This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/RtXoXW5dRgaOApOfO1ZJckphPdA.roa
File: RtXoXW5dRgaOApOfO1ZJckphPdA.roa (raw, json)
Hash identifier: YTilLPT9OVAklz8VhwrR7q/NmO3vhbipLLdXbu+OrYA=
Subject key identifier: 46:D5:E8:5D:6E:5D:46:06:8E:02:93:9F:3B:56:49:72:4A:61:3D:D0
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 019B7DCB46BB8BCCCFC04A7FB3CB3BD877BB
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/RtXoXW5dRgaOApOfO1ZJckphPdA.roa
Signing time: Fri 02 Jan 2026 08:20:32 +0000
ROA not before: Fri 02 Jan 2026 08:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213375
IP address blocks: 93.157.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:46:bb:8b:cc:cf:c0:4a:7f:b3:cb:3b:d8:77:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Jan 2 08:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46d5e85d6e5d46068e02939f3b5649724a613dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:29:06:be:83:b5:dd:5c:cd:a3:98:a1:ce:
6a:f5:f7:a5:50:3c:74:48:9b:db:85:f2:a0:04:34:
af:46:b9:5d:88:60:71:f6:79:f8:8d:01:6b:5e:d2:
ad:7b:8b:aa:14:d1:96:51:68:35:31:49:33:96:ca:
95:30:bd:81:57:89:35:d2:2b:ad:34:e0:c2:ac:32:
1d:d0:78:d0:65:ac:0d:05:7a:e2:1e:a4:49:0e:d8:
e0:f7:53:d1:27:05:0c:f9:9b:65:e8:49:db:23:12:
d0:42:22:9a:c6:a3:6a:58:5f:a0:69:f9:12:8e:50:
53:c1:e4:44:3e:5f:59:3e:53:f1:0e:19:8f:1d:bd:
43:39:ad:58:7b:ca:50:28:8a:b8:b6:7f:8e:6a:64:
3c:4b:f3:76:a8:a6:62:a6:ac:6a:01:f2:38:c6:8e:
34:3c:ed:fe:61:8d:bf:b6:c2:b4:e9:e0:10:9a:c7:
87:60:dd:0d:2d:ab:02:33:39:0c:ae:b5:b6:fe:38:
e6:c1:c2:88:d4:7b:dd:2f:f8:30:d1:96:69:34:d2:
f0:85:41:ba:02:a4:90:35:d4:44:4d:6f:ed:ef:26:
63:f8:08:08:d3:fb:08:cc:0f:f2:b1:e7:ef:b1:7b:
20:10:80:57:de:fd:7f:7b:67:6d:d1:a3:a9:4e:3b:
bb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D5:E8:5D:6E:5D:46:06:8E:02:93:9F:3B:56:49:72:4A:61:3D:D0
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/RtXoXW5dRgaOApOfO1ZJckphPdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c3:56:23:00:cf:8c:65:f2:8a:e0:01:7f:8d:fe:c6:9e:c7:
ea:16:d8:fe:8e:7c:e1:44:45:1d:74:f8:1d:46:59:97:f8:1a:
cb:97:ed:f9:2b:52:c4:3c:2a:16:c1:0c:75:0b:59:82:03:21:
5e:f8:19:89:c3:41:4e:dc:dd:3b:9f:22:61:6b:9b:ee:01:38:
1c:4c:b3:3d:8a:7b:d3:cf:50:e0:a5:01:4b:11:fa:a6:d3:05:
95:49:75:49:e9:97:77:b0:f3:23:2a:b4:6e:d5:df:b6:4e:6c:
0f:98:10:ab:75:d9:41:44:ce:39:65:71:41:9a:0d:57:04:00:
16:54:66:d8:b2:8d:31:09:f2:30:74:f4:a0:03:17:d3:d4:35:
4d:24:59:28:68:7b:0e:de:9a:e2:a4:23:d6:de:2c:a3:68:db:
82:ae:5c:81:4e:37:93:c2:4c:38:81:94:a5:43:8c:e0:f7:ef:
bd:70:34:20:b1:0a:d6:9a:5a:44:49:7c:98:02:c2:79:5d:57:
2b:38:57:52:1e:cd:c6:12:d9:33:d9:f4:3d:72:0a:20:bb:61:
b7:08:cc:37:05:45:40:98:03:4f:4d:fb:c9:69:c2:3d:78:9f:
37:e7:5b:1c:d5:99:19:89:15:92:2c:de:5e:e6:bc:71:ca:50:
01:ca:f3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:12 2026 by rpki-client