This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa
File: VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (raw, json)
Hash identifier: nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=
Subject key identifier: 54:4F:CB:67:93:84:57:2E:CE:B6:2C:27:6A:43:5B:42:55:CE:53:1F
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 019B7F15D48480CFD223943D6EACF7B58822
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa
Signing time: Fri 02 Jan 2026 14:21:35 +0000
ROA not before: Fri 02 Jan 2026 14:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41291
IP address blocks: 37.157.56.0/23 maxlen: 23
62.244.78.0/24 maxlen: 24
62.244.79.0/24 maxlen: 24
62.244.108.0/23 maxlen: 23
62.244.110.0/24 maxlen: 24
62.244.116.0/24 maxlen: 24
62.244.118.0/24 maxlen: 24
62.244.124.0/22 maxlen: 24
93.190.208.0/21 maxlen: 24
185.102.176.0/23 maxlen: 23
185.102.176.0/24 maxlen: 24
185.102.177.0/24 maxlen: 24
185.102.178.0/23 maxlen: 23
185.102.178.0/24 maxlen: 24
185.102.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 07:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:d4:84:80:cf:d2:23:94:3d:6e:ac:f7:b5:88:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Jan 2 14:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=544fcb679384572eceb62c276a435b4255ce531f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:19:a6:1e:c4:29:74:43:5d:90:c2:4c:0f:
a4:17:06:32:84:f3:0c:db:d5:32:9b:2a:58:b7:2e:
ff:cb:75:7d:15:d0:fe:09:4f:ea:a2:23:f6:70:c2:
42:3e:67:d4:c7:26:0a:0f:47:0b:42:85:f4:28:de:
b8:79:d7:73:20:88:22:70:91:0b:a4:0c:9e:e1:1c:
41:2d:2b:a4:38:fa:72:7f:e2:16:ae:d1:26:53:e2:
1a:3b:35:7a:3a:a2:c9:d2:e5:08:c0:ed:8f:f2:31:
b7:73:84:27:16:2b:c5:b6:db:66:44:f7:7a:a6:b4:
18:3b:04:ce:03:64:67:29:4c:12:b3:82:71:a5:5a:
9c:5d:4f:9d:b1:59:16:3f:ad:f7:d1:96:bf:90:1c:
de:52:63:67:71:67:2f:43:be:9a:63:93:de:5f:c0:
3b:93:c1:dd:6f:97:c1:92:20:a1:8f:17:f7:2d:71:
cb:5f:fc:5b:d6:2f:13:67:b6:76:89:80:51:25:0a:
e7:99:8c:43:76:cf:67:9a:c4:1d:fe:ce:47:36:00:
76:34:6f:b8:45:3a:70:0b:22:e4:f2:07:75:b4:0c:
43:ff:f3:1a:30:95:e9:92:75:db:c1:75:10:65:af:
8b:9d:c3:e3:bd:6c:bc:55:d2:00:b5:09:c2:8b:de:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:CB:67:93:84:57:2E:CE:B6:2C:27:6A:43:5B:42:55:CE:53:1F
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.56.0/23
62.244.78.0/23
62.244.108.0-62.244.110.255
62.244.116.0/24
62.244.118.0/24
62.244.124.0/22
93.190.208.0/21
185.102.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:f0:85:84:24:c3:47:54:64:21:60:fe:24:d9:f7:e8:cf:83:
63:1c:f3:e2:03:12:3e:fa:f0:b2:c4:59:b7:af:0b:ec:e5:2f:
f6:b7:40:61:ef:d6:bc:a2:4d:d6:23:b4:b2:51:0e:59:21:a8:
0f:db:e2:20:9a:29:02:23:53:29:04:89:c8:70:77:b7:ab:fa:
3c:83:36:53:70:80:5d:2a:77:44:c3:5e:bb:1f:35:6e:9d:9b:
e6:4b:ea:f3:08:00:59:b4:17:84:ab:43:74:71:02:ca:0b:fd:
af:1c:73:ec:23:0e:0a:ba:74:1b:6b:fe:31:21:70:6e:2c:27:
f4:41:2c:c7:64:83:45:19:28:8d:03:39:88:89:95:51:36:df:
37:bb:b6:a4:1d:75:4e:42:2e:29:b2:5e:61:0a:36:23:f1:a5:
49:33:e0:df:37:47:d1:d8:31:3e:f0:4e:32:0d:4b:4d:7b:9d:
8a:48:88:73:74:6d:2a:69:75:f7:3c:27:46:13:18:99:c2:2c:
a0:f5:e8:1d:13:fd:3f:df:c0:2d:97:d2:35:e8:a0:f0:0b:43:
78:f8:f6:69:00:de:99:52:0c:e9:30:c0:c9:41:0e:de:2f:42:
5d:df:f9:a4:78:b1:0e:ee:73:06:e8:c0:52:34:d8:c5:c5:68:
1f:bc:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:45 2026 by rpki-client