This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VoF9v1XiSr_rQMfnhMts-g0zPs8.roa
File: VoF9v1XiSr_rQMfnhMts-g0zPs8.roa (raw, json)
Hash identifier: uh5eta+PhwnnFZ9GRegVTDVcEFAjT6YxlNeBtiVkpdU=
Subject key identifier: 56:81:7D:BF:55:E2:4A:BF:EB:40:C7:E7:84:CB:6C:FA:0D:33:3E:CF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB3C7396749330FCEC98D109847F1A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VoF9v1XiSr_rQMfnhMts-g0zPs8.roa
Signing time: Fri 02 Jan 2026 08:20:29 +0000
ROA not before: Fri 02 Jan 2026 08:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56594
IP address blocks: 151.242.43.0/24 maxlen: 24
151.242.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:3c:73:96:74:93:30:fc:ec:98:d1:09:84:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56817dbf55e24abfeb40c7e784cb6cfa0d333ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:94:93:6e:f6:91:61:31:7d:ae:8d:4a:5c:
e8:ce:bc:e5:32:29:dc:94:bd:7c:0c:04:43:e6:0e:
07:2c:9b:57:7c:13:77:0a:72:7f:ab:ce:83:d2:d0:
da:f1:e4:a7:1b:d9:65:d2:2a:ec:d3:be:90:20:bb:
89:e6:17:4d:db:92:b1:15:a6:50:82:1c:e5:79:99:
82:ae:9a:5e:46:7e:6b:7c:e1:ba:35:a5:13:bd:d1:
ba:df:39:2f:38:4b:74:61:36:9a:35:d9:17:70:1f:
2e:87:0c:ac:92:68:d8:5f:48:f1:92:93:46:28:e5:
38:8d:3b:57:39:52:eb:9b:84:aa:6d:73:56:34:dc:
76:7c:05:0b:7a:0d:35:18:e8:af:f3:a1:c9:0e:bb:
2a:21:41:20:e1:1a:50:09:c8:36:88:f7:1a:f0:be:
43:cc:ff:63:58:4f:2f:45:e5:c1:b4:ed:ab:bc:bd:
d5:56:81:24:a1:13:7b:56:a6:d4:48:55:71:94:39:
c1:a7:b7:ce:c0:16:2a:33:ec:87:2b:c0:19:a8:c9:
31:d9:67:4e:65:10:4c:35:07:ab:f4:ea:3a:0b:3a:
c9:72:5e:d6:ca:a4:c8:1f:af:54:e1:31:f8:ee:26:
11:49:9b:04:69:64:74:c6:35:35:e0:da:84:27:6a:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:7D:BF:55:E2:4A:BF:EB:40:C7:E7:84:CB:6C:FA:0D:33:3E:CF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VoF9v1XiSr_rQMfnhMts-g0zPs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.43.0/24
151.242.69.0/24
Signature Algorithm: sha256WithRSAEncryption
97:00:ec:a0:a5:7e:88:86:51:8b:a6:63:25:58:81:a5:b0:97:
ef:70:ea:91:d8:2f:a8:97:ff:db:dd:bc:5e:8d:ea:2a:57:51:
4b:05:eb:d3:ac:66:c9:d3:61:cf:24:e6:b0:ed:e5:ed:ea:78:
9b:b9:ef:1f:c7:e0:61:42:13:51:30:59:b5:be:f9:13:b9:13:
b1:f0:f2:95:cc:66:e3:eb:78:68:dd:a4:1a:81:b1:14:5b:30:
e9:da:ae:48:ef:5f:dc:11:cb:4b:35:eb:91:4c:0d:eb:96:a8:
ca:24:71:dd:55:bf:ef:cc:07:0c:d3:cc:f9:30:7a:33:a6:9f:
51:60:71:60:29:dc:02:e9:f1:20:d2:7b:a4:91:a0:df:ab:75:
0e:00:7a:a3:8e:c4:86:f7:f8:aa:96:59:68:3c:b2:71:53:52:
7a:bd:be:e1:de:c8:1d:0c:04:ef:21:77:72:25:61:d2:3b:33:
b6:6a:dc:be:91:87:a7:81:1d:94:f7:4d:0f:a1:a2:68:a5:2c:
d6:8f:e6:99:1c:71:60:f3:24:4a:93:76:5f:a7:ec:0c:2a:db:
4e:40:6f:af:de:57:67:a0:30:03:ee:82:3b:19:bc:31:c7:da:
f6:e4:f6:4a:f7:7c:7e:59:1d:02:d2:34:14:ab:46:9e:8c:61:
6d:38:09:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:31:06 2026 by rpki-client