This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/DElIG2I4poXxTLyxmk8qHhToIrc.roa
File: DElIG2I4poXxTLyxmk8qHhToIrc.roa (raw, json)
Hash identifier: EymYSA7xmGhavoS2+cvnhWPb/p1asE537I39DsH2QsI=
Subject key identifier: 0C:49:48:1B:62:38:A6:85:F1:4C:BC:B1:9A:4F:2A:1E:14:E8:22:B7
Certificate issuer: /CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Certificate serial: 019C28C11C4148B606414C0E68A7DBA0AAB3
Authority key identifier: 76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/DElIG2I4poXxTLyxmk8qHhToIrc.roa
Signing time: Wed 04 Feb 2026 13:04:30 +0000
ROA not before: Wed 04 Feb 2026 13:04:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203042
IP address blocks: 195.242.192.0/23 maxlen: 23
2a0f:1dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:c1:1c:41:48:b6:06:41:4c:0e:68:a7:db:a0:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Validity
Not Before: Feb 4 13:04:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c49481b6238a685f14cbcb19a4f2a1e14e822b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:08:28:6c:b1:eb:0c:30:bc:eb:04:b0:23:
c9:32:2d:6a:c3:c6:35:9a:0b:24:35:ee:70:2a:9e:
0d:b7:5c:39:5b:64:c6:16:9f:47:e7:50:c3:67:e7:
3b:38:dd:02:e8:53:47:dc:43:b7:e6:ce:ae:74:ac:
e1:47:21:40:94:05:64:55:79:57:c1:61:d2:77:09:
16:d5:7a:2a:20:fc:3d:bc:83:dc:ff:da:9b:93:5e:
20:49:09:56:59:ea:ac:25:d0:b0:da:0b:15:f1:96:
4c:7d:86:58:02:18:8a:8f:37:a6:ce:7e:10:76:eb:
49:a8:67:ff:d9:81:f7:aa:d8:0e:4f:f8:38:77:fd:
3e:8d:74:a1:61:01:b9:37:76:70:14:88:04:e3:05:
86:08:c1:d8:be:df:99:42:c7:51:d5:23:40:9e:44:
df:46:3e:32:cc:82:84:63:bf:75:49:ad:c3:44:a4:
67:e6:fd:8c:39:46:89:99:e7:f1:c9:f7:4f:f5:8f:
56:fa:4c:c0:d6:4f:9b:89:2c:8a:73:c7:c6:0c:4e:
ea:43:97:73:15:4a:bf:44:c9:e0:a3:24:b8:5c:6d:
5a:b4:50:51:68:ea:45:6a:ef:20:57:e3:f4:c0:49:
dc:bd:c3:ec:01:86:f1:c3:2e:43:1c:5b:5d:ff:58:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:48:1B:62:38:A6:85:F1:4C:BC:B1:9A:4F:2A:1E:14:E8:22:B7
X509v3 Authority Key Identifier:
keyid:76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/DElIG2I4poXxTLyxmk8qHhToIrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.192.0/23
IPv6:
2a0f:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:11:ff:b3:b8:0a:b1:16:a3:54:43:c7:f4:88:64:1a:68:ac:
33:ca:71:4c:b8:f2:09:b5:b5:e7:7d:19:ca:58:66:30:c0:89:
a3:8a:56:c9:65:13:2d:69:94:3a:e5:7b:8e:f4:83:aa:e0:ff:
77:df:46:d4:a2:31:fc:52:df:03:a9:b5:46:33:f3:16:b8:66:
dc:be:17:fa:14:a0:cc:06:82:9b:dc:47:1d:c4:e3:17:31:4f:
53:b3:91:97:b9:e3:0a:40:84:98:01:90:33:ff:63:60:33:f8:
89:12:b7:e8:86:60:02:cb:4b:04:84:5d:2a:f5:d0:0d:53:aa:
09:12:44:bb:e9:d5:ab:17:69:6c:e1:36:a5:45:1c:55:b3:5a:
a5:2b:da:df:c2:89:d8:68:82:66:66:bf:6e:38:78:7a:34:2c:
d9:08:14:18:b4:e4:3a:ad:52:42:25:c9:33:b6:a6:9d:01:05:
80:ed:26:9a:23:91:3b:ea:a2:9a:f6:83:56:c9:95:f8:1a:3d:
4c:cd:fd:4b:22:2f:15:22:e3:57:09:69:28:80:fa:56:74:15:
d2:fd:8f:6a:50:a6:47:20:88:46:85:b0:2a:59:ea:7b:4c:31:
7b:97:ef:14:0a:eb:10:80:25:dc:9a:45:aa:a9:a6:9f:e8:cf:
e4:21:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:48:49 2026 by rpki-client