This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/vvIOu90M6kEZ71mN06u0tYK02eU.roa
File: vvIOu90M6kEZ71mN06u0tYK02eU.roa (raw, json)
Hash identifier: rr9r1oYZxg4M15XzRNVPfU9mZGnGg57yCNPY5TXNgYg=
Subject key identifier: BE:F2:0E:BB:DD:0C:EA:41:19:EF:59:8D:D3:AB:B4:B5:82:B4:D9:E5
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019B7834F3737DB74AB72ECD06F59567C2BD
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/vvIOu90M6kEZ71mN06u0tYK02eU.roa
Signing time: Thu 01 Jan 2026 06:18:14 +0000
ROA not before: Thu 01 Jan 2026 06:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48455
IP address blocks: 195.162.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:f3:73:7d:b7:4a:b7:2e:cd:06:f5:95:67:c2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Jan 1 06:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bef20ebbdd0cea4119ef598dd3abb4b582b4d9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:6b:1d:7a:0b:58:6a:6f:8d:32:e1:20:ee:
d4:a5:56:27:06:b6:16:3c:fe:30:9a:b3:e3:be:7a:
f9:9b:e3:d6:d7:08:ae:3d:84:5b:a6:50:45:f8:24:
0c:80:10:8a:c3:3d:a2:4b:16:37:f8:55:e7:69:7d:
73:dd:95:8a:cc:73:61:58:54:f7:c3:a7:6f:e2:80:
83:5a:ef:64:cb:28:3f:b8:74:8f:ea:72:b3:84:29:
e0:9e:f4:d5:ce:c1:71:d5:5b:04:6b:25:7f:31:fa:
63:b5:14:0b:4b:85:de:67:10:15:80:79:08:bd:78:
eb:85:78:df:9e:eb:d8:eb:c2:b3:4f:74:65:d1:73:
c9:bb:ae:2e:24:b3:54:82:b8:e1:2e:89:74:b4:77:
1c:00:21:af:bf:df:fe:fb:1c:9e:3b:76:1f:1c:e9:
b2:8b:93:e8:31:28:e4:d9:11:51:85:4a:dd:c3:55:
be:bc:a0:7e:8d:5b:20:19:70:b2:b1:2b:67:bd:37:
c4:dd:18:8f:81:28:82:7d:f2:a8:b6:a9:0e:7f:66:
79:64:ec:0a:4a:cb:66:1d:38:b5:b3:38:a8:e6:c6:
75:32:f3:48:a7:f0:2c:61:99:93:0c:8f:ef:9a:87:
ed:fc:56:2e:9d:32:2f:4a:5b:88:29:7e:27:b5:aa:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:0E:BB:DD:0C:EA:41:19:EF:59:8D:D3:AB:B4:B5:82:B4:D9:E5
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/vvIOu90M6kEZ71mN06u0tYK02eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:1e:13:e8:c4:69:8c:87:2d:84:1d:86:e1:ea:61:5a:ce:18:
b0:5d:21:65:df:61:83:d1:f0:ac:0f:5a:d7:b7:c2:52:6c:ed:
ea:03:e9:ec:93:a1:3f:26:d6:3e:5a:cc:32:fa:1e:b9:cd:07:
62:fd:cf:6d:aa:38:b1:2c:c0:ba:a0:05:a0:2a:0e:90:42:07:
b6:9a:f2:99:c0:2d:14:ba:a5:c0:40:2f:07:de:7e:24:ac:d9:
e6:4f:2b:6e:25:57:c1:06:b6:68:2e:1d:27:56:27:d2:a0:c6:
28:a1:4d:9a:57:0a:8f:55:4a:36:a5:18:9a:55:70:e6:e4:89:
74:a9:be:67:07:d5:b5:09:03:a8:24:60:58:41:ad:fd:2f:2f:
2d:d1:83:0d:70:9f:f6:b7:fd:f8:00:d9:63:a1:18:47:f8:19:
b6:20:db:84:3c:fb:05:62:60:b7:df:3f:65:6e:5a:0f:93:ce:
41:92:9c:10:ef:1b:fd:0f:27:37:62:fc:49:fb:6a:97:40:64:
c7:80:63:a4:7e:09:e8:51:3b:af:52:d7:45:6e:21:e4:74:21:
0a:a8:61:08:2b:11:91:c3:f4:3b:f2:39:35:e5:af:d1:a5:15:
6c:5a:fe:a5:d4:e2:14:5a:5d:66:ad:30:5b:b5:9c:c3:e2:8e:
10:c4:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:20 2026 by rpki-client