This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/V-iqtypPqxyXIimSwNSMICX4_yc.roa
File: V-iqtypPqxyXIimSwNSMICX4_yc.roa (raw, json)
Hash identifier: 9qP4GMfzWZry9x0Ww/FVfCGvc27G3M28cDlCP2F//ws=
Subject key identifier: 57:E8:AA:B7:2A:4F:AB:1C:97:22:29:92:C0:D4:8C:20:25:F8:FF:27
Certificate issuer: /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial: 019B7EA72C4EA40324BA290A7070B3650D3B
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/V-iqtypPqxyXIimSwNSMICX4_yc.roa
Signing time: Fri 02 Jan 2026 12:20:43 +0000
ROA not before: Fri 02 Jan 2026 12:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 185.77.98.0/24 maxlen: 24
185.77.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:2c:4e:a4:03:24:ba:29:0a:70:70:b3:65:0d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Validity
Not Before: Jan 2 12:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57e8aab72a4fab1c97222992c0d48c2025f8ff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:87:4e:ce:56:27:db:22:c3:ee:ae:08:ce:
dc:66:77:36:50:34:fd:84:fc:a3:fe:cb:4e:86:5d:
31:c8:8f:53:a4:b4:b8:84:75:4a:24:5d:db:e9:b0:
b8:8e:32:68:7b:23:73:16:1e:03:ed:8d:a5:31:f2:
d4:38:b8:24:02:77:fa:94:74:70:33:60:45:d6:c4:
69:f2:ea:15:2e:f1:9b:f5:49:73:55:0e:21:7e:04:
f1:64:08:c3:30:a3:9a:b4:eb:03:8c:1f:1a:0c:a7:
ef:b7:ab:3c:2c:67:d3:18:64:83:67:67:bd:8b:cb:
31:00:95:5e:25:4e:6f:74:8e:79:f8:fb:5f:e6:0c:
15:03:33:fc:07:36:a2:f2:6f:aa:3c:e9:18:75:35:
10:f5:06:ae:f5:4a:16:30:d1:23:80:37:71:f2:b0:
38:7a:19:7b:18:82:ca:b8:ce:a7:b1:af:c2:8e:14:
de:d5:be:aa:25:af:9d:39:c1:78:bd:1a:e0:c1:2c:
32:68:5b:67:07:78:1c:81:83:32:16:3d:6b:5e:61:
0e:20:41:ef:6a:60:8e:86:a1:13:cb:34:57:f0:e9:
2f:f0:26:5a:14:50:41:a5:18:a6:65:79:39:18:ef:
db:35:87:00:ee:55:52:cd:72:ec:89:fb:62:40:cf:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:AA:B7:2A:4F:AB:1C:97:22:29:92:C0:D4:8C:20:25:F8:FF:27
X509v3 Authority Key Identifier:
keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/V-iqtypPqxyXIimSwNSMICX4_yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.98.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:90:7c:b3:f5:a8:a4:36:91:9e:ed:d9:cc:f7:8c:84:9e:b3:
23:9a:62:18:3a:07:2e:01:7e:4e:de:00:df:1b:5c:50:5d:40:
46:e1:f3:d4:e9:f5:df:e4:49:17:3f:91:dd:75:f9:2b:a6:18:
66:c9:48:6e:6c:23:35:70:e3:e5:7e:da:60:5c:27:4b:42:47:
60:95:ad:5c:dd:ac:ec:f2:cc:52:c9:65:59:24:27:24:21:c7:
b1:dc:ad:2f:86:bf:13:5f:33:2a:87:d2:11:df:4f:14:1a:8c:
33:04:72:9d:8f:7e:cb:9e:1d:24:6c:95:6e:6a:e0:4b:73:bb:
5b:df:b2:ef:1f:64:8b:2a:af:7b:f1:6f:62:db:c5:ac:22:e9:
12:13:96:0f:bd:df:0b:39:02:75:2e:c2:a5:85:7f:ce:c6:9b:
6a:aa:06:f3:ff:67:18:c6:3b:92:8c:10:71:39:41:59:bc:c1:
a7:2b:42:1d:0e:b4:77:a0:c4:9a:c4:f2:b6:a7:cb:b0:94:0a:
bc:24:04:bc:b5:7c:bb:0a:2a:97:e2:9d:51:25:7e:fe:d6:d4:
2d:1d:df:54:bd:3b:8a:7e:31:b0:ff:f9:47:ed:56:90:56:14:
8f:2e:5d:dd:d8:b1:6a:c8:32:b8:da:86:a5:44:7f:3f:bb:16:
3c:84:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:20:50 2026 by rpki-client