This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/VKWk86dF5L7_6h1qT-woRGMhtwc.roa
File: VKWk86dF5L7_6h1qT-woRGMhtwc.roa (raw, json)
Hash identifier: +fc4N1e1Y8Z1Wjjzpvdgqjoul4McJvf7VQNa3PnaDmk=
Subject key identifier: 54:A5:A4:F3:A7:45:E4:BE:FF:EA:1D:6A:4F:EC:28:44:63:21:B7:07
Certificate issuer: /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial: 019B775877AA53C18B00D2D38435542BBCB8
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/VKWk86dF5L7_6h1qT-woRGMhtwc.roa
Signing time: Thu 01 Jan 2026 02:17:24 +0000
ROA not before: Thu 01 Jan 2026 02:17:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56651
IP address blocks: 193.26.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:77:aa:53:c1:8b:00:d2:d3:84:35:54:2b:bc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Validity
Not Before: Jan 1 02:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54a5a4f3a745e4beffea1d6a4fec28446321b707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:4e:26:c5:85:e5:43:88:9a:ab:d5:6b:5c:
e7:67:c5:22:92:d6:20:8f:0f:d3:a2:4b:12:30:bd:
f9:55:6d:73:b9:4d:e5:48:b9:9c:cb:be:e9:50:99:
8f:2f:6d:97:d5:57:8a:52:af:d2:95:f3:9e:4a:f0:
3a:bd:6b:71:89:56:8a:64:06:9a:00:5f:73:ff:bd:
0c:bf:ca:aa:a2:5e:f3:65:37:00:0a:16:2b:92:07:
3e:d2:fc:97:75:93:df:52:33:33:67:c3:d2:d5:74:
b9:96:9d:51:2a:8b:c7:cc:b0:ec:2b:97:3c:8f:29:
67:66:6b:dc:ef:4e:92:66:ea:93:08:d7:71:e0:ad:
f3:4f:1f:21:0a:f8:60:c3:a4:bc:c2:d4:4d:66:29:
6c:d8:94:c9:52:36:fa:7a:49:ca:b3:3c:dc:47:79:
f2:0f:f7:35:70:8b:ca:cd:55:10:cb:e4:5f:90:7b:
b1:d7:b8:ab:32:6a:0b:b0:c9:a0:7a:7e:e2:49:1f:
9e:52:cb:26:50:50:af:ca:cb:12:eb:fb:df:dc:d5:
58:b5:f6:de:80:80:dc:9a:e2:0a:94:97:9b:26:68:
78:3a:26:13:af:cb:5a:63:b3:22:5b:27:df:fa:6c:
a1:66:0d:04:90:7a:b9:bd:50:c6:cc:61:33:51:e4:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A5:A4:F3:A7:45:E4:BE:FF:EA:1D:6A:4F:EC:28:44:63:21:B7:07
X509v3 Authority Key Identifier:
keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/VKWk86dF5L7_6h1qT-woRGMhtwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:24:80:13:9e:26:8a:73:77:1c:6b:7f:6f:62:c6:b0:08:f6:
00:1a:72:c9:b8:55:b6:aa:63:b9:a3:f3:7b:82:25:f4:28:10:
bb:c9:5b:ba:e7:83:56:3c:6e:12:16:3c:44:06:b2:6b:08:2e:
0a:f4:d7:ba:37:d4:4c:32:99:25:89:e6:cd:52:20:8b:3d:e5:
24:ef:13:62:50:c7:01:91:10:60:32:2e:17:10:f4:1d:62:50:
59:0f:ca:7a:9e:43:86:2d:2b:2c:41:14:0a:3d:bb:03:7e:b4:
ca:9c:3a:28:aa:9b:56:ba:26:a3:90:e0:aa:d0:16:0c:42:11:
f3:f4:62:ba:18:f7:b5:89:34:a7:ca:28:aa:2f:bc:35:55:89:
44:1d:e2:f4:ba:12:14:7a:8f:d6:a5:eb:91:54:ab:68:f7:bd:
7a:89:2c:a0:a4:15:2e:d7:14:75:33:49:be:e9:be:d4:bd:3f:
e8:d7:fd:ae:ba:8c:c9:6f:a9:24:d4:da:cb:6e:6e:7d:f9:70:
0e:04:56:45:44:9b:2d:cf:2a:21:68:c1:f2:f6:de:d3:63:ec:
b3:09:0a:7a:ef:a5:5e:47:e7:a3:4d:92:ba:a2:a2:34:a4:51:
5e:e9:54:da:08:c9:f7:82:7e:28:fe:0b:ca:fb:28:75:91:45:
1a:b1:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:23:33 2026 by rpki-client