This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/shjj7hyrahoIHbmyAEl19OuGu6Y.roa
File: shjj7hyrahoIHbmyAEl19OuGu6Y.roa (raw, json)
Hash identifier: W1DcjBCIsHP6aoNvBFwm31SuTPO6dGz7Z05Xna7PSao=
Subject key identifier: B2:18:E3:EE:1C:AB:6A:1A:08:1D:B9:B2:00:49:75:F4:EB:86:BB:A6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 019B8D9B8319F0F5665C839047882ECB577E
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/shjj7hyrahoIHbmyAEl19OuGu6Y.roa
Signing time: Mon 05 Jan 2026 10:02:17 +0000
ROA not before: Mon 05 Jan 2026 10:02:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 147.78.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8d:9b:83:19:f0:f5:66:5c:83:90:47:88:2e:cb:57:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jan 5 10:02:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b218e3ee1cab6a1a081db9b2004975f4eb86bba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:47:cc:b5:30:09:5d:cd:32:c1:b8:5e:24:
8f:8a:67:5b:5b:7e:13:9a:3c:c8:c7:35:2b:01:66:
c0:f7:00:c2:1c:26:de:63:0a:9e:f1:d7:72:b5:0d:
d9:2e:af:e5:55:8e:95:2b:b7:85:31:2e:f8:9d:8f:
45:59:00:34:74:94:69:c4:10:6c:49:bf:ee:a2:b3:
90:7a:08:85:ff:3b:69:e5:3e:2e:03:eb:2b:4c:f3:
2a:de:43:eb:d6:68:66:88:83:81:ce:5b:0a:94:22:
fc:19:11:af:8a:08:1f:b1:c5:07:18:72:9c:bd:ef:
77:20:e7:27:a2:6d:80:b9:98:4f:36:7a:c2:af:d0:
ea:33:07:36:de:b4:3e:58:d6:df:7d:2a:a5:94:73:
ef:02:f4:cc:94:fe:67:26:0c:51:12:e5:e3:35:17:
51:02:64:2c:19:f2:c2:84:34:0d:5c:8e:31:7e:0a:
b6:9f:62:cb:f3:83:f5:ea:80:df:d2:63:a0:1b:64:
a1:9f:b9:5c:ed:86:07:ba:61:26:17:02:14:7b:68:
2e:a1:5f:4c:41:7d:7f:5f:e8:82:71:b7:99:70:e3:
8d:4d:d1:a5:2c:23:49:5b:3a:45:67:ed:13:cd:bd:
92:7b:f1:91:b5:55:52:fd:6f:28:be:16:7d:d5:78:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:E3:EE:1C:AB:6A:1A:08:1D:B9:B2:00:49:75:F4:EB:86:BB:A6
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/shjj7hyrahoIHbmyAEl19OuGu6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:66:25:04:57:de:41:27:62:3d:e4:d2:5c:7e:9c:71:db:d3:
6a:8a:d8:e0:17:86:e5:35:c5:e0:0a:3f:63:0c:8b:c5:ed:6e:
6e:3c:da:b0:0b:1e:0f:54:80:e0:79:b2:0b:ca:51:f6:21:a6:
6b:04:39:63:8e:b3:0d:4f:45:fb:54:75:9c:ce:d5:d5:e9:c7:
91:19:7d:ad:9f:b4:81:ba:b4:27:bb:a2:e0:98:23:d7:24:25:
14:55:50:c8:42:ad:69:38:a4:1f:b8:83:ca:39:48:fe:00:a3:
31:48:1d:a8:56:26:0d:05:b6:81:c9:fc:1f:e3:0f:6e:b2:e3:
98:8f:9e:ce:01:7f:f5:79:70:74:e5:50:f0:42:f8:0a:47:bd:
46:b9:d6:d7:d2:fb:e3:bd:43:24:5b:0c:7b:35:31:b2:ef:ac:
93:59:e5:a2:ac:5f:64:57:ec:02:32:51:39:a3:64:06:d1:fb:
d0:1f:e2:9b:15:36:11:70:bc:61:ff:c0:d7:3d:75:b3:c3:e6:
fd:ba:6e:b6:e7:da:7e:63:9b:e5:c6:91:47:ff:6b:56:70:cb:
80:3a:c8:ed:77:22:c7:f1:04:10:e3:2f:74:91:ec:e7:ab:42:
1d:84:46:69:44:6e:d5:1d:0c:f1:c9:91:bd:c5:4f:68:ae:6d:
2a:97:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:59 2026 by rpki-client