This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vvqeP217VwFjhamKk5gQzy7dS6A.roa
File: vvqeP217VwFjhamKk5gQzy7dS6A.roa (raw, json)
Hash identifier: 6RNu6aYvQ2G0fpaxyoxsQ8K0IIa8HHaLV9n928c8bhE=
Subject key identifier: BE:FA:9E:3F:6D:7B:57:01:63:85:A9:8A:93:98:10:CF:2E:DD:4B:A0
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019B7C8052D6DBE0E2F2CBB427D2C31D6654
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vvqeP217VwFjhamKk5gQzy7dS6A.roa
Signing time: Fri 02 Jan 2026 02:19:03 +0000
ROA not before: Fri 02 Jan 2026 02:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43278
IP address blocks: 80.242.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:52:d6:db:e0:e2:f2:cb:b4:27:d2:c3:1d:66:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 02:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=befa9e3f6d7b57016385a98a939810cf2edd4ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:52:db:20:4c:c4:f3:17:8a:33:0b:0b:6c:
74:c9:3a:e2:3b:e5:03:9a:41:73:ae:8d:f8:4d:eb:
7c:24:93:22:a1:0d:56:9c:96:a1:96:89:10:47:ef:
f2:60:ad:bb:d0:99:1d:de:68:74:8a:e4:02:df:a9:
91:72:4d:94:7a:88:16:3d:69:0c:e5:56:bf:02:3b:
a2:19:48:6f:3d:c3:c7:bd:ce:e9:6c:dc:50:fd:6d:
68:74:97:56:86:99:aa:3f:68:08:b9:8b:7a:53:00:
1f:eb:2c:3e:13:b7:80:cd:57:e8:79:1f:ce:7c:47:
3c:13:39:27:11:71:70:8d:df:e1:35:22:f6:db:4f:
0e:b3:bf:81:c3:29:60:fd:42:7e:b3:04:8d:e4:1e:
b0:6b:3a:a5:62:18:a5:52:c8:e5:24:d2:24:1c:1f:
a9:eb:93:c9:77:76:ed:ca:46:09:b4:2f:83:69:33:
ec:c3:e2:78:07:ce:07:71:36:9f:d9:1a:e6:4c:9d:
30:41:fc:2a:34:8f:64:14:ea:6b:4d:04:57:da:02:
5d:2e:65:e8:03:f7:c9:63:3d:82:03:51:13:35:86:
ae:d7:17:a2:b5:6a:63:2e:85:1f:c3:94:55:dd:c1:
a3:a9:d6:7b:04:8e:c0:7e:84:45:d8:75:db:97:d3:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FA:9E:3F:6D:7B:57:01:63:85:A9:8A:93:98:10:CF:2E:DD:4B:A0
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vvqeP217VwFjhamKk5gQzy7dS6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7b:9f:b4:84:a0:84:a4:38:6c:af:a2:7f:ed:bf:63:c1:0c:
d1:18:e3:a3:3d:5a:89:63:7e:59:da:58:c5:5b:b2:a7:c0:69:
6c:ad:c6:cf:7a:89:8e:7e:79:df:cc:e4:c8:8e:4f:c6:7f:f6:
f7:e0:ae:22:f6:62:23:82:29:67:1a:68:d8:41:b5:82:18:6c:
f8:d4:ef:1a:7f:a0:c8:fc:ab:7e:6b:01:12:25:c1:d4:87:68:
35:56:e1:1c:2e:12:0c:27:22:5b:62:f6:c6:31:f6:df:0b:36:
a2:c7:88:0d:e6:60:ec:fb:ce:12:b6:94:be:f6:8f:f1:82:d2:
b0:cf:49:a4:06:a9:ca:2a:8b:26:9c:21:d6:49:37:14:09:ea:
40:4d:1e:57:0b:9c:e4:b5:7b:58:3e:f9:8f:ff:ce:3f:6e:38:
e9:37:22:89:50:5c:e7:1f:fa:57:cf:93:3a:07:20:b9:0f:27:
a6:22:37:67:f3:6f:bd:e4:06:1d:41:9e:1a:6e:ce:76:95:66:
72:47:fa:48:cc:9d:a0:7e:e0:48:f5:c1:fa:0f:49:01:c4:54:
97:1a:23:38:01:03:d8:07:c4:e1:ca:d5:da:49:d8:2c:2b:a9:
58:15:f5:25:90:d7:e6:3b:ca:42:00:3d:91:e1:df:1f:74:4e:
47:ee:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:37 2026 by rpki-client