This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/VqhETU_HM_ISXJaoVb2Q85SiUFE.roa
File: VqhETU_HM_ISXJaoVb2Q85SiUFE.roa (raw, json)
Hash identifier: 4DN0T+VOF2hHbD9YtpgtWXAPNydWYghyCai8wce0SKM=
Subject key identifier: 56:A8:44:4D:4F:C7:33:F2:12:5C:96:A8:55:BD:90:F3:94:A2:50:51
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019B265E407AAF82AD7B65F79ADC43B17381
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/VqhETU_HM_ISXJaoVb2Q85SiUFE.roa
Signing time: Tue 16 Dec 2025 08:54:29 +0000
ROA not before: Tue 16 Dec 2025 08:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 193.219.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 01:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:26:5e:40:7a:af:82:ad:7b:65:f7:9a:dc:43:b1:73:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Dec 16 08:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56a8444d4fc733f2125c96a855bd90f394a25051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:0f:a9:a0:db:af:8d:e4:22:63:d5:46:43:
c6:3e:1c:6d:1d:1d:5b:d0:b2:e4:4f:71:91:90:38:
61:b5:ed:7e:ac:76:34:3e:8f:6f:57:27:85:3c:83:
b2:6f:1b:e9:14:5a:5d:23:e1:bd:b9:2c:4f:51:94:
bf:35:3b:18:a1:bd:4b:13:64:5f:db:c2:38:73:66:
55:c2:39:9b:a8:ac:8a:33:40:ba:2e:ab:3b:7f:22:
64:9d:fa:4e:94:cc:2f:21:0d:ba:8c:ac:c8:42:ea:
8c:34:6a:df:bd:0a:14:de:67:d1:7c:12:2a:50:14:
f5:74:d6:ef:3f:4e:b9:f3:1a:46:1e:83:5e:ce:26:
f0:da:40:10:9a:3b:5c:1f:14:73:cb:8d:d0:6f:f5:
4b:8d:10:f9:3a:bc:a0:06:b7:7b:99:83:06:c7:fe:
a9:ee:bb:c1:94:67:65:f3:be:38:e3:17:79:1e:3f:
73:2c:85:1c:3c:d0:90:8c:51:75:75:8d:07:3c:a2:
e3:29:30:27:e9:e5:d3:4b:96:27:e4:be:c8:44:9f:
26:58:50:c4:53:55:8b:90:c6:04:f2:ff:98:50:13:
20:ed:f6:0b:81:57:68:7e:18:ca:0f:c1:a3:b4:7e:
3b:82:a9:86:61:3f:3f:99:a7:1a:6a:68:e9:2c:02:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:44:4D:4F:C7:33:F2:12:5C:96:A8:55:BD:90:F3:94:A2:50:51
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/VqhETU_HM_ISXJaoVb2Q85SiUFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5c:3d:ce:d1:0d:65:f5:4a:ee:15:5b:26:0a:9a:d1:49:36:
4f:44:10:dd:69:b6:ff:8e:5d:a1:b4:23:78:c1:5f:76:7a:c6:
7d:b8:8e:87:ca:6f:dc:b7:34:65:fc:06:93:5b:dd:ea:fb:03:
68:31:64:7b:a6:29:95:e1:17:5e:bf:5c:42:ed:89:2b:4f:8c:
ab:2f:87:7f:9f:f4:b2:2a:d0:cd:91:2a:65:f6:ec:b2:5e:5d:
76:d0:c2:4f:6a:08:96:39:27:34:a7:fe:c0:9e:d8:b0:91:6f:
c4:11:b9:ee:6b:57:6d:eb:f4:cd:e1:98:e8:49:4e:14:78:66:
f0:5d:af:13:4f:df:80:44:55:46:e2:35:26:2c:a6:04:2f:9e:
02:80:09:a5:ac:91:4b:74:51:56:4f:fe:f1:4a:81:71:a5:11:
80:8b:dd:3a:0a:97:02:9e:6a:5b:13:4e:c1:4c:93:3c:dd:9e:
d2:34:28:51:ad:82:58:b0:c3:f1:bc:b8:97:40:2e:f8:ea:e1:
4c:44:cb:93:6d:18:8f:18:91:74:1a:31:6a:60:31:89:59:75:
29:80:0d:a3:89:bd:c9:9b:dd:c9:b6:51:73:cf:e4:28:cf:ea:
0b:5f:d0:d8:ec:fa:f3:f8:f9:11:7f:ef:af:d7:b3:22:5d:93:
93:0b:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:04:05 2025 by rpki-client