This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/203Z0jsyzJclHx7Yxf0YeUAkHnY.roa
File: 203Z0jsyzJclHx7Yxf0YeUAkHnY.roa (raw, json)
Hash identifier: uCnfQrok4ghXvOYPf3OdiPichNtqUZ3rFeQK4UXNE2A=
Subject key identifier: DB:4D:D9:D2:3B:32:CC:97:25:1F:1E:D8:C5:FD:18:79:40:24:1E:76
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019B7C7F519C7B169E95B37BC6D20AB901DF
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/203Z0jsyzJclHx7Yxf0YeUAkHnY.roa
Signing time: Fri 02 Jan 2026 02:17:57 +0000
ROA not before: Fri 02 Jan 2026 02:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30725
IP address blocks: 85.232.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:51:9c:7b:16:9e:95:b3:7b:c6:d2:0a:b9:01:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 02:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db4dd9d23b32cc97251f1ed8c5fd187940241e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:42:1d:26:0b:e1:07:e4:07:17:fc:77:3d:4a:
d8:6b:b6:55:48:2e:50:67:e9:e7:2a:7a:7d:fd:cf:
d1:7b:4e:fc:e4:4e:b4:67:ce:f2:c6:0a:14:e5:81:
58:d2:70:e5:ca:ad:ea:eb:a9:36:02:e8:6e:46:49:
14:23:b0:2f:32:25:19:d3:be:17:b3:fa:21:78:d1:
03:5f:d1:62:62:0e:f0:75:af:ae:8f:0a:68:88:34:
a1:1c:48:2a:65:b4:7c:b5:3d:1c:69:f1:40:4c:a6:
16:9f:93:24:67:60:bf:39:ea:ce:4c:08:dc:f1:83:
ea:c4:34:69:07:88:5a:18:b9:5e:5e:2d:53:87:da:
bc:94:42:83:1e:64:26:b8:1f:98:6f:a3:33:f7:9d:
cb:be:5a:6b:57:91:66:6d:91:1c:ba:e3:14:11:52:
4a:c1:6e:c5:64:37:00:23:db:52:ed:a5:8d:85:da:
d2:f1:84:9d:db:c2:22:2d:95:09:44:69:23:26:5a:
72:26:3a:54:5c:43:86:76:19:05:5a:a7:91:79:4e:
f6:df:d0:a2:a3:e1:1e:1c:82:ba:61:cf:f1:29:30:
1e:0b:2a:6a:ad:43:30:45:4e:9c:aa:fa:41:ba:e9:
1d:fe:45:ad:89:74:2f:dc:c5:58:8d:c4:9b:19:29:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:D9:D2:3B:32:CC:97:25:1F:1E:D8:C5:FD:18:79:40:24:1E:76
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/203Z0jsyzJclHx7Yxf0YeUAkHnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.244.0/24
Signature Algorithm: sha256WithRSAEncryption
06:85:8f:1b:6d:3f:3f:f4:df:12:c0:ec:93:03:d8:93:3a:20:
e7:56:25:d2:bb:59:57:7c:b5:9f:6d:03:68:c6:20:d4:34:52:
70:ca:ff:80:71:2d:89:7a:6c:d3:63:4a:f4:fd:5c:bd:eb:e1:
47:be:d2:10:82:ff:83:a1:13:12:85:6b:d7:95:6e:46:df:95:
56:bd:7d:a1:6b:8f:e1:44:da:81:c1:fa:1e:ce:da:53:8f:fa:
86:c2:76:43:77:60:a2:3e:70:82:a1:a2:fa:54:d3:66:7e:85:
c1:f0:6e:09:9f:4f:36:12:34:79:2e:90:5c:6d:38:d4:d7:02:
41:ec:d6:ad:05:d1:41:92:fe:a4:94:32:14:c3:e4:ad:fb:5d:
6b:da:56:57:59:3f:26:d2:53:7a:a9:6d:2f:34:a6:51:37:04:
61:8c:d5:cb:51:2c:c3:46:ed:a8:3d:8e:98:ab:a9:28:1b:c3:
cb:8b:f6:ab:cc:97:40:e7:72:2c:ea:0d:db:12:5f:ed:39:db:
42:dc:9b:77:86:31:97:4f:6b:e4:1e:47:8c:98:a3:c8:c8:a7:
11:64:b6:c7:76:69:a0:a2:da:27:f9:6d:13:62:0d:4e:02:48:
49:e5:5a:24:16:d7:a1:46:76:8a:79:5d:7d:0e:11:88:9b:fd:
f2:60:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:23:20 2026 by rpki-client