This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/USibROI6bHsBmjY8JqVj1ppHQhQ.roa
File: USibROI6bHsBmjY8JqVj1ppHQhQ.roa (raw, json)
Hash identifier: FxrwrQt94Qy2It/n4tNXLSYen6++m/vxl1Kht3LCj/4=
Subject key identifier: 51:28:9B:44:E2:3A:6C:7B:01:9A:36:3C:26:A5:63:D6:9A:47:42:14
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019B7E37B393AECB338328AFEE4A1C88A14D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/USibROI6bHsBmjY8JqVj1ppHQhQ.roa
Signing time: Fri 02 Jan 2026 10:18:58 +0000
ROA not before: Fri 02 Jan 2026 10:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23061
IP address blocks: 158.173.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:b3:93:ae:cb:33:83:28:af:ee:4a:1c:88:a1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 2 10:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51289b44e23a6c7b019a363c26a563d69a474214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:36:78:a5:e0:be:ad:86:6a:4e:6c:01:ca:
2f:28:1f:60:49:39:aa:27:d4:19:0a:ed:e4:a3:a7:
3d:de:06:e9:f1:4d:6f:ad:ee:77:09:28:d4:85:cf:
6c:91:34:e0:cf:56:57:fe:4f:d7:a7:97:80:b9:03:
1d:21:53:01:2a:06:0f:3e:1e:39:d1:7d:c7:1e:5a:
1a:49:a7:48:46:9d:1a:d4:3a:6e:47:ef:46:77:33:
59:42:50:8b:3a:59:10:ec:da:67:dc:db:da:01:65:
6d:3e:47:b0:d4:0a:4b:c5:f4:d4:0f:86:a3:ce:9b:
7e:5b:5a:ef:95:e1:87:de:45:35:46:18:30:8f:af:
73:da:0c:b4:c7:8f:26:cb:6e:e3:63:0c:d0:80:75:
70:c0:b5:7b:68:d6:f6:44:d2:4b:ab:4a:be:2b:a6:
7f:03:91:d3:05:22:66:cd:31:d4:48:d7:78:bb:ef:
9c:cd:44:3d:9a:7c:20:4e:31:da:96:eb:3d:ec:ad:
5a:d3:13:18:0d:d2:e0:c1:76:46:ef:7b:f2:fe:f0:
a2:a8:10:e9:3e:ad:52:13:28:18:42:28:d2:13:92:
ea:b0:2a:e4:87:34:be:5c:59:d5:b1:1d:f4:50:de:
7e:20:8d:1f:7c:f9:58:e2:12:78:cd:29:dc:15:39:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:9B:44:E2:3A:6C:7B:01:9A:36:3C:26:A5:63:D6:9A:47:42:14
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/USibROI6bHsBmjY8JqVj1ppHQhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.230.0/23
Signature Algorithm: sha256WithRSAEncryption
41:7e:6a:99:62:15:da:d1:03:32:f0:84:08:8b:f9:be:8a:9b:
0a:20:48:26:d6:57:99:b7:90:1f:e7:fb:7a:f6:ef:f3:87:6f:
3f:c8:dd:48:a7:39:92:02:b2:5f:b1:70:ab:5c:5e:19:eb:51:
b2:08:e6:31:d0:5a:f1:7f:5b:d9:ae:fb:28:79:7a:59:2b:05:
6f:4b:f3:f3:01:26:cc:26:cb:b6:87:bb:24:1c:5c:d5:be:ea:
80:9a:56:e0:8d:62:3c:9e:db:c5:fa:37:7c:2d:60:19:04:ed:
cf:68:14:29:b6:04:47:9a:95:b3:6d:bf:a7:6d:a3:58:3c:4f:
7f:1f:63:56:5e:46:f7:04:76:be:bf:89:f9:c8:44:49:ab:4e:
59:3d:26:5f:e9:ae:c7:20:cf:2c:e1:77:6b:2f:39:d9:de:32:
91:45:58:d6:0e:53:88:37:18:4d:f4:dd:1e:e8:83:54:b4:f5:
29:c5:61:21:95:3f:df:1d:91:0b:13:f9:c0:e2:2a:a5:46:f8:
53:91:4a:77:d2:cc:bf:18:95:ec:b5:71:71:8e:cc:27:a9:63:
bb:14:50:de:16:59:e3:20:98:60:d6:c6:c6:09:39:42:85:ea:
ec:6d:78:5e:f5:63:dc:ff:1e:85:f9:f2:47:a6:fd:cf:d0:c4:
67:f6:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 04:39:24 2026 by rpki-client