This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_U_w6bXH111HMDU_sQ6-CKmlsuM.roa
File: _U_w6bXH111HMDU_sQ6-CKmlsuM.roa (raw, json)
Hash identifier: O+NWacU5mxgiI23XoSRRPRaw31TaJyyv5c/Hgp1qWl4=
Subject key identifier: FD:4F:F0:E9:B5:C7:D7:5D:47:30:35:3F:B1:0E:BE:08:A9:A5:B2:E3
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 019B79ED2B82557347423876CFF8E08480BE
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_U_w6bXH111HMDU_sQ6-CKmlsuM.roa
Signing time: Thu 01 Jan 2026 14:19:04 +0000
ROA not before: Thu 01 Jan 2026 14:19:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213088
IP address blocks: 195.187.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:2b:82:55:73:47:42:38:76:cf:f8:e0:84:80:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 14:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd4ff0e9b5c7d75d4730353fb10ebe08a9a5b2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:8d:92:db:aa:42:f8:a0:48:71:ca:cb:17:
42:a7:da:58:9d:e3:b3:f3:4e:28:12:c7:18:a4:69:
21:aa:e3:76:cf:07:1e:d4:d8:e9:b1:20:f9:f5:50:
2f:ca:49:cd:51:f2:e2:86:a6:d9:46:a3:9f:ee:a2:
ac:7e:8d:cc:5a:8d:8d:b6:e5:06:86:7c:81:5b:e9:
0f:cd:b7:85:cc:64:96:11:52:e0:1f:ef:07:c4:95:
6f:75:4e:b1:7a:e8:5f:ef:49:df:58:b7:cd:c7:73:
3d:b5:39:ce:4f:bc:24:0e:a0:83:92:60:3f:21:b6:
50:0a:b8:4c:8c:d0:be:e8:c6:89:a9:f8:d2:41:b5:
b8:60:48:f4:76:3f:f0:72:19:e5:c5:e9:45:33:5d:
95:08:8a:a3:ac:a4:1b:2f:6d:47:9c:a5:30:f7:4d:
12:6e:11:89:2d:f1:2f:cc:b4:c5:9e:cc:0e:c7:ec:
55:86:c8:59:65:05:bb:d2:e8:c3:c0:39:db:00:30:
7a:60:9f:b3:b0:54:71:02:c3:72:6f:9c:ea:6d:2d:
f9:16:ea:56:e5:12:fa:0f:6e:05:0b:57:4c:db:19:
da:8e:8f:cc:8f:4a:67:f4:30:3e:ec:f6:0c:8f:f5:
cc:bf:09:08:59:fc:8a:f7:a2:c7:e3:e6:8e:2c:aa:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4F:F0:E9:B5:C7:D7:5D:47:30:35:3F:B1:0E:BE:08:A9:A5:B2:E3
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_U_w6bXH111HMDU_sQ6-CKmlsuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.76.0/24
Signature Algorithm: sha256WithRSAEncryption
48:28:ac:30:e8:15:94:9d:96:13:21:2a:9f:2d:ec:c4:d7:7b:
11:8a:95:0f:e0:03:81:e7:34:69:3d:42:3c:cd:5e:13:d9:c5:
e7:df:a5:a3:d1:49:00:4b:58:2d:17:97:f7:f8:69:42:3d:e8:
a3:e9:bf:6e:fa:22:c0:d9:f6:f0:7e:b2:b6:7a:82:25:a3:71:
58:d9:64:cb:06:75:69:b6:d3:ab:05:f4:f9:b5:4b:db:1e:0a:
95:be:19:c6:13:87:d2:12:d6:de:e1:56:39:d0:3c:0b:36:b7:
91:cf:a2:33:15:67:42:0a:dd:79:33:4b:eb:f6:63:15:5c:77:
21:48:7d:4a:4f:02:2f:7b:45:5b:b9:4c:79:ce:06:eb:48:e5:
7d:78:8c:2c:03:3b:09:70:3f:f9:fd:bd:a7:51:62:44:0e:4f:
7d:5e:91:fa:88:ad:a3:7b:9f:92:27:58:4e:c2:f7:56:47:05:
37:2f:c1:44:6e:6c:fa:87:16:a3:9e:be:5e:53:4e:c5:9a:71:
5a:32:8b:a4:dd:61:07:4f:f8:fc:6f:90:ae:03:e1:e5:3a:84:
5a:ca:fc:51:85:a1:96:8a:6b:de:e9:a8:42:dd:8d:70:f7:6e:
1c:c5:84:76:b5:6f:34:c0:6e:2e:07:88:4b:94:89:f9:64:9e:
98:73:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:42 2026 by rpki-client