This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VUywaIJ-fsX87Xu2bg_NpQdoRiM.roa
File: VUywaIJ-fsX87Xu2bg_NpQdoRiM.roa (raw, json)
Hash identifier: KsYjyfK6aYrJGyqiOOz1JXLV7ntqF8qasf8uNcFoT7g=
Subject key identifier: 55:4C:B0:68:82:7E:7E:C5:FC:ED:7B:B6:6E:0F:CD:A5:07:68:46:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5D205104290A4A121307643EE6B085
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VUywaIJ-fsX87Xu2bg_NpQdoRiM.roa
Signing time: Fri 02 Jan 2026 06:20:13 +0000
ROA not before: Fri 02 Jan 2026 06:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209745
IP address blocks: 2a0e:97c0:d10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:20:51:04:29:0a:4a:12:13:07:64:3e:e6:b0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=554cb068827e7ec5fced7bb66e0fcda507684623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:87:68:98:1d:f1:6a:29:ad:fe:58:ac:b2:
f1:ab:b8:e1:84:05:da:57:7f:0c:8c:df:6f:12:fb:
96:f6:99:8b:75:33:a9:25:e2:46:c8:8c:69:0a:c8:
27:1b:d7:df:17:c7:c3:ff:1d:bc:cc:fe:e0:82:5c:
fc:23:46:49:59:c8:1f:64:59:ba:f2:b9:6a:f8:c2:
d6:1e:3b:50:8a:f9:68:58:0d:21:c8:11:3d:49:08:
e3:c1:f4:b3:95:e0:99:01:64:3e:e3:22:66:01:e9:
05:97:94:a5:2f:af:fd:6a:50:0f:4a:f8:a9:04:fc:
07:89:d1:28:df:28:41:cc:cb:45:d9:4a:bc:04:c4:
b3:ca:3c:bb:2f:27:a5:04:5c:90:a3:ff:1d:87:17:
b0:9f:c8:22:64:4a:72:74:b4:e8:5c:1d:96:5c:1f:
5b:4a:57:83:e9:52:b8:33:4a:4b:8f:3b:41:cf:70:
e2:9d:cb:35:e6:30:84:12:e1:8a:3f:83:d1:dd:65:
6d:29:fd:40:e6:e0:ec:27:12:fb:82:6b:ca:ab:21:
b6:82:e4:79:c6:d0:81:f2:bf:ba:0c:af:b5:1e:30:
d1:1a:d3:ec:70:9a:14:c9:e4:6c:19:4d:42:d9:0c:
09:72:90:f5:3b:7e:7e:61:2a:69:0f:3c:c9:11:d8:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:B0:68:82:7E:7E:C5:FC:ED:7B:B6:6E:0F:CD:A5:07:68:46:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VUywaIJ-fsX87Xu2bg_NpQdoRiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d10::/44
Signature Algorithm: sha256WithRSAEncryption
6b:84:63:c8:96:d6:4c:ae:06:95:a6:84:2d:70:3d:42:39:52:
2d:d2:f2:2e:7b:e1:b1:77:e7:c0:60:f0:ab:00:c6:64:44:01:
04:5c:ca:65:a2:b5:14:29:08:1c:db:6e:a3:4b:f1:9b:2f:e5:
6c:03:5f:75:24:12:9e:bd:7d:cf:3d:3e:f2:db:ea:18:c5:bc:
34:d5:77:38:c0:e1:bd:82:05:05:f2:15:9b:d7:da:b4:37:e8:
cb:6c:9f:b4:c7:74:61:bb:26:7b:42:48:a3:3c:32:17:26:8e:
53:0f:1c:dc:75:f4:10:97:bc:f2:bd:03:df:c1:10:fd:ce:07:
d8:d7:d3:08:a0:f0:d5:1e:8b:38:2a:00:56:7e:5a:f9:1d:e6:
f5:b6:f9:bb:55:24:8e:96:99:5e:47:56:a8:ba:04:d1:80:af:
c4:8c:21:29:f5:96:f2:db:4a:03:a0:ed:cb:4e:1b:cb:b5:98:
48:5c:85:08:53:fe:b9:8e:33:b3:40:94:d9:54:65:a4:88:c8:
c3:11:14:4c:e8:cb:fc:67:8f:b6:54:06:39:fe:a0:f2:8c:0a:
8b:7f:ec:62:5a:28:4e:2c:a0:f6:17:ce:1f:72:0c:f1:cb:d1:
6c:db:45:84:a5:02:12:e4:1b:7b:99:ee:c4:5d:fa:af:95:c9:
a3:03:f1:71
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt9XSBRBCkKShITB2Q+5rCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTRjYjA2ODgyN2U3ZWM1ZmNlZDdiYjY2ZTBmY2RhNTA3Njg0NjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xSHaJgd8Woprf5YrLLxq7jhhAXa
V38MjN9vEvuW9pmLdTOpJeJGyIxpCsgnG9ffF8fD/x28zP7gglz8I0ZJWcgfZFm6
8rlq+MLWHjtQivloWA0hyBE9SQjjwfSzleCZAWQ+4yJmAekFl5SlL6/9alAPSvip
BPwHidEo3yhBzMtF2Uq8BMSzyjy7LyelBFyQo/8dhxewn8giZEpydLToXB2WXB9b
SleD6VK4M0pLjztBz3Dincs15jCEEuGKP4PR3WVtKf1A5uDsJxL7gmvKqyG2guR5
xtCB8r+6DK+1HjDRGtPscJoUyeRsGU1C2QwJcpD1O35+YSppDzzJEdi2vwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFVMsGiCfn7F/O17tm4PzaUHaEYjMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVlV5d2FJSi1mc1g4N1h1MmJnX05wUWRvUmlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwA0Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBrhGPIltZMrgaVpoQtcD1COVIt0vIue+Gxd+fA
YPCrAMZkRAEEXMplorUUKQgc226jS/GbL+VsA191JBKevX3PPT7y2+oYxbw01Xc4
wOG9ggUF8hWb19q0N+jLbJ+0x3RhuyZ7QkijPDIXJo5TDxzcdfQQl7zyvQPfwRD9
zgfY19MIoPDVHos4KgBWflr5Heb1tvm7VSSOlpleR1aougTRgK/EjCEp9Zby20oD
oO3LThvLtZhIXIUIU/65jjOzQJTZVGWkiMjDERRM6Mv8Z4+2VAY5/qDyjAqLf+xi
WihOLKD2F84fcgzxy9Fs20WEpQIS5Bt7me7EXfqvlcmjA/Fx
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:53:23 2026 by rpki-client