This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RoNeMfl0MR-_uIY7Hj4SH1RDZdY.roa
File: RoNeMfl0MR-_uIY7Hj4SH1RDZdY.roa (raw, json)
Hash identifier: EejUear6PacGFgEC96fMWGR2bUap8PG3bpGpNG9emh8=
Subject key identifier: 46:83:5E:31:F9:74:31:1F:BF:B8:86:3B:1E:3E:12:1F:54:43:65:D6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019B797E6C67678D64DA9BCDDCE072649CAD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RoNeMfl0MR-_uIY7Hj4SH1RDZdY.roa
Signing time: Thu 01 Jan 2026 12:18:07 +0000
ROA not before: Thu 01 Jan 2026 12:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46261
IP address blocks: 193.93.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:6c:67:67:8d:64:da:9b:cd:dc:e0:72:64:9c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 12:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46835e31f974311fbfb8863b1e3e121f544365d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:fe:20:7e:27:ff:8e:4c:07:42:de:65:4d:
87:35:62:de:51:63:c0:f4:a0:be:63:3b:04:5f:cb:
79:15:b0:3f:7c:f8:e9:70:30:f9:ac:f5:ed:4f:63:
8e:4b:e2:25:e4:90:02:4c:37:bd:e6:0d:dd:b3:3a:
51:04:eb:58:17:f6:cb:56:ac:1e:51:ab:5b:cd:b4:
f9:73:1f:54:35:9a:57:ad:3d:7e:bc:47:3e:c1:93:
78:4e:63:41:a0:91:c0:12:87:ca:06:c1:42:cd:87:
e3:27:5b:0a:05:db:85:a2:c8:a8:d2:08:0a:1b:22:
0f:6f:de:bb:e9:70:92:9d:06:35:b9:91:b5:df:a2:
55:1b:37:ff:d1:ae:06:71:c2:c3:7c:1f:0a:7f:9c:
29:99:0a:27:41:29:5a:70:a4:a8:49:04:87:16:ba:
7e:01:5e:3f:e2:73:ac:2a:04:47:52:8b:db:85:7d:
36:a9:22:68:a5:6e:68:0c:e3:34:68:0a:c8:76:bf:
ee:ac:7f:e7:15:1a:20:95:15:88:70:7b:8e:28:c1:
0e:5d:0b:1c:4d:f5:1d:d9:e7:15:f3:a9:ae:5b:23:
11:c0:b9:44:4d:82:82:5e:c6:9d:97:cc:08:97:06:
c4:cb:92:2c:8c:04:a8:f4:c8:54:02:15:c6:f0:83:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:83:5E:31:F9:74:31:1F:BF:B8:86:3B:1E:3E:12:1F:54:43:65:D6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/RoNeMfl0MR-_uIY7Hj4SH1RDZdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2c:2f:c9:0f:42:2a:d0:52:b5:11:f2:e8:cd:54:c2:d8:a2:
6c:aa:7d:86:19:8c:ac:6d:a6:d0:11:88:34:c9:bc:65:fa:ba:
30:1b:bd:c3:1f:51:83:14:5e:f2:dc:1c:db:88:ae:4a:ea:86:
f5:2f:b4:39:55:ac:87:f2:91:ab:0f:77:ee:9f:8f:76:7a:32:
77:99:1b:8b:0e:6f:95:d6:d4:95:2b:ce:be:2e:4d:a4:36:e6:
37:ca:73:0d:bd:80:a4:cf:eb:97:1f:b8:7f:df:f4:c9:e6:24:
79:ec:dc:12:e3:ea:a3:41:a2:b0:4e:cf:2d:f3:ad:a5:44:56:
e9:16:54:67:9c:b6:d4:0a:e5:87:91:99:81:42:bf:d7:08:c8:
c9:1a:38:14:74:cd:ff:26:e7:f0:c4:18:90:ee:23:a3:d8:ef:
66:05:81:03:1d:de:60:09:37:d2:6c:9c:3b:89:75:90:ff:2d:
99:ef:75:36:fe:25:77:93:b1:e0:32:6f:3b:7a:a7:18:cd:7a:
b4:f7:79:88:2b:2e:5e:c1:1d:09:dd:4a:8e:db:0e:0e:7f:f9:
69:61:c9:03:8c:05:5d:6c:77:de:10:bb:f7:db:ce:dc:3f:21:
cd:a3:42:3e:67:14:96:af:ce:87:14:09:69:35:1f:35:eb:72:
bf:9d:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:54:13 2026 by rpki-client