This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/VO0q4nWrfOStAkTKpUu6a9s4iXM.roa
File: VO0q4nWrfOStAkTKpUu6a9s4iXM.roa (raw, json)
Hash identifier: RO1KxuAMQb5sndGW2US++WYwHmd5hwNX7clvLvt34WI=
Subject key identifier: 54:ED:2A:E2:75:AB:7C:E4:AD:02:44:CA:A5:4B:BA:6B:DB:38:89:73
Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial: 019B7910E8824F871C5937E62977A3D104BF
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/VO0q4nWrfOStAkTKpUu6a9s4iXM.roa
Signing time: Thu 01 Jan 2026 10:18:29 +0000
ROA not before: Thu 01 Jan 2026 10:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21217
IP address blocks: 91.199.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:e8:82:4f:87:1c:59:37:e6:29:77:a3:d1:04:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Validity
Not Before: Jan 1 10:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54ed2ae275ab7ce4ad0244caa54bba6bdb388973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:eb:93:6d:71:2c:69:20:b2:27:6a:fb:b0:
02:d4:a0:69:48:e6:a4:f8:71:97:5b:f2:00:cd:17:
ba:dd:db:dd:2d:a4:86:8b:16:c3:aa:07:3e:0b:8b:
e9:21:e1:5d:c6:c6:1a:02:a8:1e:10:f5:9e:8f:5e:
a0:30:71:e3:88:51:ed:a6:5b:44:c4:56:49:d0:90:
3c:e6:12:d3:d6:29:82:b2:5c:2f:eb:f1:aa:da:f8:
22:48:6a:cb:57:80:c5:8f:7f:5f:4a:10:92:da:c9:
34:ca:65:86:7e:16:27:a3:3b:23:c7:53:58:74:bc:
f3:40:ac:dc:dc:0c:ef:24:3a:23:d0:b2:ce:d2:40:
14:80:db:cb:20:d1:92:24:3c:4b:86:7b:1a:c6:c1:
9a:5b:db:41:2e:88:b4:66:0d:ba:4b:ed:3a:15:1d:
d2:48:6f:f2:4b:bc:0e:e5:7a:32:ce:1d:ff:15:4b:
d8:1e:b2:a1:e5:eb:ba:ce:af:e9:4e:fa:5a:46:17:
24:ae:bf:0d:fa:54:97:9e:0a:68:29:f4:27:61:b5:
fe:7c:a4:7d:5d:31:57:2c:c4:9a:49:74:5c:57:e0:
08:9e:03:d9:35:cd:7b:ae:a5:37:36:c1:d1:e9:3c:
aa:7e:2a:95:66:2f:b4:d2:fa:32:b3:bb:1c:6d:e1:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:ED:2A:E2:75:AB:7C:E4:AD:02:44:CA:A5:4B:BA:6B:DB:38:89:73
X509v3 Authority Key Identifier:
keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/VO0q4nWrfOStAkTKpUu6a9s4iXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.255.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5e:53:77:d2:52:1f:c8:d1:72:ca:77:d8:3b:a8:8f:97:4c:
93:e3:10:65:57:a1:87:d4:38:60:8d:c7:ea:15:77:62:23:b4:
10:9a:0a:7f:03:55:2c:db:7e:a8:0b:d9:01:ed:26:67:0e:7e:
d4:b8:8e:f5:77:3b:e3:b9:b8:4d:33:76:93:4e:e8:4c:73:02:
6b:66:69:5c:68:5a:24:ed:3f:1c:ce:6b:6b:31:7d:0a:e5:a1:
89:75:86:be:bd:12:bb:df:d0:64:af:cd:28:e3:3f:c2:33:ba:
23:90:a8:7b:48:1f:d8:a7:a9:6e:fc:90:3d:e7:3d:82:91:4d:
0a:a6:c7:21:db:03:12:f5:78:81:1d:02:47:43:50:93:20:94:
70:a9:88:c2:91:6d:1e:d2:e1:67:81:66:b0:c3:ec:de:4a:84:
1c:f0:da:34:53:ba:a1:36:5d:c4:30:fa:f7:68:ea:85:d6:e4:
b3:c4:fe:3d:03:1a:27:18:9f:d1:be:0f:5b:18:f4:23:e1:f8:
a2:f4:22:dd:92:76:44:c4:46:43:68:dc:cb:3a:5e:3e:28:0f:
62:b9:ae:84:f1:c5:15:88:a2:f5:24:b3:65:bc:a1:da:bc:07:
b1:e6:be:2a:b9:fb:9a:ae:13:7d:75:00:24:98:59:48:64:9f:
b1:40:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 12:44:03 2026 by rpki-client