This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/VJVJZRel1h4bnfOJmIjq-p-a_g4.roa
File: VJVJZRel1h4bnfOJmIjq-p-a_g4.roa (raw, json)
Hash identifier: j7HVMEXludxjPBYEzHSaKPHGAS3NLc0NX5UZDivjFgs=
Subject key identifier: 54:95:49:65:17:A5:D6:1E:1B:9D:F3:89:98:88:EA:FA:9F:9A:FE:0E
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 019B7C12ABAB9B7638A562D3B6B99873D30A
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/VJVJZRel1h4bnfOJmIjq-p-a_g4.roa
Signing time: Fri 02 Jan 2026 00:19:16 +0000
ROA not before: Fri 02 Jan 2026 00:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210649
IP address blocks: 37.140.249.0/24 maxlen: 24
193.38.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:ab:ab:9b:76:38:a5:62:d3:b6:b9:98:73:d3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jan 2 00:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5495496517a5d61e1b9df3899888eafa9f9afe0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:e2:9e:7a:b4:90:1f:75:97:14:96:11:21:
c4:dc:f7:f9:50:93:bc:4b:09:ab:a3:32:14:72:28:
c0:4a:cf:c1:fe:8c:80:1a:5b:7b:71:5e:aa:78:84:
b6:c4:ea:12:3c:9c:da:e5:64:39:02:20:d3:bc:54:
a7:e9:74:b6:ed:b9:39:ad:99:c5:26:68:fd:d7:42:
df:10:d2:bd:65:a4:df:0c:45:e3:65:ae:0d:d8:03:
15:25:1a:01:fb:a6:57:53:c2:f0:8c:29:01:d7:5d:
74:c5:a1:01:f7:7c:22:21:d6:92:41:38:4e:e3:02:
bd:ac:02:71:4c:2e:ca:f6:02:d6:81:15:1f:5b:f0:
d8:de:8e:60:2d:10:0e:33:7c:15:2e:db:98:60:c6:
8e:0a:bd:e1:5c:d8:d5:a4:2f:cd:25:65:e1:8d:ad:
54:08:ad:9f:2d:49:a2:a1:c0:0c:5d:aa:2d:ab:c2:
8e:23:77:26:56:3f:ce:04:4c:75:03:80:e1:cc:7c:
92:b3:6b:61:54:ee:35:ae:65:b0:2c:fa:68:b8:e8:
0c:9c:eb:87:74:2f:ff:05:7e:96:db:1e:13:48:79:
ef:a3:5b:f5:80:47:8d:1f:3e:c0:82:46:03:18:5e:
94:06:26:29:a0:24:4d:03:ad:65:43:dd:d2:f8:2d:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:95:49:65:17:A5:D6:1E:1B:9D:F3:89:98:88:EA:FA:9F:9A:FE:0E
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/VJVJZRel1h4bnfOJmIjq-p-a_g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.249.0/24
193.38.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:53:ce:05:ac:9a:3e:07:11:00:4e:c1:3a:bc:83:43:0e:04:
16:50:95:4d:ea:a7:bf:18:f2:2c:7e:8d:67:d2:63:92:7b:db:
2e:63:46:c2:66:51:61:82:71:d6:69:ef:eb:dd:10:09:26:14:
a3:a6:fa:84:08:62:5d:3d:ef:51:60:71:a1:60:69:fc:83:f3:
3d:fe:73:15:52:ae:7b:29:ad:5a:2b:4c:3c:dc:5b:5a:79:fb:
a1:bf:b0:f1:d3:ae:ff:fb:ae:12:aa:18:01:ac:b6:51:89:db:
55:3f:28:db:ac:c5:94:1c:dc:08:7a:07:4e:42:7c:e1:62:04:
fd:39:4b:7b:d3:d5:2d:c2:48:65:66:28:c0:7b:5d:26:59:6f:
de:da:61:98:8f:43:89:8d:f6:2f:97:00:46:fa:95:ae:4a:73:
8a:54:a2:36:de:80:11:0d:d8:47:b3:b8:b3:58:21:8e:be:63:
5f:64:aa:5a:53:f0:9d:28:6b:6b:d0:99:8e:73:72:76:da:46:
e2:fa:d6:c8:69:f1:7f:01:f6:2f:5f:37:cd:b2:42:a0:53:64:
c8:f1:3c:fe:f7:01:c1:fd:b2:43:da:84:0d:a4:d8:3a:0d:6d:
7a:27:4d:f7:94:86:0a:df:69:dd:83:98:98:e0:3f:a6:2e:00:
29:40:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:08:17 2026 by rpki-client