This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/PRykERc8g2pEPeMeJOkzyRIHsss.roa
File: PRykERc8g2pEPeMeJOkzyRIHsss.roa (raw, json)
Hash identifier: wTZyQGyS+bimUaxLdIy2eMQAmiqiN6+yuLEjXp/Nl1s=
Subject key identifier: 3D:1C:A4:11:17:3C:83:6A:44:3D:E3:1E:24:E9:33:C9:12:07:B2:CB
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 019B77C6AD291CC3B48C3420188B44D8A066
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/PRykERc8g2pEPeMeJOkzyRIHsss.roa
Signing time: Thu 01 Jan 2026 04:17:47 +0000
ROA not before: Thu 01 Jan 2026 04:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202220
IP address blocks: 195.149.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:ad:29:1c:c3:b4:8c:34:20:18:8b:44:d8:a0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Jan 1 04:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d1ca411173c836a443de31e24e933c91207b2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:0c:28:ee:c8:c7:2d:48:8c:31:bf:af:51:
fc:8b:d5:d3:e7:f5:cf:17:14:dd:5f:d2:5f:67:4f:
29:b7:62:45:1c:59:cd:35:fb:9a:71:2f:e1:2a:1a:
4c:74:1f:03:d2:ce:d6:63:93:9c:eb:68:d6:56:48:
3a:62:0e:2e:b4:2b:cf:48:33:22:4d:aa:83:fc:df:
7c:c2:08:f0:68:4a:59:63:e5:00:51:ae:21:d3:3f:
23:8b:fe:fb:18:77:af:de:2e:e4:ea:b9:c2:21:e2:
fa:56:e5:cc:dc:fc:07:bc:22:85:67:19:e3:7d:63:
91:97:43:87:5e:f8:8e:3c:1c:57:bb:f8:2d:ef:4c:
99:c0:92:de:47:d9:a6:e8:d1:c9:db:19:7c:7d:a5:
90:c8:88:ea:24:b8:5b:a7:20:fc:8a:67:9b:91:58:
12:04:4c:1c:5f:ed:10:64:86:d8:8c:09:e5:6a:85:
26:03:0b:6b:71:05:01:71:b3:02:34:cb:80:06:32:
28:d1:63:9e:8e:dc:cf:9d:78:ca:93:c4:8e:23:67:
45:d4:8a:77:26:fa:20:7f:e6:b5:b5:e6:12:e5:26:
25:88:f8:7a:7c:eb:b9:1d:09:62:f0:bf:1f:30:05:
7e:de:08:e6:5c:43:95:83:b5:2c:f8:e1:fd:09:1a:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1C:A4:11:17:3C:83:6A:44:3D:E3:1E:24:E9:33:C9:12:07:B2:CB
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/PRykERc8g2pEPeMeJOkzyRIHsss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.98.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d0:04:e9:a0:36:6c:4a:bc:27:3e:f2:8d:5c:4f:ed:17:11:
54:d0:b1:0b:30:db:6b:25:ed:73:ed:b6:29:3e:be:44:a9:ab:
2e:82:6c:ca:53:ce:31:c6:2d:33:fb:f7:01:55:2c:24:c8:07:
b5:14:88:7c:25:aa:97:ef:22:fd:ad:d8:48:65:45:9b:31:35:
4f:f0:50:51:5f:87:4f:89:f8:97:c8:b0:25:a6:c2:15:a3:c0:
68:d2:3f:a3:43:aa:42:01:b5:1e:55:18:4c:d7:1b:22:dc:40:
f8:b9:f1:d7:44:49:5e:5e:ee:95:49:a0:72:2f:56:cd:96:5c:
29:88:e4:7d:1e:a2:9a:8f:5a:46:83:93:36:99:c2:ab:de:88:
7b:1d:d7:84:db:e7:38:54:90:0c:7a:c9:68:4d:dd:9b:f0:2e:
b4:a7:7d:a6:06:df:45:ab:dd:f4:e9:52:65:eb:09:5f:d7:fa:
64:8a:8a:43:00:9e:54:8e:43:2d:9b:ec:c5:a6:ae:e1:57:df:
e2:ff:79:55:e8:34:1d:1c:9b:07:2f:0f:47:0b:77:32:fd:98:
46:25:d9:b9:8c:fa:69:8b:32:4d:b7:a9:08:8a:4c:74:d1:68:
67:d1:d5:75:0f:20:60:49:db:88:e5:43:79:07:b0:4b:38:74:
c1:1e:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:50 2026 by rpki-client