This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hR6FjmSZrOcxglTQIeop3g-8itU.roa
File: hR6FjmSZrOcxglTQIeop3g-8itU.roa (raw, json)
Hash identifier: L8JoSNHxqD8GZakrpThaN7mExWHxjjIRU8CrnXD6iaY=
Subject key identifier: 85:1E:85:8E:64:99:AC:E7:31:82:54:D0:21:EA:29:DE:0F:BC:8A:D5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019B78A342E34040708AE923272F608E4782
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hR6FjmSZrOcxglTQIeop3g-8itU.roa
Signing time: Thu 01 Jan 2026 08:18:43 +0000
ROA not before: Thu 01 Jan 2026 08:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213446
IP address blocks: 193.25.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:42:e3:40:40:70:8a:e9:23:27:2f:60:8e:47:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 08:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=851e858e6499ace7318254d021ea29de0fbc8ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:19:c2:e0:19:f1:4f:85:ab:e8:c6:ce:de:
66:bd:a9:df:b8:61:08:d3:66:55:90:bf:4d:58:de:
87:02:7b:aa:19:c9:dc:79:67:09:7c:3c:8c:73:4d:
fe:5f:f7:66:10:61:0d:78:c5:cd:00:27:07:ef:ca:
20:c8:eb:be:59:57:f4:4b:8b:e3:c7:05:14:6b:09:
f1:4d:b4:8b:74:0f:3a:cf:9b:00:48:b6:d9:ab:c7:
39:f1:19:ee:9b:7f:fe:86:8d:d0:51:ec:39:7c:34:
62:e1:41:14:c7:aa:55:43:be:54:e1:9f:67:50:76:
e1:02:58:9c:37:3a:91:ee:19:ea:3c:6e:3f:f1:15:
51:53:a2:dc:f5:38:eb:70:c8:39:25:c8:f0:4a:72:
e4:8f:69:9c:87:b0:be:03:fa:18:22:54:33:28:bc:
27:97:3c:21:31:65:ab:4d:68:b7:62:ab:5b:13:34:
91:01:55:b7:a1:06:0c:7d:11:ce:cb:1f:7c:15:fd:
11:8f:ea:72:84:2d:e0:90:e6:8c:02:e3:57:bf:8b:
00:68:0f:1a:6b:fb:49:e9:33:c8:11:14:f0:ae:8b:
55:f0:e0:f8:c6:ae:62:56:21:56:04:cc:5a:5c:52:
14:1c:6c:d9:17:4f:5e:a2:81:dc:4d:31:a1:ad:95:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1E:85:8E:64:99:AC:E7:31:82:54:D0:21:EA:29:DE:0F:BC:8A:D5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hR6FjmSZrOcxglTQIeop3g-8itU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.219.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2e:a9:6e:6a:e1:7e:de:37:73:7f:67:03:b0:c3:0a:57:db:
fa:44:04:be:fe:59:de:29:b9:18:96:8e:21:04:87:a6:2d:2a:
60:9e:37:9e:cf:b9:03:f6:14:ce:02:90:88:38:53:8c:f9:46:
09:b6:6d:00:60:c5:f1:88:cd:80:a0:87:98:a3:ab:28:69:57:
54:4a:3d:2b:c0:c5:71:34:21:0a:f1:e9:c9:6e:49:88:a3:73:
4a:bc:8f:61:62:ff:ce:7c:1b:44:8f:cd:57:0e:87:96:c9:7a:
f1:c8:7f:49:29:5c:ff:67:79:ea:00:0b:2d:4c:f7:0a:1e:98:
a0:f4:46:2b:19:30:9e:b1:49:35:5b:b9:35:7b:40:cd:87:d8:
1f:37:70:e5:eb:aa:79:c8:19:c3:26:10:3f:bf:e2:7b:ad:b3:
09:da:65:dc:4c:d4:b9:d3:f3:4a:d9:85:e9:3f:ea:70:0f:83:
56:88:b9:48:47:ff:1f:2c:f5:3e:de:24:1e:d1:10:6b:13:50:
09:66:7c:4f:28:32:7c:e9:1c:82:e8:3d:0b:ad:d4:9e:cd:35:
91:9c:56:63:4e:84:cf:66:6b:63:3b:6f:f5:a7:c7:ef:14:8b:
cf:5d:c0:6b:2f:12:46:e2:32:b1:cf:77:62:06:89:22:90:88:
c1:51:7e:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4o0LjQEBwiukjJy9gjkeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTFlODU4ZTY0OTlhY2U3MzE4MjU0ZDAyMWVhMjlkZTBmYmM4YWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTMZwuAZ8U+Fq+jGzt5mvanfuGEI
02ZVkL9NWN6HAnuqGcnceWcJfDyMc03+X/dmEGENeMXNACcH78ogyOu+WVf0S4vj
xwUUawnxTbSLdA86z5sASLbZq8c58Rnum3/+ho3QUew5fDRi4UEUx6pVQ75U4Z9n
UHbhAlicNzqR7hnqPG4/8RVRU6Lc9TjrcMg5JcjwSnLkj2mch7C+A/oYIlQzKLwn
lzwhMWWrTWi3YqtbEzSRAVW3oQYMfRHOyx98Ff0Rj+pyhC3gkOaMAuNXv4sAaA8a
a/tJ6TPIERTwrotV8OD4xq5iViFWBMxaXFIUHGzZF09eooHcTTGhrZXJ4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUehY5kmaznMYJU0CHqKd4PvIrVMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvaFI2RmptU1pyT2N4Z2xUUUllb3AzZy04aXRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnbMA0G
CSqGSIb3DQEBCwUAA4IBAQAiLqluauF+3jdzf2cDsMMKV9v6RAS+/lneKbkYlo4h
BIemLSpgnjeez7kD9hTOApCIOFOM+UYJtm0AYMXxiM2AoIeYo6soaVdUSj0rwMVx
NCEK8enJbkmIo3NKvI9hYv/OfBtEj81XDoeWyXrxyH9JKVz/Z3nqAAstTPcKHpig
9EYrGTCesUk1W7k1e0DNh9gfN3Dl66p5yBnDJhA/v+J7rbMJ2mXcTNS50/NK2YXp
P+pwD4NWiLlIR/8fLPU+3iQe0RBrE1AJZnxPKDJ86RyC6D0LrdSezTWRnFZjToTP
ZmtjO2/1p8fvFIvPXcBrLxJG4jKxz3diBokikIjBUX4Z
-----END CERTIFICATE-----
Generated at Fri Jan 2 12:06:33 2026 by rpki-client