This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rlXOHU7F4ki_ld-X6JunZKDPDqA.roa
File: rlXOHU7F4ki_ld-X6JunZKDPDqA.roa (raw, json)
Hash identifier: igmr8gY8FIXhBA/WWSd5b9xJmHCfQKCOHox4mM490kA=
Subject key identifier: AE:55:CE:1D:4E:C5:E2:48:BF:95:DF:97:E8:9B:A7:64:A0:CF:0E:A0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B359B158523353BBBDBEB10F80EDC1E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rlXOHU7F4ki_ld-X6JunZKDPDqA.roa
Signing time: Thu 01 Jan 2026 20:17:49 +0000
ROA not before: Thu 01 Jan 2026 20:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213910
IP address blocks: 81.181.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:9b:15:85:23:35:3b:bb:db:eb:10:f8:0e:dc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae55ce1d4ec5e248bf95df97e89ba764a0cf0ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:b6:9a:85:52:59:11:fe:6c:86:0b:e2:78:
66:62:a4:f5:0c:4e:fe:d2:43:78:78:51:d2:df:77:
1c:1e:bf:33:3b:bb:78:e6:6a:c9:80:c4:28:c3:af:
48:f1:b6:c4:d0:45:3f:a2:5f:75:61:83:61:32:e7:
18:b4:1b:14:3a:bb:7e:56:70:33:83:0e:c8:92:24:
55:69:fe:78:5b:55:af:ed:7a:19:06:f2:67:cd:fd:
55:6a:83:34:aa:dd:5c:dd:de:0e:fa:55:d9:d2:fe:
82:7d:2b:fe:f6:bf:e5:ef:9d:c4:ee:3b:69:bb:eb:
56:39:6c:32:54:7c:9c:ef:79:b5:89:cd:27:2b:29:
d0:fb:65:83:a8:ea:17:cd:36:cb:3b:3c:a4:f2:f9:
53:6f:c3:e8:ce:2e:75:fc:c0:cf:66:8a:db:df:38:
0c:e2:16:dc:3a:ca:3c:ff:a6:85:be:30:20:b9:68:
38:a9:de:ac:3a:2a:65:ba:19:b8:14:a3:d0:98:39:
94:27:56:db:f8:76:52:86:02:e9:57:7e:ce:99:80:
ae:71:63:dc:8c:a9:73:4e:46:9a:68:71:bb:cd:d5:
80:fa:05:f9:8a:2c:89:e8:3b:fa:43:73:4f:b8:68:
ab:ca:f2:9f:d4:f8:13:50:0b:b0:b4:d2:76:92:a6:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:55:CE:1D:4E:C5:E2:48:BF:95:DF:97:E8:9B:A7:64:A0:CF:0E:A0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/rlXOHU7F4ki_ld-X6JunZKDPDqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ba:5d:d6:e8:2f:ec:ab:71:77:a3:9d:86:5f:13:96:be:3a:
37:7b:32:ee:44:7c:15:62:28:6c:4e:31:9e:ca:90:a7:e8:e8:
90:8b:f9:5d:a0:cc:b0:2a:08:27:9f:ca:59:31:56:cb:f4:39:
b1:01:90:74:62:b8:99:cb:fb:03:91:b1:50:fc:65:11:a7:57:
ef:17:75:76:bc:f5:a7:58:2c:ed:10:12:f5:9e:54:fb:97:71:
69:e6:8c:ab:05:e2:7c:7d:58:bc:c4:45:ed:f9:d0:30:d0:1f:
b5:99:e0:09:76:0b:f4:cc:7d:69:4d:2b:91:69:8b:56:77:66:
d3:b3:df:39:96:17:17:1f:ca:d4:fc:f6:ec:69:29:8b:00:c3:
4b:27:be:2c:51:71:cc:6f:8a:2d:29:a2:49:e3:a8:80:6a:48:
a7:e4:43:da:ca:64:36:d8:dd:96:fe:1d:1c:ba:bd:65:16:27:
e1:cb:f6:36:1f:3a:c3:b6:29:7d:13:ef:84:2e:bc:04:ed:08:
0f:37:cf:d4:00:37:6a:18:96:43:f6:e3:28:ee:b0:16:9f:20:
e7:6b:fe:19:b9:9b:d3:ad:86:2a:74:cd:6f:8e:fe:25:32:7b:
5c:e6:67:55:31:ec:1f:b7:60:60:ad:d5:6a:b4:f9:a8:a9:be:
76:51:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:04 2026 by rpki-client