This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/pUvKtFdAlsMAiyEbWzX8FfKf3Zs.roa
File: pUvKtFdAlsMAiyEbWzX8FfKf3Zs.roa (raw, json)
Hash identifier: mTXSXjoGjQ2auSz+bUbQx6Ihly9Sl/4nc+Gp/ABHXAA=
Subject key identifier: A5:4B:CA:B4:57:40:96:C3:00:8B:21:1B:5B:35:FC:15:F2:9F:DD:9B
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019B76EB6026DDF4CDEBCD592B4EBC5274F7
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/pUvKtFdAlsMAiyEbWzX8FfKf3Zs.roa
Signing time: Thu 01 Jan 2026 00:18:15 +0000
ROA not before: Thu 01 Jan 2026 00:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205520
IP address blocks: 194.88.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:60:26:dd:f4:cd:eb:cd:59:2b:4e:bc:52:74:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Jan 1 00:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a54bcab4574096c3008b211b5b35fc15f29fdd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:1a:b0:f9:22:87:69:c6:e7:59:e4:1d:9a:
c0:3e:cd:a0:ae:33:cf:3b:e3:32:d8:b4:dd:2a:b4:
48:68:8e:fc:4e:ac:92:90:e2:9f:b9:48:86:e8:c3:
c8:14:8e:65:e1:83:38:30:66:55:2e:c9:b7:80:13:
5e:76:5d:80:13:de:d8:70:a5:15:05:e9:da:53:bb:
55:30:c4:7a:66:bb:56:a1:27:bd:5f:ce:6c:07:9a:
cc:fc:25:3c:57:22:2d:21:0a:fc:1f:6c:24:40:8e:
5e:1c:51:24:53:6b:8d:ac:b4:55:4c:63:fe:6e:e1:
4c:67:90:c0:f2:99:7f:85:e4:2d:69:79:65:59:9c:
22:83:a0:e9:a0:19:1e:eb:04:c9:ce:dd:a9:d3:d6:
73:3c:ad:d7:ad:94:61:51:15:80:bf:aa:c8:3f:d0:
be:e7:6a:5a:01:49:79:55:4b:b4:d7:f7:8a:8f:70:
2e:4e:ef:8a:af:20:f7:f8:31:1f:e0:4c:3f:82:2e:
5d:06:28:9f:0a:47:a7:fb:18:f3:6d:a6:98:f3:fa:
a4:f9:4f:26:71:e7:ec:24:62:95:df:5e:d1:65:d0:
1e:09:2a:68:f3:90:34:ee:af:72:21:80:bd:d1:91:
cc:ea:c5:80:ae:61:7a:21:8b:3c:ec:08:69:05:fd:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4B:CA:B4:57:40:96:C3:00:8B:21:1B:5B:35:FC:15:F2:9F:DD:9B
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/pUvKtFdAlsMAiyEbWzX8FfKf3Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a5:c5:89:e3:a1:d7:76:df:1d:ae:6d:d5:ab:3a:f0:44:57:
20:8e:3e:9b:f4:7d:64:9b:4c:a0:eb:3e:dc:a6:c7:6e:61:61:
84:a7:01:32:76:08:42:40:a6:ac:ae:21:78:19:1b:41:52:2c:
8b:6a:57:b4:b7:fa:4b:85:f0:d6:24:1b:28:a2:30:d4:44:f5:
bc:83:5f:f2:e6:ce:69:26:af:da:1e:34:f0:56:1e:4c:a1:49:
44:44:4b:bc:f3:c6:07:f6:03:a6:83:85:01:f3:80:69:b9:6e:
dc:66:ff:a3:0c:e2:3a:3e:93:2e:e8:09:14:cd:e2:3c:62:d8:
d0:dc:6b:8d:e3:c9:92:40:e8:77:a7:af:cf:c0:86:50:86:59:
9f:83:9d:36:ea:a9:02:0c:0a:85:f5:7a:3b:57:b6:56:75:4c:
06:bb:a1:d4:25:5c:4a:e7:5f:80:cf:25:80:f8:8c:71:3a:86:
a7:ac:b4:65:5f:46:37:3d:e6:34:cd:3f:99:d2:e7:97:d4:0a:
c5:9d:fa:a9:49:bf:49:9a:b3:0e:6d:6b:1b:bc:27:aa:1a:28:
79:eb:a2:23:c5:71:7d:76:b6:b7:9f:2d:a3:de:6e:d1:66:99:
8b:a0:e0:57:93:85:f8:df:a9:b7:35:03:7f:93:d0:56:91:5e:
ca:a8:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:27 2026 by rpki-client