This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/Xedx6t18K1lN2iVg6JylZsX90O8.roa
File: Xedx6t18K1lN2iVg6JylZsX90O8.roa (raw, json)
Hash identifier: rknrmpVMbPTrGouqD8ol7zOt5zIU+0aREZj+NOBKEmQ=
Subject key identifier: 5D:E7:71:EA:DD:7C:2B:59:4D:DA:25:60:E8:9C:A5:66:C5:FD:D0:EF
Certificate issuer: /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial: 019B7A5B5C3EFB15F7C3B8526E9F54A7FE76
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/Xedx6t18K1lN2iVg6JylZsX90O8.roa
Signing time: Thu 01 Jan 2026 16:19:26 +0000
ROA not before: Thu 01 Jan 2026 16:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210394
IP address blocks: 193.201.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:5c:3e:fb:15:f7:c3:b8:52:6e:9f:54:a7:fe:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Validity
Not Before: Jan 1 16:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5de771eadd7c2b594dda2560e89ca566c5fdd0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:6f:88:ba:ce:37:5f:92:2a:01:f9:2b:84:
05:fb:a6:c7:66:5f:df:eb:52:aa:ce:44:78:ef:ad:
29:98:fa:b5:e4:be:fe:8b:6a:d1:95:53:93:c1:a1:
22:52:b4:42:07:9b:f0:2d:66:b2:64:02:ed:72:62:
f5:3f:9a:60:52:78:dd:f7:e2:73:b1:a4:94:89:eb:
b9:60:53:45:25:7b:19:2b:2b:61:6e:a0:41:d3:74:
a4:fc:6f:e6:7c:12:66:23:e2:86:f9:4e:a5:84:fe:
ae:17:82:d8:5e:d4:79:f9:7d:16:64:76:e7:17:6d:
2d:95:2e:c2:24:7e:4b:d2:31:e9:83:8c:89:3e:34:
20:02:d8:fd:d1:f6:0b:e8:11:ac:ec:ed:9c:e6:96:
75:ac:ee:51:e1:cc:c7:09:79:67:e1:3a:ad:3a:bb:
a9:21:39:11:e1:d9:27:cc:63:4b:ef:5c:42:b1:12:
bd:af:1e:36:7b:22:91:96:d5:06:69:4b:a3:17:3f:
d0:fa:08:09:85:c0:fa:78:8c:aa:b9:eb:11:de:ea:
a0:3a:60:a2:32:d9:10:8a:29:d5:85:07:dc:72:b0:
76:23:16:49:fa:e4:b1:b1:c0:6b:1e:d6:b0:45:be:
4c:d0:5c:60:a1:be:65:af:a3:97:4d:ed:2a:b1:c5:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:71:EA:DD:7C:2B:59:4D:DA:25:60:E8:9C:A5:66:C5:FD:D0:EF
X509v3 Authority Key Identifier:
keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/Xedx6t18K1lN2iVg6JylZsX90O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bc:cb:43:58:be:dd:97:c5:6e:59:53:66:e1:8c:c6:6e:51:
b6:e1:10:8e:e3:db:47:19:ea:ae:59:5f:27:b8:f3:e5:3a:66:
05:ee:f8:06:f7:65:ac:6d:ec:d8:6e:64:13:e5:d2:4d:cf:e4:
4f:ed:cc:25:ca:52:63:82:7d:16:8d:99:be:97:a6:7d:a3:6e:
fe:75:70:4b:bb:a1:b6:0b:32:2d:fd:f7:12:77:3d:4f:13:a7:
42:f0:63:46:f4:01:25:b4:1c:d0:ff:db:17:43:6d:24:5c:68:
ac:e9:ff:2e:1b:da:36:a6:40:a7:fe:3a:db:73:9a:d7:95:84:
b4:e0:81:69:d0:0b:c4:3c:bf:81:dc:cf:ff:9c:bf:7d:95:44:
f8:05:05:aa:6a:86:8d:cd:23:15:df:30:d2:af:06:a1:48:b4:
16:16:40:90:d9:a4:f2:ae:c8:4c:b3:69:7e:bb:d2:af:9d:1c:
e9:22:01:0d:c5:20:b6:37:72:c7:4f:ab:ee:5f:78:e6:72:44:
6a:b2:72:09:cc:72:d2:32:b8:88:ae:24:43:83:c4:d7:03:28:
77:2a:a8:4a:55:42:d1:be:0a:c7:a7:14:f2:ff:3d:07:6c:dd:
c7:17:a2:05:90:2a:ae:0b:c5:1a:0e:31:91:95:c3:19:c6:7b:
74:d7:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:07 2026 by rpki-client