This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VKwDG2hLFQeVgZWJxAY4yX1C_yg.roa
File: VKwDG2hLFQeVgZWJxAY4yX1C_yg.roa (raw, json)
Hash identifier: UEbG2XqwNRTcXpoOeSYrxyo7FuvgtlkRqLgKyRKsfUk=
Subject key identifier: 54:AC:03:1B:68:4B:15:07:95:81:95:89:C4:06:38:C9:7D:42:FF:28
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019C526C937FD4A2C4EC11DF1A44FE09A74C
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VKwDG2hLFQeVgZWJxAY4yX1C_yg.roa
Signing time: Thu 12 Feb 2026 15:16:13 +0000
ROA not before: Thu 12 Feb 2026 15:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.122.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 10:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:6c:93:7f:d4:a2:c4:ec:11:df:1a:44:fe:09:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Feb 12 15:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54ac031b684b150795819589c40638c97d42ff28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:61:a9:02:e8:6c:2d:d7:06:95:47:9c:d5:68:
db:9e:d7:ca:22:99:60:f4:84:4f:7c:68:6d:68:d1:
5c:5e:d4:8f:cd:2a:80:d3:24:dc:df:94:13:4d:3d:
77:a8:3b:9e:a9:37:7f:d6:77:e2:b1:40:c1:b7:5a:
41:d3:dc:61:72:ee:eb:4e:d6:59:41:68:a1:4b:8d:
7e:05:e1:ed:9e:27:ee:12:31:b4:68:b6:82:f2:08:
1f:6b:d0:e6:e1:00:66:a4:59:35:94:19:2f:e3:80:
3a:b0:99:c8:42:1f:25:ae:6d:5a:3d:df:ce:1e:70:
c9:9e:71:ed:92:1d:0e:4f:fc:fd:40:d0:11:88:9e:
7f:d8:6f:e5:47:45:54:6e:9f:61:80:03:91:f8:1c:
85:a1:75:2b:76:60:47:ad:3f:cb:b2:04:bf:1c:9b:
1c:fb:22:c7:6c:3f:ba:ab:95:86:87:62:9e:b2:30:
2e:47:40:e0:22:c2:f3:d7:1f:bb:4c:7e:e4:6f:56:
a2:70:13:84:3a:3e:07:73:62:4c:f6:39:1a:ec:15:
ba:8e:48:59:65:bb:a0:17:e3:80:17:84:92:9b:97:
df:31:7b:da:2f:b8:a4:f0:ff:c1:13:69:2d:1e:34:
7b:df:1e:1b:ea:d3:f5:da:92:57:70:8c:9a:d6:38:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AC:03:1B:68:4B:15:07:95:81:95:89:C4:06:38:C9:7D:42:FF:28
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/VKwDG2hLFQeVgZWJxAY4yX1C_yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.58.0/24
Signature Algorithm: sha256WithRSAEncryption
77:26:39:f7:2b:a7:08:b4:2a:8c:91:2d:ff:21:bc:29:05:9c:
25:c4:31:5f:0c:db:e9:5b:a2:f0:b0:06:6e:ce:b1:14:0e:01:
49:81:a4:33:48:9d:98:9b:6a:13:b7:e1:7f:97:d6:cb:39:d3:
b2:91:49:22:3e:40:a1:60:cb:7c:18:45:2a:e1:c1:fd:6c:7a:
db:a9:93:9f:6e:51:49:48:e1:1e:be:b9:c9:09:1f:69:82:59:
38:a2:57:ef:27:55:7c:00:ca:e8:f8:f4:ff:4b:72:8b:58:80:
28:ea:e4:5c:dd:09:12:2e:2f:bb:31:a7:40:73:79:6f:57:c3:
16:57:62:af:64:f4:cb:6b:1c:e0:66:3a:62:24:db:13:6f:36:
73:55:85:d9:13:f3:ae:03:60:69:1d:31:43:e5:a9:8d:ec:72:
61:a6:9b:06:08:0e:81:b1:05:31:12:80:96:47:5b:8a:90:20:
31:61:5c:9e:68:c4:45:32:23:6e:30:8c:ee:13:3c:21:d4:b6:
bf:29:1a:35:4b:14:b5:b6:cc:0d:51:67:44:0a:06:6a:be:23:
a5:da:69:05:3e:b2:23:27:18:51:d7:f4:0d:46:2f:1a:57:86:
7e:f3:08:35:f2:b2:53:33:c7:18:86:e6:8e:af:46:dc:2d:87:
bf:83:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:52 2026 by rpki-client