This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YoyxMiFpipJ-5w1TGxh3KWk-baU.roa
File: YoyxMiFpipJ-5w1TGxh3KWk-baU.roa (raw, json)
Hash identifier: WUJmJPkcFlO/gjcTzNoZEEvXCJGRF9GitXQf+aN6lXk=
Subject key identifier: 62:8C:B1:32:21:69:8A:92:7E:E7:0D:53:1B:18:77:29:69:3E:6D:A5
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019B797E6E200E9CED4B2EA193CF3665D966
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YoyxMiFpipJ-5w1TGxh3KWk-baU.roa
Signing time: Thu 01 Jan 2026 12:18:07 +0000
ROA not before: Thu 01 Jan 2026 12:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63902
IP address blocks: 176.97.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:6e:20:0e:9c:ed:4b:2e:a1:93:cf:36:65:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 12:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=628cb13221698a927ee70d531b187729693e6da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:3b:02:ee:c7:02:24:be:62:d7:32:e6:6c:
3b:38:46:8c:f8:03:de:31:00:06:88:56:97:73:9f:
9d:1c:62:18:69:61:05:bb:d5:91:b7:f2:7b:09:fb:
52:83:c0:60:9d:3b:0b:e7:d8:c7:21:4a:df:5d:45:
f2:97:c8:55:28:4b:14:a3:c6:fb:3d:dd:19:88:b1:
0d:ad:91:27:5e:8e:b6:02:09:3d:0e:0b:e6:ee:4e:
c5:c6:1d:b5:d9:04:d6:2e:1b:b7:33:62:5c:1e:6a:
a1:5f:a9:af:b3:d5:71:45:59:05:c3:11:95:58:54:
e9:47:27:14:ed:74:1c:1b:15:4f:ba:cf:7c:69:e6:
f1:ea:19:32:0c:b7:38:87:0e:54:6f:9e:cf:56:c6:
62:55:78:55:7e:8e:c7:60:64:06:59:74:49:f9:04:
c6:d4:9b:6e:1d:3e:7c:f9:47:18:0f:49:26:53:25:
b1:43:a0:70:2c:99:c2:12:aa:bc:92:02:a6:3f:44:
db:c8:c3:b9:64:59:ef:40:4b:ed:4c:bf:83:57:a0:
fd:7a:ef:38:75:c0:5a:36:eb:5b:21:a5:13:b2:f7:
ce:6c:73:57:5e:12:d7:69:3d:55:e2:33:83:86:ce:
16:36:52:bf:ac:a2:1e:57:e3:0b:f3:a2:f1:bb:0c:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8C:B1:32:21:69:8A:92:7E:E7:0D:53:1B:18:77:29:69:3E:6D:A5
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/YoyxMiFpipJ-5w1TGxh3KWk-baU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b3:78:f1:ae:d4:ca:69:12:a4:ad:f0:0e:62:6c:b1:f4:09:
e1:77:dc:52:b9:4f:2e:de:4c:f2:46:1c:a0:27:20:e6:00:3d:
58:3f:d8:5c:0e:f6:22:fc:5a:79:f9:e4:f5:5c:c2:f8:c7:1e:
4a:2e:41:f6:c7:15:c3:db:36:05:48:2c:19:14:95:81:51:8b:
d1:84:eb:1f:98:b2:cb:fb:77:0b:79:0f:d3:5c:e7:16:c9:c2:
c2:3d:8a:99:18:2e:18:7a:1e:e0:db:c3:2c:6e:b6:29:1f:b8:
e4:94:64:d5:20:c6:6f:18:ef:f7:fb:34:ef:80:4b:2f:9f:a1:
9c:4f:01:78:c1:54:9c:aa:33:ea:20:54:6f:67:95:b4:c8:b6:
ea:f8:49:77:c9:11:27:64:ac:3a:59:cf:1e:f0:be:74:0f:bf:
63:38:33:fe:3e:e9:c6:e8:9f:71:31:c1:7f:f1:a2:b6:1c:fd:
0e:3a:05:68:83:33:89:84:c2:d8:1e:f4:cf:fe:24:95:d4:0f:
05:67:c4:bc:7c:f2:6d:05:50:c5:5a:b7:5d:36:56:5c:9c:44:
e4:1d:37:8f:2b:7f:46:b8:5b:ec:c9:f4:c9:aa:b4:70:ee:9a:
5d:da:11:7b:c5:03:d8:73:9b:84:01:ea:ab:2b:ea:88:f7:d8:
03:e5:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:55:15 2026 by rpki-client