This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/DrNj16KdHBydg-pgyLTL6B45LSk.roa
File: DrNj16KdHBydg-pgyLTL6B45LSk.roa (raw, json)
Hash identifier: aO4vG1Y0PWHmNb5jF8du/ccBdv9Na2OGncKoGutGl4g=
Subject key identifier: 0E:B3:63:D7:A2:9D:1C:1C:9D:83:EA:60:C8:B4:CB:E8:1E:39:2D:29
Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial: 019B7B355B7725047F972A47FA8CBA9E1608
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/DrNj16KdHBydg-pgyLTL6B45LSk.roa
Signing time: Thu 01 Jan 2026 20:17:32 +0000
ROA not before: Thu 01 Jan 2026 20:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8351
IP address blocks: 193.105.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:5b:77:25:04:7f:97:2a:47:fa:8c:ba:9e:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Validity
Not Before: Jan 1 20:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eb363d7a29d1c1c9d83ea60c8b4cbe81e392d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:3f:2c:d1:73:70:16:a6:dc:d2:b8:97:d6:
21:d1:fc:4b:d8:27:aa:ea:54:fc:e7:e6:c4:4e:db:
1a:86:4b:b9:cd:20:03:51:1a:29:71:45:62:46:27:
23:69:c1:d9:8a:af:5d:1e:54:75:06:ad:86:13:19:
ec:32:44:42:5e:2e:b9:bc:9b:b8:d3:04:c8:50:9a:
ca:1e:c8:83:32:65:49:b3:47:75:87:27:6a:1f:3a:
8e:14:1b:0e:e9:f7:50:a0:dc:ec:70:bb:38:02:de:
f9:15:fc:49:24:35:fc:2a:50:af:32:bd:2d:06:2b:
e6:a5:7e:98:0c:a1:17:0c:6f:50:0a:40:51:db:5c:
e2:9d:c6:a5:f8:fc:75:3e:f7:08:50:fb:9f:fb:c7:
41:00:78:02:40:7c:dc:87:9d:4d:aa:01:6d:80:17:
cb:6f:6f:00:a4:d2:33:31:11:15:18:eb:7c:7a:be:
15:4b:44:8d:6d:cf:76:a9:00:ae:83:d2:61:82:89:
68:a0:c7:26:0f:ad:6e:d2:57:b1:36:b0:87:c9:3b:
bc:5f:af:51:97:f5:44:45:bf:d5:14:10:14:53:8c:
9c:8d:61:58:66:66:e1:81:cc:8a:cf:25:85:23:a9:
11:79:c3:88:3c:8e:8f:63:80:93:8b:5e:e1:9c:53:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B3:63:D7:A2:9D:1C:1C:9D:83:EA:60:C8:B4:CB:E8:1E:39:2D:29
X509v3 Authority Key Identifier:
keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/DrNj16KdHBydg-pgyLTL6B45LSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f3:e8:8e:54:16:33:20:f1:5e:21:cd:9f:e9:ad:4b:66:01:
ad:13:8c:cf:fc:ff:0f:dc:97:e3:22:4b:c8:b3:04:4f:b0:bb:
d2:a5:e0:a7:ec:1e:3f:4d:49:e2:8a:6b:58:ae:79:20:6d:1c:
21:84:17:2c:6a:37:a6:80:9a:da:1a:4d:78:bb:20:12:7a:77:
6f:c3:12:58:0a:ca:4c:77:dc:d0:c2:1c:29:1e:dd:a8:12:1a:
83:ba:1c:99:e6:9c:5c:96:e4:b9:78:67:26:f2:a9:18:56:4d:
7c:63:94:8b:65:08:bd:31:7a:37:6c:d0:ca:a1:6e:40:94:02:
40:0d:3b:e0:8f:69:1c:d2:b0:ee:23:af:4b:8f:d9:05:ce:0d:
91:7d:46:88:b6:82:ac:d0:8f:42:90:0f:bf:15:19:7c:ec:78:
3d:ed:94:82:46:c1:5d:7c:b1:1f:55:39:de:7b:c5:74:96:4c:
30:0d:83:66:51:69:2f:81:e0:9d:e2:e2:9f:a0:08:63:15:5a:
cf:42:b2:34:b0:5d:9f:a5:01:59:7f:a1:1c:ed:ab:bb:5d:04:
25:bd:37:9f:c3:b6:da:f1:09:3a:0f:8f:f6:fb:b8:f2:6a:85:
28:c5:be:16:c8:3b:be:b5:87:50:da:8b:73:db:ec:f5:cc:74:
61:50:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:35:57 2026 by rpki-client