This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa
File: vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa (raw, json)
Hash identifier: CpHPotO66LaiTXBrpXnTFyDFuhRN5pLaJobhuRza6R4=
Subject key identifier: BD:D5:08:B0:31:C6:0C:D6:CB:3B:12:F4:2F:2E:38:D3:A1:9E:62:F4
Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial: 019B7A5B5B3C9433097270EE3765D354F9C3
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa
Signing time: Thu 01 Jan 2026 16:19:25 +0000
ROA not before: Thu 01 Jan 2026 16:19:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205136
IP address blocks: 185.81.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:5b:3c:94:33:09:72:70:ee:37:65:d3:54:f9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Validity
Not Before: Jan 1 16:19:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdd508b031c60cd6cb3b12f42f2e38d3a19e62f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:a8:b9:e8:7f:fd:69:aa:de:0f:5a:d6:e1:
0a:57:e0:ab:ec:da:19:27:57:f2:f6:56:e9:f7:32:
3b:4a:aa:f8:68:0a:1a:cd:44:97:38:27:0a:1d:ac:
4d:59:e1:6f:0f:a5:02:12:47:09:ce:71:b1:29:18:
f0:fd:f1:7d:30:5c:d5:2b:ea:53:cb:88:45:30:ed:
de:be:d3:07:4f:14:c4:8c:cd:89:83:04:71:00:fb:
68:ae:38:42:bc:78:8a:e5:38:f0:c0:8b:e3:ed:d9:
fd:17:e6:fc:fe:01:a7:3f:d8:e6:7b:71:be:67:5b:
ca:13:9a:3c:cf:f8:79:80:6d:9e:73:09:2c:f1:51:
c7:c4:5b:ec:81:c4:2d:bc:40:84:ab:ca:94:a8:64:
f6:c0:e5:ec:de:46:90:89:3d:25:bb:ac:f5:5c:fc:
6b:31:3b:a6:30:49:a7:3f:2e:15:39:3e:af:8b:9c:
e6:1c:21:48:e8:63:0a:04:0b:de:79:20:e8:6b:8a:
70:3e:3a:8c:d2:b3:82:a3:8b:69:e3:c8:e1:02:54:
b0:dd:83:6f:ee:91:bc:cf:8b:9a:f4:b3:29:18:90:
6a:1e:82:f3:9e:5b:81:d7:b8:c2:ff:fe:96:29:ed:
41:9b:0e:74:eb:bb:a8:53:9d:0e:0e:e3:6b:41:ee:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D5:08:B0:31:C6:0C:D6:CB:3B:12:F4:2F:2E:38:D3:A1:9E:62:F4
X509v3 Authority Key Identifier:
keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/vdUIsDHGDNbLOxL0Ly4406GeYvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c8:1b:7e:18:4d:cc:16:88:91:2b:93:19:59:82:f9:11:7f:
67:84:92:04:d5:eb:4d:34:2e:54:a5:8d:0b:11:2e:c1:5b:07:
01:e7:bd:73:fe:f6:69:4d:a9:56:76:7d:cf:46:36:a1:b1:c4:
f6:fe:28:e4:06:a3:cd:31:ea:6e:48:43:92:1c:55:f9:c1:76:
58:bb:7b:5a:72:9e:2c:81:84:51:04:d6:61:54:66:e5:8f:51:
19:f1:7b:a7:87:46:2b:6e:d3:71:e5:ca:d8:9f:62:4f:65:15:
fc:8f:a6:77:8d:dc:b3:cb:15:53:a7:1f:85:47:69:ab:36:52:
55:53:92:34:a3:c3:06:b5:3c:25:a0:a0:e9:ac:4a:7a:d2:fb:
30:a9:36:92:31:9c:20:c0:62:a8:9a:cb:96:fe:8a:7b:d4:18:
78:1c:dd:2c:ce:48:e7:e3:b5:c9:bc:4c:46:9c:88:c4:2d:23:
57:39:79:fe:0a:fa:89:be:59:9d:bc:a0:c9:9e:96:25:83:f1:
ac:5a:bb:1f:8b:2d:c3:e2:85:bc:bb:ec:b0:cd:3c:61:83:b4:
3f:36:3e:d7:26:16:d4:e0:52:83:5a:85:6e:4b:3c:7a:71:01:
a8:c3:86:1a:08:a5:30:ed:7f:01:cc:9c:ef:d1:21:ff:ac:59:
27:6f:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 20:58:30 2026 by rpki-client