This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/vlU7MThRMcM5l45F8U78i6lhKzc.roa
File: vlU7MThRMcM5l45F8U78i6lhKzc.roa (raw, json)
Hash identifier: ImIAss3fsNynMybP2S9MkVXm/vknMWnZDrA4b7/hzEs=
Subject key identifier: BE:55:3B:31:38:51:31:C3:39:97:8E:45:F1:4E:FC:8B:A9:61:2B:37
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 019B7DCA0DF1521FBF8781B09E060D9EF120
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/vlU7MThRMcM5l45F8U78i6lhKzc.roa
Signing time: Fri 02 Jan 2026 08:19:12 +0000
ROA not before: Fri 02 Jan 2026 08:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48345
IP address blocks: 194.0.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:0d:f1:52:1f:bf:87:81:b0:9e:06:0d:9e:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Jan 2 08:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be553b31385131c339978e45f14efc8ba9612b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:15:f1:51:17:d0:2b:98:13:23:e0:31:6d:
30:64:20:de:22:84:96:11:08:3f:6e:21:3a:d8:7c:
95:d4:90:7c:d5:f0:1b:f7:4f:09:e1:92:fd:70:80:
79:39:a8:f8:db:8e:ca:fd:b4:68:00:a0:50:37:ab:
b3:87:c8:2f:41:bb:5d:44:90:9e:d3:76:07:be:1b:
76:4e:95:c9:c7:8a:33:04:dc:41:e0:9b:1a:78:10:
40:45:c9:1b:e6:0f:3e:a2:5a:39:e0:c0:df:57:68:
6f:db:3a:da:0d:a9:6d:e8:67:2f:4b:47:e0:c5:ad:
94:f8:e6:c8:d4:2d:0d:af:3e:21:3b:cf:d0:2f:b8:
33:d9:ac:a0:84:f4:84:f2:30:20:95:58:07:06:76:
88:6f:38:9f:c8:9a:d6:c1:d0:3f:b3:5d:65:d0:d7:
c4:90:80:de:2d:d4:3e:07:6c:d9:a2:0e:e9:5b:86:
15:ba:ad:04:30:2c:03:3b:55:ce:46:03:f2:a1:68:
3d:c5:ae:7c:26:aa:c9:38:5a:63:17:d1:d7:2e:e3:
2f:26:39:cd:91:05:e4:a2:4b:aa:a1:d1:34:57:0a:
ac:3f:50:b2:b5:38:40:e5:cb:16:19:29:df:d5:05:
d1:9c:33:ff:61:ba:0d:e8:0b:59:42:c7:3f:82:f7:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:3B:31:38:51:31:C3:39:97:8E:45:F1:4E:FC:8B:A9:61:2B:37
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/vlU7MThRMcM5l45F8U78i6lhKzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e9:5c:75:95:95:80:76:83:c5:7b:ad:21:83:98:8b:5d:24:
09:6e:ed:86:64:cb:93:71:3b:57:49:10:bc:4e:0d:f3:e1:00:
04:f6:a9:a1:46:b8:59:b2:4d:3e:bb:de:bf:3e:12:35:58:27:
f2:0d:21:ef:4c:8a:31:e7:a1:d5:d3:c6:6a:38:60:f8:62:49:
ba:11:59:70:94:d0:a2:f7:b5:3f:2f:b2:95:cc:5d:3b:8f:06:
eb:a0:38:ec:e6:23:0d:15:e4:d0:48:5d:4a:6d:c5:a9:72:98:
b0:92:68:23:49:86:08:85:30:12:2d:8b:6d:89:98:27:74:4c:
40:7c:8c:5e:45:0c:7e:5b:93:cc:6f:99:1e:9f:40:1f:56:84:
05:19:af:33:74:c6:64:cf:ad:c4:0e:be:75:7b:f5:71:e6:0b:
ef:4e:32:47:2b:ff:75:a5:30:08:a2:71:2a:14:c8:05:50:43:
c9:aa:c1:da:6d:18:b1:7a:3d:ff:4d:5c:a5:32:8a:ce:a3:75:
ef:0e:22:af:d3:11:99:b2:1f:ab:cb:ca:c9:8e:60:98:71:e6:
b8:a0:35:3b:ba:c7:3c:34:8b:3d:8b:8a:d6:92:23:95:41:0b:
01:20:c0:74:bc:28:59:96:64:1f:88:88:ab:2f:96:42:10:ec:
10:36:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:32 2026 by rpki-client