This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa
File: VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa (raw, json)
Hash identifier: q7NhUna+Yr8hoQULMRHTcRxkkh3p5fNlwvhMsBuSNTo=
Subject key identifier: 55:2C:24:27:41:93:6E:C6:72:1C:7B:84:C0:98:E4:E5:EC:8B:2D:5A
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019B7B36973C4E91C09F7DBC1FFE1FF22DD5
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa
Signing time: Thu 01 Jan 2026 20:18:53 +0000
ROA not before: Thu 01 Jan 2026 20:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12844
IP address blocks: 85.203.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:97:3c:4e:91:c0:9f:7d:bc:1f:fe:1f:f2:2d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Jan 1 20:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=552c242741936ec6721c7b84c098e4e5ec8b2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:f8:c1:8f:d3:a4:3c:03:bc:55:b2:4f:67:
f4:f2:3f:f1:77:77:35:03:0a:20:37:10:ee:17:c5:
a3:b7:00:23:67:79:cf:fe:db:f3:08:01:8b:cf:03:
21:bb:3c:56:ab:28:ff:33:3e:76:5c:ee:91:12:19:
16:53:c2:af:9f:00:9e:39:8c:f0:e4:c6:57:c5:d1:
43:c4:25:70:cc:2a:bd:5a:9c:c9:2a:45:12:38:9f:
e8:3d:37:7d:ec:e9:32:87:01:fe:6f:e8:c7:2e:c9:
f7:c4:4d:eb:e0:6a:89:54:78:04:7a:48:59:5c:2a:
7f:32:5b:5b:36:1d:23:a2:dc:e7:78:44:ca:3a:a3:
29:7e:cf:e4:7b:8b:ad:67:2e:67:df:7d:1e:0c:fb:
43:6f:ef:39:5a:3a:b6:88:48:9c:bd:2e:ed:69:7e:
10:68:73:02:ae:c4:fc:fd:7b:08:f9:d3:07:c6:68:
50:33:e2:00:b3:67:1f:e6:18:5a:fb:d5:a5:29:97:
73:48:35:31:68:5c:99:f5:ad:37:59:2c:7c:83:3d:
6e:d9:49:79:b7:8a:86:35:07:ec:f9:ed:53:7f:ab:
b3:2f:d7:a3:51:ae:82:38:48:0f:c7:6f:1c:8a:62:
bf:58:44:c6:c7:9b:06:38:90:1a:d7:bd:98:d6:cb:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2C:24:27:41:93:6E:C6:72:1C:7B:84:C0:98:E4:E5:EC:8B:2D:5A
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.32.0/24
Signature Algorithm: sha256WithRSAEncryption
43:37:fe:a0:f0:76:d0:1d:5e:06:be:77:6e:22:ad:80:9d:54:
6c:53:b1:b1:7c:da:b7:4a:9f:c4:f6:cb:92:00:a8:80:59:89:
ac:dd:ab:62:32:e7:6b:c9:8b:68:2c:b6:9a:ca:c4:35:c8:5a:
30:40:12:cf:0c:d2:9d:22:1f:3e:f5:47:12:43:a2:de:eb:b9:
89:cb:25:be:ec:ac:6f:81:db:4f:00:60:d0:c5:fb:6d:a3:ac:
ab:3c:c1:a2:b5:d5:ff:18:bd:6b:4b:13:2f:2d:21:5f:23:75:
17:f3:7f:4b:74:d1:06:b2:68:8a:2f:d1:d5:1e:e7:de:06:31:
f0:6c:3b:af:43:aa:a3:e1:ce:58:39:c8:06:c0:11:f6:4f:fe:
4f:3a:3e:89:f9:ee:81:25:be:4c:5c:c3:58:dd:34:b9:ff:1a:
6e:d9:e8:0c:0c:77:77:72:85:a1:b3:db:d5:bc:9d:27:76:e2:
6b:34:40:fb:5a:6c:ba:23:c0:e3:59:12:92:cf:4c:31:87:be:
96:c9:a7:bc:75:f3:c6:ac:ae:eb:db:2b:54:0f:a0:9c:73:98:
6e:48:24:f8:4a:cc:d1:29:4f:5e:59:0f:2b:5e:2f:ce:97:51:
ec:ad:33:a1:b9:c9:34:b3:b5:bb:aa:b9:41:77:a9:78:54:97:
e7:a6:bd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 23:50:15 2026 by rpki-client