This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9UoxSrzmbX1W4bdbrOQ9y9HNcxg.roa
File: 9UoxSrzmbX1W4bdbrOQ9y9HNcxg.roa (raw, json)
Hash identifier: sXh3RKYMXy6M52TY6MHbPJK4SWgnAHmmOV4qOMDaFi4=
Subject key identifier: F5:4A:31:4A:BC:E6:6D:7D:56:E1:B7:5B:AC:E4:3D:CB:D1:CD:73:18
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019B797EC7058DF6EC68D51E62045633D28A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9UoxSrzmbX1W4bdbrOQ9y9HNcxg.roa
Signing time: Thu 01 Jan 2026 12:18:30 +0000
ROA not before: Thu 01 Jan 2026 12:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62411
IP address blocks: 92.247.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:c7:05:8d:f6:ec:68:d5:1e:62:04:56:33:d2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 12:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f54a314abce66d7d56e1b75bace43dcbd1cd7318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:35:d7:30:ba:f9:11:41:54:53:5e:35:98:
49:23:1a:a8:81:10:90:d6:9d:79:08:da:ae:6b:67:
88:16:26:0a:3e:b7:bc:ea:29:3c:c3:4b:e9:c3:62:
d3:d0:6d:76:8f:f6:2c:4d:cd:11:68:a5:c1:8e:fe:
65:64:ee:d4:53:6d:5d:3b:e6:86:49:66:92:1f:c1:
ac:ea:8d:ff:b3:aa:6b:bc:50:b3:be:1f:75:70:3b:
2a:39:e1:ed:d5:62:fb:af:70:07:0f:9b:cf:11:60:
3b:31:c4:ab:6e:f9:41:76:31:d0:1d:78:1b:85:4c:
dd:2c:1c:16:ab:b4:00:60:c8:4c:32:4b:3b:7e:4c:
87:31:73:3c:88:69:34:ba:ce:a7:06:54:1e:e5:9c:
b4:33:54:df:82:00:fe:68:17:30:52:ec:29:3f:33:
38:6e:4d:a5:8f:a9:5e:20:ba:46:ca:bb:05:51:ed:
0f:3b:b4:32:3c:85:be:f4:64:cb:a0:1c:66:87:40:
cd:9a:d1:85:69:f3:80:fc:93:a3:f7:eb:aa:59:62:
b9:9a:64:af:09:a4:a6:13:27:d8:d6:dd:7e:11:41:
9e:34:e7:b6:65:37:4d:b5:1d:11:9d:fc:01:ef:e7:
d5:63:af:ba:da:41:03:8c:89:59:96:e3:15:0a:a2:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:31:4A:BC:E6:6D:7D:56:E1:B7:5B:AC:E4:3D:CB:D1:CD:73:18
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9UoxSrzmbX1W4bdbrOQ9y9HNcxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.188.0/24
Signature Algorithm: sha256WithRSAEncryption
93:59:85:86:0f:b9:a1:a3:20:da:16:c5:24:b0:42:bb:89:a5:
5f:cd:65:65:72:4d:c1:ef:64:a8:93:b4:14:a9:0f:39:ab:af:
4a:90:70:ac:5b:89:7b:8d:87:ac:4d:0a:86:a2:30:c3:dd:fc:
72:d9:b3:66:cd:91:54:2a:da:43:70:a5:ff:20:b0:99:91:f6:
d3:29:34:36:18:8d:f8:ae:b1:8a:a6:aa:10:df:5a:5b:ec:b2:
10:1f:0c:7c:3b:ee:c3:b5:86:2c:76:d2:39:4d:c9:7a:dc:c4:
be:df:b0:af:43:18:d3:a3:58:8f:6f:1d:0f:86:b2:fd:98:03:
57:d1:2e:85:a3:d3:9a:b4:58:d8:0f:64:74:c4:2b:f5:8f:d7:
59:81:84:da:b4:3a:75:fa:53:10:45:ba:aa:eb:3a:9b:b5:40:
26:db:98:57:45:db:0c:35:23:d2:22:5d:31:57:65:3d:1d:10:
31:9d:6a:10:3e:7a:3b:55:f7:40:38:99:be:72:ef:ba:49:6c:
84:6d:c3:41:54:31:2a:b0:c7:75:b0:5f:94:dc:09:81:90:50:
f1:01:d5:68:27:05:d8:5d:ea:7c:5d:52:09:f8:0e:8c:4c:ea:
6e:92:45:74:ba:c3:7f:7b:45:c4:49:40:39:fb:08:ca:4e:9a:
24:7c:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:25:46 2026 by rpki-client