This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vGej0fDOJP4AjI6wQAyYlGa21BY.roa
File: vGej0fDOJP4AjI6wQAyYlGa21BY.roa (raw, json)
Hash identifier: USpLIQgP3uIFevIT6u5l8qVwVi2DUSQn3itCiSRZaQU=
Subject key identifier: BC:67:A3:D1:F0:CE:24:FE:00:8C:8E:B0:40:0C:98:94:66:B6:D4:16
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019B7910C9709D0681E5756744D2ED823182
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vGej0fDOJP4AjI6wQAyYlGa21BY.roa
Signing time: Thu 01 Jan 2026 10:18:21 +0000
ROA not before: Thu 01 Jan 2026 10:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216255
IP address blocks: 2a12:bec0:470::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:c9:70:9d:06:81:e5:75:67:44:d2:ed:82:31:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 10:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc67a3d1f0ce24fe008c8eb0400c989466b6d416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:cf:f9:01:47:9c:dd:f3:48:3f:09:16:4f:
ac:eb:f3:0d:d7:5c:c9:ad:3d:24:74:7e:e0:a4:bb:
66:05:c0:73:e9:16:5f:19:87:e8:17:88:ab:84:9e:
df:29:2c:eb:04:2d:61:4f:8e:4e:06:6b:b5:a5:0c:
49:91:b3:13:89:e1:2e:3f:10:22:eb:08:49:95:4f:
8b:6c:e7:e1:7e:25:9a:e6:f9:b8:bd:52:a5:0b:20:
bf:89:92:82:eb:89:5f:8d:55:ee:2a:09:ab:b6:0e:
92:ac:e5:e5:f7:8a:7d:63:0b:6b:5b:1f:c1:1c:35:
b7:30:e8:ae:86:44:06:92:21:d9:30:dd:81:b1:79:
bc:71:b1:75:c1:7a:20:6a:9c:49:8c:d2:dc:68:b1:
a7:a8:fb:f9:a4:92:72:a0:42:c3:01:18:3b:09:f0:
5f:65:92:49:23:2d:f8:46:e2:23:79:8f:22:71:f9:
c4:64:15:31:71:4d:69:8e:90:77:9e:f4:41:f3:e4:
33:a1:23:a5:c2:9d:22:47:a9:90:e3:15:4e:66:d8:
ad:df:fb:af:11:dd:4b:b2:a7:4e:32:17:84:e3:a0:
ec:cb:45:1f:47:b9:e6:09:d6:5f:ae:ae:a5:11:3a:
41:c3:24:76:59:3e:54:e5:2f:4f:8c:1d:33:9b:68:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:A3:D1:F0:CE:24:FE:00:8C:8E:B0:40:0C:98:94:66:B6:D4:16
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vGej0fDOJP4AjI6wQAyYlGa21BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:470::/44
Signature Algorithm: sha256WithRSAEncryption
84:e1:55:f0:90:02:f4:c2:8f:33:cb:c9:e0:46:99:99:60:e8:
2d:a4:70:23:c3:e0:5c:53:cc:74:f3:18:7a:f5:a4:39:19:09:
b4:19:ad:a3:dd:20:1b:db:0f:78:aa:6e:91:00:f5:b7:24:f4:
e6:f6:db:ac:15:73:81:eb:23:c4:a6:28:e4:7c:44:27:29:13:
9a:06:01:ed:58:61:3d:61:c5:2a:5b:f7:f2:c3:4e:66:54:1f:
75:19:ac:3e:b2:79:5e:89:69:a2:01:51:d3:22:03:e1:c7:9b:
61:4a:32:bc:d1:ca:5b:ec:8a:ca:54:7c:45:cf:c6:dc:6b:25:
e1:90:5b:ad:30:31:6d:6a:5d:d4:43:98:2e:27:2b:37:85:94:
b2:ab:18:9c:08:db:bb:4e:a2:e7:e8:e7:0a:8b:a8:97:da:99:
48:b6:64:3b:56:0a:fd:f1:27:16:53:c2:14:12:b6:21:b7:66:
16:c1:4f:82:55:ba:1f:3b:ee:c0:f9:27:ca:b4:9e:fe:70:67:
a3:bd:a8:2e:6e:e3:d2:c6:89:4f:7c:8c:7f:a7:3b:35:21:1b:
66:d1:51:e1:da:45:32:c9:94:19:b0:40:7b:66:9a:9c:7f:2f:
07:d4:ae:7e:a0:21:35:c1:7c:0e:8e:e3:02:fc:2a:19:92:14:
3e:91:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:28:52 2026 by rpki-client