This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m8kkTcuRnN7jdpecWP_kNkmos3Y.roa
File: m8kkTcuRnN7jdpecWP_kNkmos3Y.roa (raw, json)
Hash identifier: jnO+aeNt2qlytyPa1+EhnJ3mLFArOuo3pXEevkUmRJw=
Subject key identifier: 9B:C9:24:4D:CB:91:9C:DE:E3:76:97:9C:58:FF:E4:36:49:A8:B3:76
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019A588CDC2F55E0107CB5DE8CF3C31B4B5D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m8kkTcuRnN7jdpecWP_kNkmos3Y.roa
Signing time: Thu 06 Nov 2025 09:43:37 +0000
ROA not before: Thu 06 Nov 2025 09:43:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24712
IP address blocks: 193.230.245.0/24 maxlen: 24
193.231.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:8c:dc:2f:55:e0:10:7c:b5:de:8c:f3:c3:1b:4b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 6 09:43:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bc9244dcb919cdee376979c58ffe43649a8b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:e1:17:5c:6a:07:f7:a9:55:83:ac:0e:fc:
84:a8:51:73:46:e0:9b:9f:f0:d0:74:37:0c:f9:41:
9c:f0:aa:76:6f:5c:c5:59:23:13:fa:c9:7f:9f:a1:
f5:c7:b2:47:1e:d2:0e:be:93:ee:a5:ea:5a:97:60:
35:e6:9a:b3:4e:01:66:a3:d8:b0:68:f2:0c:8c:bb:
77:0f:b3:bd:1a:14:f9:2b:b5:6d:bd:cb:2b:61:9f:
95:bc:73:a5:68:d3:52:80:dd:9a:9d:61:e3:5e:6c:
ca:c5:12:84:8d:ff:04:12:4d:a0:f8:68:84:26:65:
70:8b:67:ce:44:46:07:41:d4:85:65:ea:5d:ff:e6:
ea:d0:6c:db:e7:67:69:80:f0:1d:35:67:6d:5d:c1:
e5:20:51:47:62:a8:8a:78:b5:c5:a1:4e:62:e5:6b:
ef:79:05:97:1b:66:6c:d2:12:53:2a:91:36:70:ac:
b7:10:b2:cd:d5:1a:ea:f1:92:cb:48:3d:cb:44:60:
98:21:df:83:89:00:74:cb:a2:f3:6c:64:04:d9:62:
ad:ee:f8:c0:c3:62:e3:22:f9:a0:9d:ec:b7:ad:b4:
2a:02:c4:30:99:fa:a5:9c:56:05:d2:b6:4a:69:25:
d5:95:95:99:8c:4f:b5:93:bd:50:1b:d2:44:19:3a:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:24:4D:CB:91:9C:DE:E3:76:97:9C:58:FF:E4:36:49:A8:B3:76
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/m8kkTcuRnN7jdpecWP_kNkmos3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.245.0/24
193.231.199.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c7:85:f2:2f:87:cb:3b:cc:d4:36:a9:f9:7b:27:70:21:e7:
e3:f4:7d:ce:69:1b:fe:d6:17:ce:df:91:d8:26:bb:27:9b:bc:
cd:f5:c9:77:12:11:cd:b9:13:c9:86:12:e2:c0:7c:75:5f:8a:
0e:01:85:cd:bd:48:1e:53:8a:6d:2a:33:9d:ae:75:44:9c:98:
4b:a8:14:6c:a2:f8:7a:fb:f6:b0:28:1b:4e:15:11:ab:9e:1e:
a6:eb:15:c5:84:93:04:23:61:1a:57:52:26:7f:c2:ab:ce:0e:
e3:e9:e6:e2:66:7e:c8:49:03:5c:13:e5:52:4c:67:b3:e7:49:
1e:35:7d:bb:ce:ee:d3:9d:d3:ab:6d:4c:33:4f:3e:42:e9:2f:
5c:e4:52:4f:18:b9:e9:4c:c4:6c:82:49:2a:de:21:33:86:b8:
3f:06:2b:a5:5f:c4:f1:f9:e9:46:37:93:c6:9f:3f:4c:1b:08:
b2:1a:d5:78:90:5f:73:1b:46:ac:d2:8e:ac:03:86:95:90:ec:
3b:65:6c:1b:1f:a4:1d:c7:b1:51:ef:37:79:39:42:07:a4:d2:
8e:e8:7a:e2:91:08:2c:9f:4a:ff:ce:df:91:1f:2b:95:9f:2d:
06:36:bb:16:92:1c:f2:8b:22:48:3e:de:64:fb:ac:f3:1e:15:
e7:61:f1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 20:13:36 2025 by rpki-client