This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Urq4lcycVWIKLaNn45V1NeLCyy0.roa
File: Urq4lcycVWIKLaNn45V1NeLCyy0.roa (raw, json)
Hash identifier: HZbjp+4QSo6sI0SFI/WlujxWaBNVqSA8sXC1QOrQVus=
Subject key identifier: 52:BA:B8:95:CC:9C:55:62:0A:2D:A3:67:E3:95:75:35:E2:C2:CB:2D
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019B78351FFE2041EB7A54C99ED7F78CB031
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Urq4lcycVWIKLaNn45V1NeLCyy0.roa
Signing time: Thu 01 Jan 2026 06:18:25 +0000
ROA not before: Thu 01 Jan 2026 06:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4648
IP address blocks: 80.83.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:1f:fe:20:41:eb:7a:54:c9:9e:d7:f7:8c:b0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 1 06:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52bab895cc9c55620a2da367e3957535e2c2cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:fc:1f:34:90:f7:71:7e:03:fb:4f:c3:92:
a1:59:4c:38:7f:5c:33:f4:2c:94:61:f7:6f:9f:f8:
f7:d7:d3:d3:9a:ad:08:40:8e:0a:57:77:db:a4:1c:
ac:24:5b:4a:7a:68:09:97:f6:bc:1b:b9:2f:b2:cb:
2f:b9:f5:43:e2:a3:d0:82:f0:ad:35:c7:64:aa:6b:
70:ff:1f:29:b9:8a:72:e5:dd:7a:6b:5b:4d:aa:f8:
c9:ec:c4:42:8d:34:9e:86:eb:63:86:e1:14:61:c8:
da:b4:13:99:ca:52:f4:b1:a6:af:02:a6:9c:ac:1f:
81:ad:a3:b8:d9:c2:32:bb:f2:b4:d2:bc:3a:b7:a1:
64:7b:a3:b0:6e:08:fb:28:ab:5f:f8:9e:f7:44:48:
11:90:44:b7:ee:38:1b:42:22:c4:ba:7a:a6:bf:66:
e6:e0:e3:a3:00:c6:3e:ce:a8:ea:08:ed:85:d1:88:
ae:e0:94:57:67:3a:d0:88:34:ec:fa:50:50:4b:9f:
0f:8e:14:0e:a7:d7:fc:15:7f:51:31:9c:f9:54:7d:
48:ec:67:42:20:b2:01:ed:c9:5b:34:65:b9:23:28:
1d:13:3d:d2:76:fe:e4:f4:af:e6:90:8c:cc:3e:53:
9e:21:76:b6:48:ec:ee:aa:18:b5:31:7b:38:c6:f5:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BA:B8:95:CC:9C:55:62:0A:2D:A3:67:E3:95:75:35:E2:C2:CB:2D
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/Urq4lcycVWIKLaNn45V1NeLCyy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.92.0/22
Signature Algorithm: sha256WithRSAEncryption
86:7f:8f:20:2d:98:e4:2b:7d:1f:5f:9d:80:96:51:2a:f3:35:
7a:fa:e4:29:98:93:c1:26:3c:10:07:0e:0c:b2:57:48:0c:9e:
e7:07:da:f7:cf:41:0b:86:ab:7a:d0:48:e6:bb:ed:d3:f9:75:
00:26:65:15:3e:e8:55:43:ee:78:a5:52:74:de:40:6d:bf:37:
fd:47:5d:82:dd:3f:53:c4:8c:4a:9b:98:63:56:1a:dd:45:60:
4c:f9:64:57:fc:b4:c3:e8:48:d1:f7:4b:48:8b:cf:4f:aa:5b:
35:ff:8b:5d:b7:ba:da:22:ea:4d:4e:99:c2:22:69:56:89:fe:
c3:b4:e6:81:94:4d:fe:cd:66:0f:57:f1:6a:9c:72:22:0b:e1:
b5:b9:4a:30:9d:84:f2:f9:ee:dd:d9:d7:c2:58:30:3b:8d:3d:
dc:ad:51:03:e2:e6:75:d9:a9:1c:83:c2:a4:ea:00:c2:93:df:
44:c0:df:72:ea:67:df:c0:10:1f:8c:7f:e5:c3:d7:a2:7c:e4:
a7:03:48:b4:59:84:ed:39:2a:f3:4a:df:64:4a:3a:4f:91:6a:
13:09:97:b3:11:6e:f6:8a:63:2e:1d:4a:d3:b0:15:91:c9:54:
a9:7a:41:5b:1a:42:04:d6:33:32:b0:12:03:61:f0:cb:e7:0f:
3a:2c:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 11:39:39 2026 by rpki-client