This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1C35LDWSN9jTbxF46jttpDMiEyo.roa
File: 1C35LDWSN9jTbxF46jttpDMiEyo.roa (raw, json)
Hash identifier: DOf3UJQrf56iQnSBDNs6zJxzaXqPA4qtdW1/JRjgNVI=
Subject key identifier: D4:2D:F9:2C:35:92:37:D8:D3:6F:11:78:EA:3B:6D:A4:33:22:13:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019B78A354083CEF7D035E68A63601A5666A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1C35LDWSN9jTbxF46jttpDMiEyo.roa
Signing time: Thu 01 Jan 2026 08:18:48 +0000
ROA not before: Thu 01 Jan 2026 08:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215825
IP address blocks: 82.115.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:54:08:3c:ef:7d:03:5e:68:a6:36:01:a5:66:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 08:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d42df92c359237d8d36f1178ea3b6da43322132a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:2f:6a:fc:d8:1f:6f:f7:91:02:5d:6c:a6:
b4:aa:aa:8b:cd:d9:cb:16:34:57:7b:ce:65:9a:92:
a7:56:a3:43:7a:48:cb:c0:63:96:5d:9a:a0:3b:a9:
01:59:bf:d5:ba:43:8a:c6:23:6b:7b:67:78:3a:00:
41:d5:4f:63:59:59:de:44:19:75:c6:47:af:7d:41:
f7:58:09:80:ca:61:4a:16:36:ef:6f:9f:34:68:e9:
63:e3:ac:8a:33:e9:67:98:a0:58:23:34:b5:91:79:
f0:64:c5:27:2b:6c:68:b9:e1:94:02:ea:a6:33:47:
6e:bd:7f:2e:03:23:f2:64:e3:6a:57:36:96:25:b0:
00:4e:28:0b:ac:e3:d1:79:cf:74:26:44:b4:61:77:
20:c6:fa:cf:0c:22:19:6f:ad:46:18:37:dc:58:f1:
37:f6:67:b0:3a:11:6d:bd:c9:88:e8:37:c7:9c:d4:
05:50:c9:5b:f4:4d:68:ff:85:62:6c:0e:6f:bd:61:
ce:b8:66:85:5e:40:5f:a1:27:14:3c:b5:f7:f7:24:
95:c3:83:31:ae:1f:62:78:ca:e5:17:da:86:96:00:
7c:ba:08:e9:9a:15:25:45:c3:cd:74:8d:d5:0e:12:
75:69:e9:24:55:0d:36:af:60:1c:32:aa:ac:aa:48:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:F9:2C:35:92:37:D8:D3:6F:11:78:EA:3B:6D:A4:33:22:13:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1C35LDWSN9jTbxF46jttpDMiEyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:cb:05:e8:4f:81:e4:fd:54:d8:2a:7c:83:29:54:27:51:fe:
35:ec:11:3a:08:4b:80:38:6d:6c:28:cf:fb:1a:c8:d8:57:f1:
89:b1:b4:c7:88:31:0e:35:7d:a2:4f:8b:f1:57:da:c5:2b:14:
0d:de:66:89:f9:83:1d:e1:33:35:8a:92:49:7f:ca:d7:f5:9e:
00:d2:81:be:7e:02:04:15:e6:79:39:c6:1a:35:bc:fb:22:67:
5d:f3:ae:6e:2c:ae:75:7d:6a:d1:67:2f:8b:3f:4c:58:7e:4a:
34:64:83:78:6a:6a:63:eb:10:37:a5:fc:08:8a:32:7a:40:52:
e8:9e:29:8c:86:aa:7e:38:40:8d:b6:7c:a3:e1:c7:43:90:00:
ce:58:e6:43:3f:f2:aa:9a:bf:80:b3:4b:7d:f3:2c:db:e1:5c:
b3:6b:04:04:ac:9b:77:77:f7:42:da:4d:1d:d5:05:4b:57:5e:
b5:b6:e1:a3:ce:17:ac:90:cb:98:23:cb:57:cb:47:5d:14:b6:
00:b5:3f:23:b4:ce:92:09:63:72:3b:32:dd:12:96:6c:20:fd:
59:a1:46:0f:83:d2:45:e7:96:a9:3d:6b:67:8a:76:b8:41:f5:
13:79:c8:49:97:d9:72:96:e7:72:40:49:52:95:a7:14:7a:43:
66:8a:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:03:00 2026 by rpki-client