This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/V7bJldrOAC9AMnsBmLTIjKty43o.roa
File: V7bJldrOAC9AMnsBmLTIjKty43o.roa (raw, json)
Hash identifier: WOizHLdOu1fR+MAOiOCP8R1TI24LkdNXvt93DZ1xalw=
Subject key identifier: 57:B6:C9:95:DA:CE:00:2F:40:32:7B:01:98:B4:C8:8C:AB:72:E3:7A
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019B79103723AD4BFF1B0FE963C36F0C8D65
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/V7bJldrOAC9AMnsBmLTIjKty43o.roa
Signing time: Thu 01 Jan 2026 10:17:44 +0000
ROA not before: Thu 01 Jan 2026 10:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 213.182.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:37:23:ad:4b:ff:1b:0f:e9:63:c3:6f:0c:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 1 10:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57b6c995dace002f40327b0198b4c88cab72e37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:3d:90:e5:79:b3:54:d3:2b:78:3f:5d:52:
e7:e5:0e:04:98:3f:ab:9b:84:77:cc:74:96:98:49:
a8:33:4b:09:60:b4:a5:4a:f6:9e:6a:ee:7d:f6:a3:
09:13:0d:bd:f9:8e:ce:12:21:1c:62:c8:26:cc:76:
65:d9:d9:35:aa:62:b3:f3:0a:ef:3b:bd:50:5b:e9:
7a:27:67:39:f3:82:f7:18:b8:9e:d7:c9:bd:8d:26:
1f:56:11:63:c4:d9:08:0c:67:c8:69:db:0e:dd:90:
24:41:b6:60:7c:0d:85:74:ba:58:9c:6b:16:61:e7:
3c:6d:2e:c0:bf:f0:08:2c:8e:3a:40:fc:01:e6:d5:
86:ad:65:70:f5:e1:82:94:f3:b9:f4:22:cd:94:9a:
10:2a:4e:68:f0:26:66:97:93:ae:6c:a8:80:44:ac:
d3:1a:54:5f:33:27:7d:3f:89:91:47:8a:01:0b:4a:
d8:61:92:73:6b:1b:ce:bb:5d:ed:bd:42:49:01:52:
ac:52:52:cb:a2:53:1b:f1:f5:93:d1:58:fe:84:93:
55:da:7f:bf:54:3c:34:82:07:49:cb:d1:59:c5:d0:
4f:7f:c8:30:21:8e:aa:68:43:5a:58:71:72:7c:65:
42:86:9d:a5:3a:b0:28:2c:de:57:2d:6d:d3:63:65:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:C9:95:DA:CE:00:2F:40:32:7B:01:98:B4:C8:8C:AB:72:E3:7A
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/V7bJldrOAC9AMnsBmLTIjKty43o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:86:3c:f0:2c:6b:a4:d3:92:fc:c3:7d:95:25:c8:c3:29:f7:
82:6a:f5:eb:8a:0f:03:f1:d9:d6:b7:ae:c5:9a:d9:ad:d1:d2:
e4:4e:4e:a8:5f:08:95:e5:35:d6:61:36:49:a7:eb:00:fc:7e:
0e:a5:ca:16:fc:77:95:b7:b3:13:9e:94:28:e0:22:c5:4c:44:
f9:33:0e:80:6d:f0:2d:ca:47:37:6e:78:b8:d8:f3:66:f3:9b:
b3:6a:00:41:c1:4a:43:77:1d:2a:a6:2f:af:7d:4a:4a:97:cd:
40:ca:6e:43:a8:c2:6a:7e:a4:a2:8b:14:f2:5d:5c:c2:32:e8:
c4:9a:cd:55:6f:d1:a2:83:b8:24:ab:8e:8f:9d:31:88:7e:ff:
e8:13:a0:e2:48:04:94:79:26:5b:f5:15:f8:ed:50:19:32:20:
48:36:5e:dc:03:84:6f:d3:72:a1:b1:33:f4:fb:60:bc:1e:b5:
77:5c:cd:aa:01:88:4d:c4:b9:cc:86:ab:0b:8f:d3:da:ca:fa:
79:84:67:7e:09:34:b4:37:e2:e1:74:3b:f3:d0:32:32:d5:5f:
95:7b:20:37:2a:ff:fb:9c:db:5e:6c:e6:dc:4c:fa:e1:d5:58:
01:28:b0:47:f5:02:ee:f7:68:73:47:13:4c:9e:8e:71:ac:46:
4e:ff:8a:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EDcjrUv/Gw/pY8NvDI1lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2I2Yzk5NWRhY2UwMDJmNDAzMjdiMDE5OGI0Yzg4Y2FiNzJlMzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoso9kOV5s1TTK3g/XVLn5Q4EmD+r
m4R3zHSWmEmoM0sJYLSlSvaeau599qMJEw29+Y7OEiEcYsgmzHZl2dk1qmKz8wrv
O71QW+l6J2c584L3GLie18m9jSYfVhFjxNkIDGfIadsO3ZAkQbZgfA2FdLpYnGsW
Yec8bS7Av/AILI46QPwB5tWGrWVw9eGClPO59CLNlJoQKk5o8CZml5OubKiARKzT
GlRfMyd9P4mRR4oBC0rYYZJzaxvOu13tvUJJAVKsUlLLolMb8fWT0Vj+hJNV2n+/
VDw0ggdJy9FZxdBPf8gwIY6qaENaWHFyfGVChp2lOrAoLN5XLW3TY2W2mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFe2yZXazgAvQDJ7AZi0yIyrcuN6MB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvVjdiSmxkck9BQzlBTW5zQm1MVElqS3R5NDNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bbSMA0G
CSqGSIb3DQEBCwUAA4IBAQB8hjzwLGuk05L8w32VJcjDKfeCavXrig8D8dnWt67F
mtmt0dLkTk6oXwiV5TXWYTZJp+sA/H4OpcoW/HeVt7MTnpQo4CLFTET5Mw6AbfAt
ykc3bni42PNm85uzagBBwUpDdx0qpi+vfUpKl81Aym5DqMJqfqSiixTyXVzCMujE
ms1Vb9Gig7gkq46PnTGIfv/oE6DiSASUeSZb9RX47VAZMiBINl7cA4Rv03KhsTP0
+2C8HrV3XM2qAYhNxLnMhqsLj9Payvp5hGd+CTS0N+LhdDvz0DIy1V+VeyA3Kv/7
nNtebObcTPrh1VgBKLBH9QLu92hzRxNMno5xrEZO/4r2
-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:18 2026 by rpki-client