This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/adYPWxXEK-EyO-cYHcJ3jz8xmTk.roa
File: adYPWxXEK-EyO-cYHcJ3jz8xmTk.roa (raw, json)
Hash identifier: 1Kwboaf94lcPqOMax8VtYSaq7bYuJ9QQ+t9XDkOoZZ8=
Subject key identifier: 69:D6:0F:5B:15:C4:2B:E1:32:3B:E7:18:1D:C2:77:8F:3F:31:99:39
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019B7AC8766DF1D8D00C1E5558B56295D0EA
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/adYPWxXEK-EyO-cYHcJ3jz8xmTk.roa
Signing time: Thu 01 Jan 2026 18:18:36 +0000
ROA not before: Thu 01 Jan 2026 18:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 2a0d:d940:80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:76:6d:f1:d8:d0:0c:1e:55:58:b5:62:95:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jan 1 18:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d60f5b15c42be1323be7181dc2778f3f319939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:62:16:57:e6:60:6c:ab:aa:05:a3:15:ea:
59:f8:76:cd:34:b6:d8:bc:90:e7:89:dc:e3:12:10:
47:e0:22:d0:ff:1e:ee:b4:06:a4:94:cf:31:f6:0f:
d5:a7:11:65:f7:ba:9e:9f:95:e2:77:79:96:09:06:
45:36:0a:ac:8a:ab:2c:1f:b8:37:ac:9a:37:9b:95:
ef:fb:7d:78:df:c1:16:b5:85:a4:0a:74:6f:76:1b:
ca:48:89:f4:5e:46:73:07:19:1f:07:04:28:17:9f:
85:86:60:97:59:26:64:66:e6:c0:b3:d0:a8:81:24:
c4:bc:2d:8f:7d:9f:ad:2a:e4:9b:97:52:15:33:e5:
7a:6d:53:f2:6b:32:52:a8:9b:6d:66:ac:e2:40:12:
d9:7d:03:e9:51:89:80:25:7b:88:30:51:5b:20:64:
d6:6a:0c:8a:8b:9f:4f:5b:55:f7:b4:0c:42:33:c2:
dd:a7:22:00:49:48:10:7d:88:20:4a:9d:1b:8c:26:
e4:85:bc:a5:c8:f0:94:44:ca:22:20:2b:e2:76:26:
93:a0:4a:94:74:06:3a:87:df:0e:48:72:8a:ef:80:
a0:67:44:92:0a:cf:3d:ba:a8:48:00:74:af:d2:79:
74:49:d2:03:e0:ec:12:6e:5d:8e:bb:65:3f:d7:28:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:0F:5B:15:C4:2B:E1:32:3B:E7:18:1D:C2:77:8F:3F:31:99:39
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/adYPWxXEK-EyO-cYHcJ3jz8xmTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:80::/44
Signature Algorithm: sha256WithRSAEncryption
5b:d1:fa:62:af:9f:73:40:8f:ab:5f:ce:3d:04:ba:73:1a:e2:
a7:cd:b0:ce:f3:8a:3e:c2:36:d4:1e:14:a4:60:a9:50:cd:4c:
89:f7:88:b8:77:55:7f:c3:7f:db:9f:1c:81:f4:51:fd:b8:9d:
da:0f:96:0f:a0:dd:c1:cb:86:9f:32:8e:85:ae:df:f6:4a:94:
7f:9b:59:f5:e0:ee:2e:ed:b1:00:f6:06:46:dd:78:dc:ed:3c:
e8:7a:10:92:89:86:56:2d:e5:00:94:1e:36:fc:01:05:62:05:
ae:42:c0:f1:df:50:22:89:35:9c:04:b7:bf:ad:3f:09:13:94:
e7:f8:3b:8c:12:80:23:a3:f2:3f:95:bf:8d:d6:80:09:96:d7:
c9:da:78:eb:86:d4:2f:ef:25:9b:58:4c:7a:cd:97:3d:7a:38:
06:9f:fc:ee:2e:b3:fa:f5:51:f6:34:a4:85:f3:82:d4:dd:eb:
30:f2:65:8d:71:d1:97:b6:cd:5c:84:c2:a8:c2:2a:06:da:e4:
c9:e5:34:58:a7:06:0d:70:d9:49:0b:00:cd:f0:ce:a5:6e:61:
1c:9f:39:60:ed:c6:a4:5b:ba:0f:88:d4:66:c6:8f:f1:4d:70:
65:61:52:94:cb:49:64:01:21:fd:76:8d:42:dc:bb:5e:1c:99:
b9:26:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:24:32 2026 by rpki-client