This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UEMbnQSg-CqPCCOUzMzNhJH12lA.roa
File: UEMbnQSg-CqPCCOUzMzNhJH12lA.roa (raw, json)
Hash identifier: Zoo54h/jLJxtqfZ2SMs//OnOjukQq18e+WiJr5qy/5U=
Subject key identifier: 50:43:1B:9D:04:A0:F8:2A:8F:08:23:94:CC:CC:CD:84:91:F5:DA:50
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019B7FF2A90C0FB4B87114E395A8F8FC1CA1
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UEMbnQSg-CqPCCOUzMzNhJH12lA.roa
Signing time: Fri 02 Jan 2026 18:22:47 +0000
ROA not before: Fri 02 Jan 2026 18:22:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 193.25.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:a9:0c:0f:b4:b8:71:14:e3:95:a8:f8:fc:1c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 18:22:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50431b9d04a0f82a8f082394cccccd8491f5da50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:fc:89:a6:f2:1e:88:6e:81:ba:37:bb:3c:
88:2d:8d:98:bd:ed:4e:46:8a:b3:c4:e9:70:33:d0:
9a:12:e6:87:bf:ed:38:5a:3d:44:a1:75:54:12:c1:
07:cd:16:d1:7f:86:4a:60:5a:73:8f:b5:55:2f:83:
b2:9f:1f:c2:98:a9:52:f6:7f:a9:b0:16:35:d1:6d:
ac:a6:5f:38:5a:c9:9b:62:79:ce:65:dd:44:1c:50:
39:bd:8c:53:ff:2d:89:de:cf:cf:d5:21:f1:29:0c:
3d:76:b4:a5:a5:5d:ce:4c:da:1d:53:7e:1b:eb:67:
cd:50:64:b4:e6:07:cd:d3:87:7c:bd:90:d1:4f:7c:
92:59:eb:26:c7:1a:02:e4:f3:d8:80:93:b3:4e:5d:
8e:57:8e:2b:85:41:bf:0d:56:30:07:37:bb:68:91:
30:d4:59:a9:5c:56:57:0e:8a:ec:09:b9:6f:c6:57:
cc:b8:45:5c:0e:f9:37:34:06:0a:87:8b:ea:f6:51:
d5:3e:0e:a3:42:ab:f8:41:48:e8:e7:13:17:68:4c:
a0:6e:ae:a3:77:02:d9:2a:8a:79:07:bc:85:51:f2:
14:52:ab:87:a6:62:87:70:80:f1:ed:f0:d9:6e:5e:
e7:88:97:ec:6d:67:ce:db:61:99:b0:15:77:68:c7:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:1B:9D:04:A0:F8:2A:8F:08:23:94:CC:CC:CD:84:91:F5:DA:50
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/UEMbnQSg-CqPCCOUzMzNhJH12lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:53:d2:cc:d3:0f:b2:91:ce:bf:24:63:be:58:a8:98:e0:1d:
e6:91:43:c9:3b:ef:8d:ac:1c:e5:90:28:32:98:32:5c:8e:9f:
44:7c:c7:dc:cf:db:44:05:51:1a:d3:76:94:4e:4f:9d:b5:14:
2c:9b:b4:2f:37:66:47:d0:76:66:90:fe:e3:d4:62:c6:91:cb:
f3:67:0a:8a:98:c7:d9:4c:bc:46:09:fa:1f:72:9c:f5:83:49:
b2:19:5c:ca:0e:82:2f:64:4b:38:2f:98:93:d8:a4:c6:80:f6:
62:c6:03:c5:df:e2:bd:f6:f1:80:ff:0e:31:a2:7d:04:43:22:
e7:30:c7:cb:cd:4a:6c:e1:5e:e3:77:67:26:1d:00:73:5d:73:
21:ff:79:8d:43:c7:3b:b8:bb:19:66:a6:d3:2a:3c:0d:03:80:
aa:78:5b:1d:94:9f:2e:bd:4b:2b:8a:12:c8:26:fb:f0:6c:13:
c8:36:e0:18:ae:78:66:6d:bd:7f:48:67:41:e3:7d:0f:cc:90:
f1:e8:36:3a:47:fa:a5:19:a8:b8:eb:28:91:b5:b0:33:90:8e:
7c:49:bb:12:87:db:d8:45:4f:c8:7a:03:a8:33:61:49:4b:fa:
80:9b:ba:92:72:5e:1f:bb:34:2d:09:41:06:58:83:80:6d:80:
13:36:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:54:09 2026 by rpki-client