This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa
File: VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa (raw, json)
Hash identifier: djTEy2SpZpwfwHAY9CNLF5jemLo53ls13ygOIxPg5rI=
Subject key identifier: 55:18:92:E6:87:D1:40:75:6E:0B:F9:40:73:17:61:54:FC:C9:E7:2B
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 019B79104AF887BF55286FB54533B54B43D0
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa
Signing time: Thu 01 Jan 2026 10:17:49 +0000
ROA not before: Thu 01 Jan 2026 10:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211492
IP address blocks: 5.8.249.0/24 maxlen: 24
2a06:f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:4a:f8:87:bf:55:28:6f:b5:45:33:b5:4b:43:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Jan 1 10:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=551892e687d140756e0bf94073176154fcc9e72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:44:24:32:01:4f:59:ce:ff:b1:7e:15:65:
cb:03:31:c1:31:18:a2:7e:d1:6d:75:c7:18:4e:2f:
32:50:0f:f7:da:72:6b:24:02:d7:98:72:4c:de:9c:
40:dd:64:ae:92:db:3a:f9:95:5b:b2:97:ea:01:23:
e2:0b:24:9b:7c:f5:e1:2e:96:ec:0c:49:a7:1c:be:
4f:6e:21:ed:b0:ba:e4:c6:88:ae:c2:ea:ce:3d:d0:
36:cc:c8:1c:5b:d7:fc:51:ee:a7:1a:18:64:08:34:
67:35:b4:05:8f:8f:a8:cc:c4:db:dd:a6:33:f1:6a:
20:3c:6b:95:26:d3:43:f5:f6:8e:a0:c9:60:a2:37:
0f:64:a6:20:09:2c:21:de:50:e8:27:cb:34:6c:48:
4f:56:2f:22:43:5e:e3:6e:4e:28:bc:60:86:65:44:
c7:b2:6d:77:16:34:ce:3c:25:4b:64:31:44:fd:6a:
84:a2:c6:8e:28:28:68:e9:cf:07:5a:ae:2b:d5:3c:
31:eb:af:aa:ba:6c:62:3f:c5:79:c4:f2:ef:40:85:
08:be:9c:e1:21:bf:57:66:af:18:c0:97:49:1c:0d:
0c:a1:d5:b8:c3:f2:25:09:93:95:73:e4:ee:90:7c:
7b:e2:7c:39:d3:2b:a3:19:b1:5a:ae:90:5b:34:87:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:92:E6:87:D1:40:75:6E:0B:F9:40:73:17:61:54:FC:C9:E7:2B
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/VRiS5ofRQHVuC_lAcxdhVPzJ5ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.249.0/24
IPv6:
2a06:f40::/29
Signature Algorithm: sha256WithRSAEncryption
92:54:fc:9c:6b:2e:71:62:90:f3:b6:d9:88:47:c7:c3:19:7c:
75:2e:b1:20:00:b4:b0:28:f0:0d:36:e3:50:a8:97:43:97:ff:
f1:57:dc:c4:fa:6e:2d:d7:67:1e:a3:69:8d:41:6f:d4:9f:65:
10:16:7c:50:4d:08:ff:b9:5a:e7:6d:04:d7:da:ab:ed:03:3b:
83:69:1a:0c:93:72:79:54:f2:94:50:ca:20:ef:e9:5d:bb:95:
3e:d5:be:a3:f0:1d:04:ff:34:41:9e:61:3b:ab:34:ca:26:3e:
70:5b:3e:e7:8e:e3:de:b8:93:48:73:f4:76:7c:bd:ab:c3:80:
b9:f4:66:b8:f2:8b:be:b3:74:bf:55:83:80:58:f0:7a:b7:97:
4d:e8:89:bc:4d:88:e9:59:bb:4c:b1:04:5b:b4:07:a1:96:52:
f7:44:c0:89:1f:b4:ad:36:bd:2e:42:e2:3c:26:b6:b6:38:1e:
bb:b9:6e:07:a6:a7:87:4a:44:2a:aa:4e:2d:d0:8f:cf:2d:55:
ca:ec:ce:4d:98:63:d1:60:f5:a3:ad:9c:67:ef:e6:63:d5:38:
0b:bf:36:8d:86:42:b1:51:1b:b0:33:a5:e3:68:d6:39:ae:ae:
8c:5f:97:81:ec:d2:ed:e7:fa:b0:ea:2e:5b:e4:c4:30:43:ad:
90:f6:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:42:40 2026 by rpki-client