This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/1-uzacpT9JJeynKmXg2YIB0ufzbs.roa
File: 1-uzacpT9JJeynKmXg2YIB0ufzbs.roa (raw, json)
Hash identifier: S/A81oTEScOnXXPw1XpbkNJH8QOIQ1vUASe54W3JTQ4=
Subject key identifier: FA:EC:DA:72:94:FD:24:97:B2:9C:A9:97:83:66:08:07:4B:9F:CD:BB
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019B7E37EC0F4A26877763EFE7C096C8E56C
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/1-uzacpT9JJeynKmXg2YIB0ufzbs.roa
Signing time: Fri 02 Jan 2026 10:19:12 +0000
ROA not before: Fri 02 Jan 2026 10:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49887
IP address blocks: 84.44.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:ec:0f:4a:26:87:77:63:ef:e7:c0:96:c8:e5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 10:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faecda7294fd2497b29ca997836608074b9fcdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:a8:54:6c:5d:9e:8e:10:fd:76:03:92:8c:
fd:0e:ec:29:40:ae:0d:f0:4a:90:b5:e0:62:ac:9e:
8d:7e:92:2c:c6:72:94:66:5e:09:63:00:ed:43:27:
7f:d5:59:a6:fb:3e:fb:1b:2e:93:ab:98:2d:78:09:
bf:81:f7:96:b2:e9:f6:5a:d8:80:02:94:5d:25:48:
e0:a1:6d:06:8a:93:15:f1:a9:d0:b6:ff:c6:8e:93:
79:6e:92:62:e1:e2:9b:ea:86:86:2c:7a:5f:bd:ae:
94:c1:d4:ae:1a:39:86:41:ec:b0:a8:57:2d:bb:91:
f8:ed:7f:63:df:31:bb:04:3d:c5:90:6e:a8:2f:43:
6d:2e:8a:9f:6a:81:83:90:59:aa:67:c9:c9:c2:a1:
09:80:8c:f2:ee:fd:10:0c:97:ba:20:e6:2b:f9:dd:
39:bd:93:1e:3f:9e:25:7a:54:7a:09:78:1f:81:73:
28:06:f0:fe:5d:a0:86:18:2b:0b:24:0e:4c:8a:14:
4c:ad:da:96:50:ea:2f:39:ab:ea:61:61:a6:bb:00:
af:64:6c:cb:40:4a:5f:ff:8a:db:eb:6e:38:a3:64:
c3:07:9c:b5:2f:eb:32:9f:ff:26:f4:ff:08:ca:ca:
bd:28:8e:4d:c0:b0:b6:3d:58:b1:f3:70:e0:d9:43:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EC:DA:72:94:FD:24:97:B2:9C:A9:97:83:66:08:07:4B:9F:CD:BB
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/1-uzacpT9JJeynKmXg2YIB0ufzbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5d:3e:83:23:ce:9f:26:e9:ff:d0:88:bb:fc:4f:0b:8b:96:
6d:7f:33:56:e7:b6:2a:11:ac:23:29:2a:7b:26:a5:7e:6b:a8:
f4:2c:01:03:19:48:ae:1c:50:d5:be:c7:35:0d:53:d6:b9:d6:
f2:35:77:d5:35:80:4e:e6:6c:7d:39:53:cf:50:04:1b:0f:9c:
7b:cb:e0:4c:96:f0:12:a8:98:ff:fc:ba:95:10:a9:a0:88:6f:
24:4f:32:3d:f2:a9:e5:5f:50:3a:f2:de:09:8b:b6:39:04:db:
b2:83:8f:0a:19:79:59:29:af:0e:93:ed:38:14:ae:b3:38:2c:
1f:21:c6:53:0b:30:cc:7b:91:58:9f:ee:29:4f:ba:78:e7:ed:
91:8d:e8:aa:9d:5d:ad:eb:e4:8c:23:44:a4:6d:dd:d2:b8:8a:
4c:3d:ca:6c:5e:26:e5:0b:8f:39:b2:72:9e:ca:24:e6:59:46:
22:61:a5:a3:e2:aa:cf:b5:f7:78:e3:da:27:4a:7d:2c:37:d8:
7f:cf:18:d6:62:36:e9:d9:a0:4e:4e:a5:7f:15:1a:a5:f9:aa:
bc:9c:33:fd:68:33:2f:73:27:4e:79:e9:1f:3b:71:14:26:da:
7e:d9:48:e7:a9:46:65:28:ca:18:df:a0:b4:69:5e:ac:9c:19:
e5:8b:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:09:37 2026 by rpki-client