This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/A50jm4RKuLhFP5pmOh8yo-bEAx4.roa
File: A50jm4RKuLhFP5pmOh8yo-bEAx4.roa (raw, json)
Hash identifier: uMoMI/3gHlBNr9Dclj/R38BqLAJ7Q+D5bCBwp5a+gbI=
Subject key identifier: 03:9D:23:9B:84:4A:B8:B8:45:3F:9A:66:3A:1F:32:A3:E6:C4:03:1E
Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Certificate serial: 019B7F8428F553455CD949AB18043DBFBCAB
Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/A50jm4RKuLhFP5pmOh8yo-bEAx4.roa
Signing time: Fri 02 Jan 2026 16:22:06 +0000
ROA not before: Fri 02 Jan 2026 16:22:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35758
IP address blocks: 193.169.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:28:f5:53:45:5c:d9:49:ab:18:04:3d:bf:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443
Validity
Not Before: Jan 2 16:22:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=039d239b844ab8b8453f9a663a1f32a3e6c4031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:67:6b:a1:33:ce:e5:6f:64:9b:0a:2a:7c:
bc:c2:86:98:8c:68:fe:03:29:25:a0:9e:f1:ed:ce:
05:ed:e1:5d:92:42:2d:b9:d5:3c:5d:4e:46:2e:b7:
72:97:f4:8b:4e:d8:76:40:f7:e9:a9:c8:b9:a3:e7:
31:53:54:93:c8:ae:52:17:0b:dc:a6:98:75:33:a8:
5e:75:7e:4e:11:7d:5a:68:61:5e:c1:42:25:6c:71:
10:20:94:0e:49:70:75:b3:f5:eb:73:4f:af:b5:6b:
b0:7e:d1:ed:04:79:f9:34:91:2a:19:a8:ce:3a:ea:
81:3e:ea:c2:cc:82:6b:3d:a2:bb:22:3b:e1:6b:47:
26:a4:25:c5:eb:3b:ea:4d:d7:9f:15:a3:e5:c8:2b:
b7:45:67:d6:8c:cc:56:57:1e:d6:56:b9:67:3d:b9:
16:7b:13:68:33:3d:41:23:f9:d1:e9:a4:2e:73:97:
b1:54:79:97:fd:07:6f:27:bd:c9:94:09:d7:2c:09:
ca:f8:36:70:7d:2b:04:18:4a:ac:59:c9:33:69:df:
6f:42:11:fb:ca:8d:86:a1:9c:5a:c6:df:39:c0:86:
5e:47:9e:9e:ce:6e:87:94:c7:4a:5d:59:a2:a2:bd:
19:09:ab:c3:10:11:f0:1a:1b:53:d5:9a:e0:bf:24:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:23:9B:84:4A:B8:B8:45:3F:9A:66:3A:1F:32:A3:E6:C4:03:1E
X509v3 Authority Key Identifier:
keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/A50jm4RKuLhFP5pmOh8yo-bEAx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.229.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b9:f2:eb:a1:f8:d1:c4:f6:08:02:0f:44:c9:0b:74:d1:74:
83:44:53:84:94:85:3b:d1:5f:e0:0b:1a:7b:e2:e4:2c:70:f5:
4f:23:e1:d8:9a:69:fa:fa:de:85:80:39:10:0a:ab:3e:c9:da:
15:0f:46:de:b3:db:62:a8:c7:bd:c9:89:7d:b5:8d:dc:bf:84:
fd:3c:fb:34:5f:7f:7c:e3:66:20:e5:06:ef:ae:da:81:eb:be:
ee:6a:05:00:7d:36:7f:be:2d:d5:f2:1c:67:fc:4e:8d:86:d2:
ab:f3:75:fa:ac:99:d4:54:91:a4:57:ed:e0:26:a0:d7:65:e8:
9d:87:fc:79:38:af:dd:79:ae:dc:e9:af:f1:b2:90:e2:1a:13:
12:04:df:7c:78:0f:d2:30:62:eb:2a:48:dc:80:3c:41:f0:21:
d2:39:f7:5a:04:5f:03:cb:04:67:65:81:07:b0:97:c9:d4:0a:
b7:8f:cf:a3:3c:c5:79:a3:71:d6:1f:b0:20:42:24:2e:57:d5:
7f:44:e0:83:34:f9:60:9c:22:01:5e:1a:d3:0a:41:0e:c6:68:
af:84:66:eb:d6:94:0f:6d:9f:c9:b9:6e:85:6c:09:04:85:2a:
64:05:2d:16:db:35:1c:14:b9:57:2f:de:16:41:1b:8c:d3:9f:
de:10:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 13:13:33 2026 by rpki-client