:65:e0:03:ba:09:bd:84:
5a:e3:11:8e:a9:53:02:40:c6:35:ec:46:27:23:a9:
cf:e1:ef:62:5c:3b:df:4a:91:72:23:44:72:c8:4d:
29:a5:30:a7:80:f0:67:59:d0:1a:1f:d4:3c:ad:61:
c0:ca:6c:d0:c8:ee:77:a8:5d:31:0f:da:f5:bd:9a:
11:96:5b:fe:b4:54:fc:68:63:6a:41:4c:c4:47:4f:
b2:91:da:03:83:91:03:97:0b:b6:39:ea:c6:0c:a5:
24:88:af:af:61:f6:2e:2c:fd:0a:3a:0f:36:5d:63:
a4:8e:f6:14:a5:cd:f8:79:29:40:9c:bf:b4:cf:6a:
d7:47:14:f4:17:0d:11:a4:84:9d:0e:b4:42:47:48:
5c:5f:cd:f7:4c:9e:2d:92:35:58:05:af:82:96:5a:
ea:67:81:bd:f9:6a:83:03:0a:0d:44:d0:9a:b8:c0:
3d:70:93:61:1f:81:55:52:93:4e:2c:90:3e:5d:cc:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:2B:41:5D:5B:B7:0B:37:1A:85:23:27:BD:8C:5C:F0:4B:8E:C0
X509v3 Authority Key Identifier:
keyid:A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/vc4rQV1btws3GoUjJ72MXPBLjsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.16.0/23
Signature Algorithm: sha256WithRSAEncryption
80:cb:a3:63:d2:df:62:b5:69:50:98:b4:26:b7:2d:1b:6a:09:
0a:8a:23:d2:a0:64:78:08:1c:2f:ad:59:17:8f:8e:0f:54:20:
7e:fe:11:e7:3c:23:f3:76:f9:e2:58:e3:79:7e:73:89:d3:e7:
9b:ba:77:fd:c9:24:38:f7:c5:79:c8:22:4c:e4:c9:af:6a:d1:
94:7b:84:e6:b2:ca:b5:e0:70:b6:b8:bc:d2:12:28:49:8a:ff:
dd:df:4b:b2:db:f7:a3:f5:f7:34:0b:1f:50:c7:f7:a1:ea:00:
44:2e:b4:d0:2d:be:41:e2:9b:08:0e:52:86:14:79:76:7d:89:
42:36:be:0f:49:7b:44:8c:e6:a9:4e:e7:ef:86:cb:4e:45:33:
60:3e:9e:b5:d4:ad:26:7e:8c:4a:cb:f6:7c:6a:b7:2d:4c:bc:
ee:55:5f:d1:0f:d7:c2:8e:da:f3:bd:0b:fe:24:20:0a:fd:cf:
d8:58:dc:3c:8d:7a:2c:76:d4:1f:c1:6c:99:b3:d7:e6:1d:76:
f9:4d:dd:b3:c7:68:3a:47:c1:d3:84:c1:46:a9:de:ed:62:d2:
d6:ef:05:5b:8a:ec:43:bf:c9:eb:93:ae:55:ed:3e:61:d3:62:
34:4c:86:b7:f0:d3:ce:5d:3e:a5:6d:c4:37:a5:05:14:6e:7d:
e9:e2:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:45 2026 by rpki-client