This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yPJdAV4Bez-cf7MekT1Xx8rJUso.roa
File: yPJdAV4Bez-cf7MekT1Xx8rJUso.roa (raw, json)
Hash identifier: 6uH3UidlAoa2J0MBaSaFLYN6FZxxprdSltO6Xlagkoc=
Subject key identifier: C8:F2:5D:01:5E:01:7B:3F:9C:7F:B3:1E:91:3D:57:C7:CA:C9:52:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019B78A32EAAA5C323D41C84FD91E7FA96E1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yPJdAV4Bez-cf7MekT1Xx8rJUso.roa
Signing time: Thu 01 Jan 2026 08:18:38 +0000
ROA not before: Thu 01 Jan 2026 08:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 94.103.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:2e:aa:a5:c3:23:d4:1c:84:fd:91:e7:fa:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 08:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8f25d015e017b3f9c7fb31e913d57c7cac952ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:04:75:57:4d:3a:21:84:6e:c7:22:a9:61:
3a:db:91:1e:a1:f3:5a:8e:26:2f:17:50:19:6c:9e:
99:32:e3:09:5d:e6:a0:30:3f:39:ca:51:25:ca:58:
27:dd:78:87:5f:31:d0:7c:8d:ee:02:da:31:71:d2:
ae:3b:30:7d:6c:1c:d9:71:4f:73:c8:72:c6:04:33:
d2:25:70:9d:9e:54:35:00:26:6b:07:8b:ce:8c:db:
3a:26:10:a9:91:03:81:c0:5e:03:20:97:4c:81:49:
a5:dd:60:b6:30:02:d8:06:fb:b8:33:be:14:b0:92:
b2:88:31:9f:10:f7:fd:93:c1:d5:fa:17:e5:80:a4:
5a:7e:48:95:13:11:a4:67:40:bf:ba:9c:8c:b1:f9:
d7:2c:5d:20:40:e9:da:60:d1:55:61:76:23:38:dc:
c0:a7:da:38:84:91:02:6b:00:dc:50:ee:c8:20:52:
a4:b5:c6:96:a3:d6:ec:92:aa:44:bb:1c:1f:13:32:
f5:58:af:02:f0:5a:ed:9e:5b:2c:6c:a9:99:ed:40:
2c:96:ac:26:40:80:d2:44:9b:92:14:41:4c:55:3c:
9e:4b:b9:de:0c:d5:40:19:67:73:03:a9:48:ee:48:
61:ef:8d:72:c5:71:db:58:0e:93:e8:01:ee:98:dd:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:5D:01:5E:01:7B:3F:9C:7F:B3:1E:91:3D:57:C7:CA:C9:52:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yPJdAV4Bez-cf7MekT1Xx8rJUso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:73:f4:8e:b9:ed:c7:f7:8e:23:de:c5:ec:4a:bf:69:24:12:
e1:2d:c9:e8:bd:b4:f6:f7:0d:bc:b2:3d:1e:41:a6:52:43:25:
01:ef:7e:4a:ff:57:bf:30:7d:39:1b:89:a7:ea:59:41:57:f2:
ff:35:1f:93:3d:0c:28:08:a5:ee:cd:31:c6:bf:23:3c:6b:5b:
f7:90:cb:37:0d:a2:0e:87:ab:f6:c0:19:24:d2:03:cb:98:a9:
35:e6:88:66:23:77:58:29:64:bc:71:30:ad:e7:89:4f:68:7f:
3b:e6:5d:d7:17:9f:4e:5b:b2:2d:51:4c:15:37:f6:8e:c7:e6:
20:ea:03:1a:80:a4:60:7e:de:8f:f5:87:19:9c:27:2f:26:d1:
cc:89:bd:59:11:6a:b9:b9:57:12:8a:f4:a1:b8:bd:e3:db:fb:
d0:b4:49:e3:3c:07:bb:44:d3:35:82:e5:ed:8f:56:8b:05:b1:
99:aa:88:f9:e0:c5:42:d8:0a:86:1c:70:43:a4:56:6f:2b:36:
60:7d:d8:40:c6:f1:08:71:e3:52:16:f2:af:fd:38:4a:1a:34:
fd:c6:f8:8a:a1:e6:03:c6:bc:ec:43:cb:08:8a:b8:94:26:cc:
d0:a9:a7:f3:ed:45:09:1e:6f:ea:e4:1b:93:66:06:ac:95:90:
34:2f:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:03:27 2026 by rpki-client