This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/_Zm8MTF_L7EyQ_6YveeS2IaebTE.roa
File: _Zm8MTF_L7EyQ_6YveeS2IaebTE.roa (raw, json)
Hash identifier: VQ+xE18B7YQkYF3RoWjSVJ+ofw9TAXhOCMfHnM466LQ=
Subject key identifier: FD:99:BC:31:31:7F:2F:B1:32:43:FE:98:BD:E7:92:D8:86:9E:6D:31
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019B7F84517E5103058F910A9008CB8D8AD8
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/_Zm8MTF_L7EyQ_6YveeS2IaebTE.roa
Signing time: Fri 02 Jan 2026 16:22:16 +0000
ROA not before: Fri 02 Jan 2026 16:22:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210890
IP address blocks: 193.56.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:51:7e:51:03:05:8f:91:0a:90:08:cb:8d:8a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 16:22:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd99bc31317f2fb13243fe98bde792d8869e6d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:08:11:77:11:02:67:61:63:5e:e5:de:1b:
68:7d:1f:13:5c:3a:6d:8b:77:35:ce:c0:15:26:d7:
08:83:9f:49:d6:b0:9c:78:bd:4a:db:bb:0f:fc:2f:
07:a8:a4:c0:25:8c:c3:dd:85:e4:9b:9a:73:e0:78:
8c:d5:55:2c:94:ce:e5:55:38:8c:ec:98:9c:78:92:
5d:b8:18:2d:47:83:55:ad:02:99:60:7a:a2:8a:e0:
69:a9:3d:d9:72:12:81:ff:81:9b:f2:92:c0:da:f2:
6a:dc:16:51:6b:8b:29:34:db:8c:4d:4d:90:ba:37:
bd:37:73:fc:54:4c:ca:92:35:1d:11:a0:f9:74:fe:
86:16:45:b6:76:26:28:6e:2c:0b:f1:bd:8a:58:5f:
3b:c3:e4:a4:43:04:36:72:aa:89:60:ce:94:7d:8a:
ae:5d:73:87:6c:f4:64:e2:0c:13:e2:06:69:51:fd:
1d:cb:82:47:c0:c7:80:d6:5a:be:7d:d5:4e:3a:61:
7f:81:1d:40:a7:bc:38:1d:85:fe:51:3d:e8:63:ee:
db:6b:49:5e:76:80:3e:a4:ea:63:d6:51:31:83:22:
d6:6b:22:8a:5f:d2:70:9e:4f:61:0a:af:03:f1:a9:
fb:6a:7c:f5:01:3f:35:9e:0f:c6:bb:7f:02:c7:9e:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:BC:31:31:7F:2F:B1:32:43:FE:98:BD:E7:92:D8:86:9E:6D:31
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/_Zm8MTF_L7EyQ_6YveeS2IaebTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:15:51:df:8e:fb:d3:1f:f9:c7:86:f5:4e:5b:ba:33:c5:b3:
80:b4:b5:fb:05:4b:dd:62:5d:73:cc:2c:7b:ca:e8:26:37:50:
98:e2:b9:87:63:da:84:81:46:39:b6:da:8a:1f:4b:0a:44:9d:
65:27:ab:13:fd:b1:dd:cf:86:2f:2d:d1:08:e8:82:58:71:f5:
1e:9e:d1:a1:be:f7:2c:fe:24:4f:0f:07:b8:16:c5:d6:71:d5:
02:48:10:29:6f:53:44:8c:5a:68:4e:05:be:a6:5c:87:da:36:
36:4a:2a:9c:39:34:b9:16:99:cf:af:45:05:40:69:70:5a:ab:
ee:22:fd:2e:c4:e8:c0:04:55:56:54:ac:ae:aa:bf:ab:7c:e5:
02:d9:dd:10:f0:99:74:e1:60:f8:0e:9a:3a:da:29:f4:6d:28:
13:42:da:9a:b1:a9:54:84:f0:b1:a8:98:b2:b0:e2:95:01:70:
70:8d:23:81:74:35:be:7c:88:9e:1b:02:bd:67:a0:d7:d4:44:
fd:bb:0a:20:0f:95:79:2f:ae:81:af:76:9a:b2:2d:8e:c3:c9:
a3:93:04:a4:af:a4:53:a5:93:02:c6:03:f3:aa:c0:6f:fa:83:
77:c0:6d:df:b3:28:d4:98:75:4f:da:d5:f1:7a:a8:ab:66:8d:
ae:95:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:56:55 2026 by rpki-client