This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/0-d96R17ltUSy8fr0RUugwI-BVw.roa
File: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (raw, json)
Hash identifier: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=
Subject key identifier: D3:E7:7D:E9:1D:7B:96:D5:12:CB:C7:EB:D1:15:2E:83:02:3E:05:5C
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019B79EC090AE8BA39978EB14208D635C375
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/0-d96R17ltUSy8fr0RUugwI-BVw.roa
Signing time: Thu 01 Jan 2026 14:17:50 +0000
ROA not before: Thu 01 Jan 2026 14:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205358
IP address blocks: 193.163.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:09:0a:e8:ba:39:97:8e:b1:42:08:d6:35:c3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 14:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3e77de91d7b96d512cbc7ebd1152e83023e055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:66:31:b8:ef:70:0f:14:d3:3b:63:35:37:
fe:ff:e8:8d:d7:ef:ff:68:0c:f3:fc:84:48:70:e1:
8e:9e:30:ba:62:0c:0b:31:61:80:0a:f0:76:e2:46:
3b:27:40:10:66:66:af:ad:ef:c0:39:fe:46:ab:fa:
57:4c:04:aa:3d:ac:4b:03:82:0c:c2:67:52:70:2a:
cd:db:3c:6e:8c:8d:f4:7a:9a:eb:38:c4:de:d7:20:
5b:e5:3c:93:cc:74:d0:8f:e4:dc:73:f4:f2:fb:8a:
c0:a5:57:60:41:03:0b:1b:3d:f3:57:9f:6f:ac:6f:
b8:ef:6c:df:1e:96:9e:91:e0:62:79:e8:c0:11:e0:
a5:d6:8b:10:f6:b1:12:93:7c:03:fb:72:db:42:86:
da:74:9c:e7:b4:c4:6f:a2:60:45:26:81:b4:70:cc:
cf:a8:ae:70:69:14:24:24:23:9d:cf:f8:a0:ea:97:
f7:b7:45:96:c3:88:8c:69:cb:8e:b6:d0:98:c3:79:
66:58:1e:61:9e:c8:f7:24:b8:16:da:a8:23:d6:cf:
03:5d:a0:45:79:97:aa:78:40:4a:15:c8:b0:8e:1c:
2e:69:72:b9:67:8b:72:ec:5f:b2:15:95:78:54:82:
09:57:89:4b:df:28:8e:65:b3:eb:13:5b:83:d2:85:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E7:7D:E9:1D:7B:96:D5:12:CB:C7:EB:D1:15:2E:83:02:3E:05:5C
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/0-d96R17ltUSy8fr0RUugwI-BVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:eb:9b:4d:c0:fb:86:5d:af:1d:f4:14:7d:1e:0d:81:67:2c:
7e:bf:a2:c1:9f:95:83:e0:23:59:48:72:b2:da:3d:1e:1e:8f:
cd:b8:a4:24:c7:7c:d7:e4:f5:51:2e:44:3d:0a:3e:b9:9a:93:
09:3f:60:88:25:45:44:6a:b1:b8:7d:84:d0:2e:df:d2:1f:07:
2b:59:9d:1a:d5:ed:d5:a8:e2:ce:96:d2:9d:79:ce:b7:f4:e5:
84:f0:ea:20:c7:48:07:f0:9e:f0:1c:85:3e:84:8b:c8:2f:65:
f0:a7:49:67:92:ff:64:ab:d6:e3:79:bd:84:d1:c7:1e:44:8c:
34:ae:bd:da:f3:18:13:3a:0c:17:d7:b8:4a:d1:3a:fb:18:e4:
11:85:4c:91:79:e3:fa:6f:d8:e3:62:74:c4:ef:11:c4:e1:08:
f4:84:82:5e:24:26:46:85:d5:0d:fa:a1:a6:07:f7:a9:66:ca:
d1:66:ad:22:b0:1c:3d:ea:e4:71:81:da:cc:23:fe:66:2c:1e:
3f:a6:1b:4d:7f:63:cc:46:8e:68:1d:c4:80:20:74:26:a7:bd:
f4:d1:c1:21:bc:5e:ce:83:dc:f2:8f:ef:a7:b0:fa:3b:74:7c:
86:0a:50:7f:4e:7e:51:15:b8:a9:f2:ed:16:41:8d:f8:ee:eb:
59:ae:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:16:01 2026 by rpki-client