This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/LH31eWblzc9N88J9ihjcAEm2GSU.roa
File: LH31eWblzc9N88J9ihjcAEm2GSU.roa (raw, json)
Hash identifier: aA7SpWPZXBL5dHzOmD7+zSVA2s9TImnC5p7oJrbvDXA=
Subject key identifier: 2C:7D:F5:79:66:E5:CD:CF:4D:F3:C2:7D:8A:18:DC:00:49:B6:19:25
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 019B7A5AAFB67BAD34650C13F330EE279840
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/LH31eWblzc9N88J9ihjcAEm2GSU.roa
Signing time: Thu 01 Jan 2026 16:18:42 +0000
ROA not before: Thu 01 Jan 2026 16:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215031
IP address blocks: 195.8.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:af:b6:7b:ad:34:65:0c:13:f3:30:ee:27:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Jan 1 16:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c7df57966e5cdcf4df3c27d8a18dc0049b61925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b9:c3:1d:82:b4:f2:f7:e9:0c:7b:d2:4d:b5:
cb:ea:2b:14:98:67:6d:54:ed:e5:aa:6a:b0:cb:56:
31:f7:62:5a:bf:5b:e3:bd:15:08:d0:c2:34:12:56:
1f:37:6f:c6:f4:9a:86:c4:db:04:db:87:2f:6c:00:
d6:b5:7d:ef:8c:7b:5f:7f:c6:07:6c:c8:c9:5c:f6:
78:e9:a2:76:39:40:22:b2:10:1e:1c:04:e1:7f:4e:
42:e5:ed:12:77:c7:56:09:3f:d5:83:e3:3b:60:60:
61:76:b6:f6:c7:d4:f9:4c:c4:0f:91:09:4d:5f:6b:
e3:67:fa:71:ca:96:62:5b:3c:35:60:ec:53:c9:d0:
93:4d:04:46:47:35:99:2f:52:30:c0:01:93:7a:db:
ca:90:d0:5b:50:ac:19:bd:15:2c:87:d0:8d:0f:9e:
2c:ac:d8:d7:b2:29:ea:68:be:3c:51:94:9d:ee:0b:
d7:52:eb:7e:17:32:8d:ed:f9:c9:8c:ba:33:71:61:
fd:2d:17:04:69:bd:a1:bb:ff:f4:b8:f4:fb:98:84:
f8:eb:60:d6:91:a4:df:61:37:a2:5c:de:da:a9:a9:
c1:7e:ac:ba:aa:a4:1a:95:52:3f:67:3c:af:86:30:
19:45:69:97:b0:30:46:db:a1:71:87:58:f0:38:83:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7D:F5:79:66:E5:CD:CF:4D:F3:C2:7D:8A:18:DC:00:49:B6:19:25
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/LH31eWblzc9N88J9ihjcAEm2GSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.36.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:7b:92:99:f7:2f:fe:0e:e7:eb:b6:1f:12:88:f7:95:dd:41:
05:f9:be:84:15:09:82:55:e7:53:57:3a:31:4c:d5:ff:83:30:
17:6d:ed:e5:7a:69:bf:ad:cb:ad:38:08:39:51:1d:d2:5d:7b:
84:83:08:c2:e3:88:c0:a2:02:34:6a:a2:85:f1:94:fd:cf:49:
a1:6d:8f:e6:47:89:ce:a8:c4:07:f2:25:64:17:e9:56:52:04:
7b:a2:bb:f1:53:df:c9:80:20:b6:34:58:a2:01:b4:c0:9c:7a:
6b:d0:5d:47:ed:17:f8:a7:f3:63:7e:64:b4:8f:37:28:0b:68:
ee:26:39:ca:fe:bb:a4:07:99:f0:50:d2:98:78:ea:95:db:8c:
dd:d3:b6:dc:bf:1e:96:1e:71:90:43:c4:a3:9a:6a:ee:75:aa:
e2:98:b9:78:4f:fe:b0:6f:a8:c2:7f:c6:1b:94:dc:c5:16:87:
24:d0:87:1f:ae:af:b4:b7:da:b9:68:11:58:97:20:c7:6e:ef:
7b:49:a5:f6:cc:c3:7c:0d:59:e0:8d:60:1b:82:53:e4:6e:02:
e5:be:23:47:a6:bb:1e:82:23:f9:ca:2f:d1:c1:a7:41:55:1b:
0a:4f:55:6a:ee:82:35:1a:94:4c:e6:1d:10:5a:d3:63:81:04:
74:e4:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:23 2026 by rpki-client