This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/vgtVr70kHPIfAxYDvnSk95pwEEc.roa
File: vgtVr70kHPIfAxYDvnSk95pwEEc.roa (raw, json)
Hash identifier: 89W5k6eZxucvQF9QfxUPssd3/Izg32hrnMQ2Jj8vRdM=
Subject key identifier: BE:0B:55:AF:BD:24:1C:F2:1F:03:16:03:BE:74:A4:F7:9A:70:10:47
Certificate issuer: /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial: 019B7F8425D62B040F6242C4EAAE9DE01CF6
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/vgtVr70kHPIfAxYDvnSk95pwEEc.roa
Signing time: Fri 02 Jan 2026 16:22:05 +0000
ROA not before: Fri 02 Jan 2026 16:22:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203187
IP address blocks: 185.82.80.0/22 maxlen: 24
185.238.124.0/22 maxlen: 24
2a05:8e00::/29 maxlen: 48
2a0c:2e80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:25:d6:2b:04:0f:62:42:c4:ea:ae:9d:e0:1c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Validity
Not Before: Jan 2 16:22:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be0b55afbd241cf21f031603be74a4f79a701047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:d2:e8:34:06:72:9c:09:84:86:f1:d1:57:
fb:84:be:9c:ee:09:d7:8a:08:08:35:4d:ce:25:3a:
66:b5:fd:14:39:23:3d:25:db:98:d1:14:9f:70:d5:
a1:5f:e0:29:cc:ca:e0:b2:11:88:09:ec:2d:a3:91:
d7:7d:33:d6:97:5b:06:5c:5a:5c:c5:07:b8:ab:68:
14:da:14:77:55:30:43:0a:64:5a:9d:5c:b3:36:01:
a8:47:0a:98:71:dc:ed:5a:89:6b:b5:f4:5d:b8:3d:
b9:a6:24:0f:30:bf:c5:34:3b:54:d5:cf:44:0b:65:
91:38:2e:cb:6c:cc:d8:6d:58:f0:3d:7a:15:ab:5c:
df:62:40:31:7d:ca:f3:00:a4:93:36:cc:d7:13:9e:
69:47:88:f6:97:f7:6c:23:9b:b1:58:77:c7:27:73:
09:6e:ee:cb:aa:f8:c7:2d:ae:76:93:2d:91:33:bb:
07:29:19:80:9e:70:8a:99:e7:8f:e0:bc:75:ec:fb:
d9:3d:c0:1f:20:b1:77:c5:43:a8:db:6d:4f:f2:84:
5f:7d:6f:e1:16:0c:32:b3:32:bf:95:c4:ae:89:cc:
bc:c3:ab:c6:ed:04:01:24:b7:53:94:7b:54:69:24:
20:79:c0:a7:25:7a:84:33:24:10:a7:ed:ba:5f:55:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0B:55:AF:BD:24:1C:F2:1F:03:16:03:BE:74:A4:F7:9A:70:10:47
X509v3 Authority Key Identifier:
keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/vgtVr70kHPIfAxYDvnSk95pwEEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.80.0/22
185.238.124.0/22
IPv6:
2a05:8e00::/29
2a0c:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
61:4c:33:b1:ce:51:d9:10:99:ee:f5:fd:07:38:47:25:48:da:
8a:6c:94:23:f2:39:86:fd:67:fe:53:95:dd:30:b9:bb:1f:34:
55:2c:2e:b4:f2:cf:73:90:80:5c:9c:ac:61:21:7a:6d:51:4a:
2a:df:3c:61:db:17:21:b6:c6:b7:b8:d1:6f:5d:fe:9a:a3:10:
32:84:30:15:2c:fc:7c:93:cb:da:04:0c:25:27:13:99:bf:c7:
79:52:30:82:65:8a:92:3f:6e:e8:ff:f3:08:2b:37:79:a7:eb:
68:01:02:3f:9a:cd:31:b7:ce:4d:1a:a3:9f:74:71:de:37:a3:
3f:8a:96:90:fc:bb:38:db:58:75:85:58:ae:ad:e3:ea:da:ea:
7a:d7:4c:da:59:7e:d1:51:17:0d:fc:c9:d0:62:47:ac:d2:ef:
71:71:54:17:b3:56:aa:bc:f2:8c:70:74:14:db:76:28:d7:e4:
d3:dc:bd:80:47:5d:8b:5a:be:59:39:e6:45:3b:25:a6:5d:5f:
c3:e2:21:96:a0:c8:a8:af:e0:d9:66:69:eb:18:e2:61:01:19:
1c:99:9d:9e:10:18:77:97:8c:06:6b:21:fc:5b:21:e6:e3:10:
d8:32:ee:79:76:e6:aa:a5:95:96:ab:aa:49:f4:55:b9:5c:02:
58:9b:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:15 2026 by rpki-client