This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa
File: Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa (raw, json)
Hash identifier: 7uDt9sXJ9Vu86jMv8zfP4uTHUwIIxRFk4x+ECZ536qo=
Subject key identifier: 63:59:67:41:4E:3C:CC:B3:1A:66:3E:63:8C:C3:6E:D6:3A:82:A4:7D
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019B7B362CBC2216EA2E5BA621CDDC8DB193
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa
Signing time: Thu 01 Jan 2026 20:18:26 +0000
ROA not before: Thu 01 Jan 2026 20:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197932
IP address blocks: 37.60.200.0/21 maxlen: 24
193.39.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:2c:bc:22:16:ea:2e:5b:a6:21:cd:dc:8d:b1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Jan 1 20:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=635967414e3cccb31a663e638cc36ed63a82a47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e1:4b:c4:26:b9:e8:90:c3:30:05:ef:8d:bf:
68:aa:5e:d6:2b:dc:29:bc:b3:ed:18:b6:2a:eb:f1:
ed:f8:c0:cf:71:bd:2b:d6:8f:8b:9c:26:54:c8:94:
98:71:b8:57:2d:87:35:0c:9c:da:6c:fb:5f:05:82:
13:f1:5a:a8:36:19:d9:00:3b:c0:ee:b3:0b:f3:da:
d1:61:e8:7f:5d:a3:50:7f:0f:9f:80:70:26:0d:fd:
af:91:2d:b7:ed:03:d8:5a:5a:55:27:ee:d6:a0:53:
88:4e:3b:14:60:c0:17:78:0b:c4:c2:62:f8:b0:75:
1e:66:97:5f:30:0a:88:eb:a1:61:10:62:88:88:4a:
4f:02:d2:13:73:e9:ac:81:1e:ea:6a:5c:88:f7:70:
de:7a:78:c8:00:30:e3:98:54:ff:19:c1:dc:c9:20:
61:2f:01:47:2f:cb:5b:62:23:2f:37:2f:11:4c:86:
b7:dc:d1:7d:6a:d3:77:60:aa:a1:bb:10:8e:f5:67:
a9:f6:f4:79:5f:27:d2:89:37:14:a3:93:5a:c7:51:
02:3b:a5:ef:d4:dc:3f:c7:4b:80:ae:54:90:a3:05:
a0:8b:66:59:e4:a3:d3:86:4c:0d:a9:e2:32:d2:84:
bf:74:d7:8b:ea:37:6b:4a:d2:5c:24:74:ec:a3:02:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:59:67:41:4E:3C:CC:B3:1A:66:3E:63:8C:C3:6E:D6:3A:82:A4:7D
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Y1lnQU48zLMaZj5jjMNu1jqCpH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.200.0/21
193.39.192.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fd:1a:db:2b:b1:a0:56:d4:f8:7b:3e:e2:0f:b8:51:7f:e6:
ae:5e:63:8d:5b:58:c9:28:2d:0f:93:06:9f:3c:19:d4:52:15:
4c:b8:1a:62:5d:fd:d0:c0:21:11:6a:b5:25:81:78:27:f8:20:
96:88:ab:3d:c6:e8:48:0e:00:ea:4e:86:d4:f3:5d:51:6a:18:
f6:68:d2:57:07:58:64:2f:02:90:28:c2:87:b9:c7:f0:27:8a:
66:ec:b5:11:59:67:19:db:c1:78:96:75:ed:a1:02:a6:f5:bf:
ce:b9:69:5f:32:74:2d:32:e1:b8:6c:2f:96:46:4a:a5:6f:8a:
54:50:c1:84:36:66:10:b6:16:7d:14:a2:72:6a:ae:5c:5b:93:
f6:4d:da:5e:85:6f:55:6b:ad:dc:f6:8a:88:76:e6:72:31:17:
f8:42:18:21:8f:87:1c:15:4c:88:21:b8:a7:26:61:61:fc:2a:
f2:10:57:b7:81:7e:a3:92:9d:82:e8:bc:99:bd:ba:a1:b6:0f:
34:56:ff:91:7a:ed:70:0b:69:25:dc:97:aa:0c:ef:1c:cd:c8:
12:2c:04:d9:6b:09:ed:f2:3b:26:03:72:e1:7d:07:67:ce:9e:
2e:23:7e:ab:49:34:23:3a:1e:f7:ad:19:94:79:3f:5a:14:40:
b8:61:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:55 2026 by rpki-client