This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/CoyZCfaOcZY80oMLwGYLGifGG00.roa
File: CoyZCfaOcZY80oMLwGYLGifGG00.roa (raw, json)
Hash identifier: nYHBOEN0r4yuBEIDk5skKHs7ZJbN7Zmh9lRo7Z6eAxY=
Subject key identifier: 0A:8C:99:09:F6:8E:71:96:3C:D2:83:0B:C0:66:0B:1A:27:C6:1B:4D
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019B93F88E2FD97BA85314493F961D2F593F
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/CoyZCfaOcZY80oMLwGYLGifGG00.roa
Signing time: Tue 06 Jan 2026 15:41:38 +0000
ROA not before: Tue 06 Jan 2026 15:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 185.54.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:93:f8:8e:2f:d9:7b:a8:53:14:49:3f:96:1d:2f:59:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jan 6 15:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a8c9909f68e71963cd2830bc0660b1a27c61b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:11:44:25:58:0e:36:6e:a1:c7:40:9f:ae:
bc:04:1a:66:69:f1:b2:30:c3:14:04:99:f7:0d:59:
8d:2c:66:ca:7a:1d:fd:7f:cb:8b:32:0e:2b:5a:d0:
8a:12:28:d1:fd:73:c2:1e:08:9a:b7:71:64:79:97:
af:48:e1:bb:db:cd:02:db:04:0b:60:40:c4:87:5b:
18:be:53:df:9b:47:67:4b:78:74:07:46:3c:88:52:
fc:ed:2d:58:d6:81:e5:74:60:d7:66:d3:68:3e:e3:
14:8f:97:6e:d1:7e:e0:2c:57:49:7e:bd:70:81:d9:
49:30:d8:aa:d3:f6:cf:97:21:42:71:89:01:3d:6d:
53:98:5f:7d:1e:54:de:02:ce:ff:99:18:98:43:24:
0f:a6:9f:29:e9:37:3f:54:87:99:1e:76:c5:8f:86:
95:52:ad:7a:38:bd:95:cb:44:04:95:77:91:ac:a7:
e3:86:6d:01:33:8a:9e:5a:68:f1:cb:28:da:93:d3:
99:c4:06:87:4a:05:ac:d6:3e:b3:19:fc:84:e0:78:
1f:20:db:fe:17:0a:da:72:6a:bc:da:a7:f4:fc:f6:
7a:70:00:ac:dc:13:63:40:30:dd:8e:74:1b:bd:5c:
09:26:af:fa:85:af:60:b5:bc:3e:a3:6f:56:66:19:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:99:09:F6:8E:71:96:3C:D2:83:0B:C0:66:0B:1A:27:C6:1B:4D
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/CoyZCfaOcZY80oMLwGYLGifGG00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.12.0/23
Signature Algorithm: sha256WithRSAEncryption
56:09:57:c9:ce:39:f2:d3:6f:dc:1d:18:c7:d8:03:8f:dc:f4:
4c:8a:59:50:76:f3:4d:6f:20:83:bb:1f:20:36:c6:13:33:0f:
32:f3:42:3d:3a:1b:4c:f7:02:f4:ca:63:5a:4f:44:47:07:df:
d5:cb:a7:7e:0b:10:38:5c:ad:89:b1:76:7c:5b:07:de:bc:8e:
f3:da:dc:85:50:f7:9b:23:d1:20:82:c4:4e:5f:69:8e:c9:6c:
0e:0a:14:59:a8:d9:ca:29:75:4c:bc:cf:a9:aa:78:15:bc:26:
47:34:fd:11:b4:cb:e5:55:55:e4:f1:e0:d1:59:b5:25:41:4e:
70:e6:97:2b:fd:e1:de:12:ce:f9:5c:1b:e7:58:34:03:6d:8e:
a2:32:28:5c:f6:58:ff:bd:36:a6:76:9a:61:ac:c8:6f:d5:ff:
a9:dc:e8:cf:e6:3c:b2:b2:42:6c:b2:16:36:1e:35:88:f7:42:
b4:28:a5:e2:3b:51:ef:80:3d:55:fb:f7:0f:5c:ec:c4:d5:ef:
b5:06:17:d6:32:24:fb:33:c7:b0:52:51:b3:f5:ac:7f:4e:0b:
87:0b:f0:59:2f:8c:99:09:d4:ce:bb:92:db:6e:b8:ea:ad:04:
40:09:5d:00:6d:65:9f:f0:f6:42:a0:4b:55:6e:f0:c6:6c:69:
2c:9e:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:13 2026 by rpki-client