This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/vYJipEt__NYvmPqT8J0-vmljydE.roa
File: vYJipEt__NYvmPqT8J0-vmljydE.roa (raw, json)
Hash identifier: xICOTeDyqcgtBhQlPEYdz0O2VGAqMM4d5syKeJc/PnQ=
Subject key identifier: BD:82:62:A4:4B:7F:FC:D6:2F:98:FA:93:F0:9D:3E:BE:69:63:C9:D1
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019B7CECC4E6D923224F2437A87B9AFC9AB1
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/vYJipEt__NYvmPqT8J0-vmljydE.roa
Signing time: Fri 02 Jan 2026 04:17:30 +0000
ROA not before: Fri 02 Jan 2026 04:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60933
IP address blocks: 185.23.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:c4:e6:d9:23:22:4f:24:37:a8:7b:9a:fc:9a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Jan 2 04:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd8262a44b7ffcd62f98fa93f09d3ebe6963c9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:f8:86:91:a3:07:db:30:fb:d6:a4:7a:03:
68:c9:d0:54:47:50:3d:28:91:ed:33:42:62:9c:c1:
de:9e:04:3e:5a:e8:0b:cc:8b:c5:e4:81:ee:8d:27:
a6:cf:b2:57:d5:9b:2e:c4:29:94:a6:9a:d3:b1:10:
0e:b2:fb:7a:47:00:c5:ba:8e:6a:96:90:9a:15:5e:
1b:b0:56:4f:22:05:f7:81:e5:5f:c8:da:a6:dc:bf:
06:48:1c:e3:c8:51:54:2f:81:c6:6b:96:8b:1b:42:
1a:05:4c:67:8c:c6:f8:76:51:75:35:1d:f5:47:3b:
48:a7:96:2c:5c:5c:0c:80:34:45:2d:e8:6c:7c:12:
2e:9e:40:89:b3:ef:39:4d:20:fa:42:09:81:fd:28:
be:e9:1d:4f:1b:ab:9c:08:83:cf:9e:ba:d2:16:81:
f3:d1:20:e8:e5:c8:09:e6:46:b1:ba:dc:cc:9d:6a:
22:01:ae:3f:b6:53:f3:e0:ef:d6:95:1c:ec:07:4b:
57:fc:08:e7:c4:4b:b4:cb:b1:30:89:3d:e8:c0:eb:
a9:9c:42:68:e8:0a:d6:f5:cf:7d:a3:31:a4:c8:dc:
3a:4f:4e:6b:9e:34:a2:37:3c:37:2c:88:9a:4b:00:
80:b4:77:a0:86:d0:f7:d0:1e:ab:42:96:8c:b3:77:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:82:62:A4:4B:7F:FC:D6:2F:98:FA:93:F0:9D:3E:BE:69:63:C9:D1
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/vYJipEt__NYvmPqT8J0-vmljydE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.60.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ea:bf:56:55:2f:6f:e8:44:be:49:41:1a:77:7c:bd:e4:89:
31:bc:e3:42:77:96:69:0a:11:cb:e6:ce:fa:fd:24:80:f3:1e:
89:9b:7e:20:ea:a7:43:39:f3:42:4b:f5:d0:62:9b:9f:e5:38:
e7:2f:62:62:22:05:d3:c2:7f:f8:c2:e2:af:84:4d:23:d2:fd:
fe:d8:77:2a:53:a2:3a:b0:ac:dd:24:9e:d3:51:04:c1:87:20:
f0:b6:b1:03:a1:cd:12:88:31:ba:a6:2e:30:84:46:b2:0f:78:
fa:37:35:1a:36:72:0b:31:97:aa:7d:e7:2b:e3:8f:eb:e9:76:
fc:e6:30:a6:3c:b6:fe:71:2f:38:c7:d7:30:43:00:e3:4e:ba:
3d:ab:ce:77:c0:7f:56:ee:ab:06:54:b9:d8:70:3f:69:fd:48:
6a:c8:22:50:de:8b:08:b5:98:cc:4c:e2:af:3f:3f:db:f3:bd:
da:e3:dc:87:8c:ca:d9:87:da:58:91:4a:dc:d0:a1:11:8d:6f:
4d:d3:69:62:44:52:b2:8f:8b:28:e0:aa:ab:02:ef:3a:3e:6d:
7b:af:51:e9:41:cc:09:f4:6f:4a:72:98:35:ed:c6:be:6f:03:
47:cf:62:ee:67:f7:cd:42:47:db:a2:a1:f7:39:6e:b6:1a:e1:
ab:50:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:59 2026 by rpki-client