This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/imgqZCqNB0x7hUi57UWmLlZwHXo.roa
File: imgqZCqNB0x7hUi57UWmLlZwHXo.roa (raw, json)
Hash identifier: zue6hGof2l69Jjh3NjCo9JKS8QG+nKcGK/R0yrnD0RQ=
Subject key identifier: 8A:68:2A:64:2A:8D:07:4C:7B:85:48:B9:ED:45:A6:2E:56:70:1D:7A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019B797ED066486B134EACE760A63CF2C2B7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/imgqZCqNB0x7hUi57UWmLlZwHXo.roa
Signing time: Thu 01 Jan 2026 12:18:32 +0000
ROA not before: Thu 01 Jan 2026 12:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142433
IP address blocks: 178.219.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:d0:66:48:6b:13:4e:ac:e7:60:a6:3c:f2:c2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 12:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a682a642a8d074c7b8548b9ed45a62e56701d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:18:30:96:6b:48:1e:7d:44:0d:31:f3:6e:
39:4a:42:21:43:1d:7d:33:be:ee:df:8e:dd:7e:50:
0c:b3:be:06:af:54:9e:24:ae:47:d7:94:ac:9f:b9:
5d:43:00:a4:98:89:32:6a:de:43:cb:f0:f8:eb:d1:
5a:da:7b:e5:dd:18:28:a9:78:d0:b9:39:7c:10:a1:
80:35:4c:e9:85:30:d7:f0:9e:39:8a:a0:84:34:c2:
70:cb:6d:23:40:e9:13:e7:6d:3a:08:41:b0:af:fa:
d5:9b:5e:64:29:78:69:81:62:81:0c:10:46:ac:ee:
29:7f:dc:45:04:52:65:d9:22:e9:f5:92:22:24:fd:
bf:71:d4:6b:f8:6e:eb:41:93:47:ac:6e:28:37:9b:
8f:91:83:1b:61:53:03:4b:e7:de:15:df:9f:e3:e9:
ee:d5:7e:c2:36:4c:7c:05:bf:81:69:c6:1e:54:af:
58:f7:e1:2c:8b:54:cb:39:96:7d:c7:6a:74:5f:62:
a7:0a:8e:0c:04:5e:36:b1:43:e7:cd:ea:d8:51:85:
b1:27:d7:f9:5f:15:fe:86:75:e0:03:63:1e:6a:78:
1d:81:82:21:4d:2f:30:24:e0:dc:09:30:d0:ff:c6:
d9:1a:ee:2d:bf:73:8c:9b:cf:76:4e:13:d5:4c:64:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:68:2A:64:2A:8D:07:4C:7B:85:48:B9:ED:45:A6:2E:56:70:1D:7A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/imgqZCqNB0x7hUi57UWmLlZwHXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cf:01:f5:84:98:8a:e4:84:e1:fd:22:d7:5f:21:ed:f1:b7:
03:e2:ee:09:f0:59:47:bb:71:c6:32:39:9d:e4:15:5e:03:4f:
fd:71:09:d9:85:19:07:98:62:94:63:46:d2:c1:df:69:e2:5d:
93:96:59:ac:d1:e4:46:23:d1:c8:a1:7c:c9:e7:67:8b:41:b1:
55:6d:87:0f:e9:cd:79:6b:3c:e5:98:c7:a5:a7:ae:2e:11:c5:
c4:7a:2d:20:9a:d2:cc:65:d4:b9:69:fc:a5:0c:8c:eb:e5:60:
a5:3e:98:e0:64:9a:ea:1e:22:5b:c5:6e:fa:af:7b:54:64:cf:
28:c0:a0:23:b8:1d:f9:e4:c6:73:91:8a:04:40:ff:79:19:ef:
f8:91:50:54:17:13:88:35:01:c1:75:90:da:b8:3c:c6:ab:fb:
f8:7b:50:71:50:6b:01:8f:17:0a:a4:18:44:61:35:4d:25:1c:
57:17:3b:9e:86:39:e2:d1:69:e0:9b:7c:88:b2:92:24:bb:d3:
3e:77:14:1e:d9:c2:24:63:49:76:2a:99:c2:c4:3a:d1:70:46:
92:71:19:0b:6d:c6:71:c7:5e:85:96:ed:e9:3a:8f:ee:c8:ab:
54:98:11:94:e8:5e:10:6b:00:ed:6b:8a:81:5b:c7:e4:2d:ba:
22:dd:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:54:14 2026 by rpki-client