This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c3wYTHROHHWBxhHKp1HYalOy5Y8.roa
File: c3wYTHROHHWBxhHKp1HYalOy5Y8.roa (raw, json)
Hash identifier: R7sDTqMkAIGqLyBfr718xJuI9Onj19VtqeJyZbGQ1XA=
Subject key identifier: 73:7C:18:4C:74:4E:1C:75:81:C6:11:CA:A7:51:D8:6A:53:B2:E5:8F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019B7F8553541CE53761CFA0B0BB5A5C6C50
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c3wYTHROHHWBxhHKp1HYalOy5Y8.roa
Signing time: Fri 02 Jan 2026 16:23:22 +0000
ROA not before: Fri 02 Jan 2026 16:23:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50284
IP address blocks: 193.124.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:53:54:1c:e5:37:61:cf:a0:b0:bb:5a:5c:6c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 16:23:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=737c184c744e1c7581c611caa751d86a53b2e58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:27:50:fc:4c:95:e1:1c:10:96:9d:57:db:
52:9e:6b:ab:e9:e2:0a:41:5b:06:07:ed:d3:38:fa:
61:6a:cf:f9:4b:b5:5a:35:f3:d8:8c:e1:9a:08:8a:
47:9b:c1:f0:bb:b9:de:cd:88:97:c8:70:97:7c:7d:
77:16:30:9a:84:ca:2b:bb:68:c3:18:53:95:91:83:
46:97:7c:67:0f:a4:c6:df:fb:3f:12:89:b4:7e:5a:
5c:d8:37:55:e3:58:4b:f0:d9:2f:25:f3:8c:af:84:
11:46:19:32:8e:81:b9:11:b6:c2:76:db:2e:64:13:
b4:1c:6d:27:4f:e2:3e:e4:e0:d7:bd:8e:3e:30:8c:
4e:c2:f5:40:f5:b7:86:b6:71:eb:03:96:63:a3:ea:
46:d9:46:7e:41:77:56:57:27:9c:b6:5e:0a:db:64:
f0:c1:28:d9:40:90:a4:a7:11:ce:62:f6:13:b5:55:
08:7e:bb:2c:e8:ae:52:8b:ca:0a:f8:44:06:2e:88:
5e:53:ca:e5:ba:ae:8a:67:74:1e:7f:a6:03:63:32:
d3:7b:4a:b7:1d:0a:d1:ee:0e:40:ab:ec:a1:ad:1d:
16:4a:25:d0:e4:d1:c7:10:31:32:f8:59:1c:d3:47:
74:11:d3:a6:d4:34:dd:c0:51:e6:f5:98:83:0d:0a:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:18:4C:74:4E:1C:75:81:C6:11:CA:A7:51:D8:6A:53:B2:E5:8F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c3wYTHROHHWBxhHKp1HYalOy5Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.44.0/24
Signature Algorithm: sha256WithRSAEncryption
26:23:e1:c0:04:fc:cf:fd:be:bf:d4:2a:c2:5b:4e:ef:32:e3:
01:ae:ed:54:32:a2:c4:af:dd:48:1a:a3:a7:16:78:be:3c:b1:
5b:b9:b8:4c:f4:73:42:22:95:8a:12:62:a9:4a:61:70:66:a6:
0d:32:97:64:51:65:27:58:7a:44:b9:88:ef:83:68:9f:82:06:
2f:2c:c1:1c:35:15:4d:db:22:41:7e:48:de:73:2e:09:9f:8a:
78:f3:cd:08:83:35:59:a9:ba:39:26:e8:74:40:04:d1:84:76:
c3:52:20:03:61:79:77:bf:02:0d:6e:cb:55:3a:38:b4:9c:9c:
8e:ca:8e:7f:18:c8:dc:68:71:e1:87:b3:7b:99:77:9b:b1:35:
1d:cd:62:ea:ab:c1:13:7f:4c:71:c1:80:33:cf:a1:f5:e1:60:
9e:84:bd:81:6f:54:89:76:90:d4:3c:b9:1f:e3:4d:94:36:8c:
07:3f:42:e6:19:ba:56:1f:4d:c7:10:11:b6:2b:17:c6:2a:03:
16:aa:f0:ce:da:39:20:7d:b0:db:bb:f6:41:fc:6f:f4:ab:4d:
76:85:50:05:84:07:87:3b:b0:65:60:04:10:81:31:d9:95:22:
fa:dd:6e:09:9a:6b:87:98:b1:49:f8:e9:55:c7:1f:3a:ba:fa:
2d:1c:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:01:38 2026 by rpki-client