This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/cBCyxlvufUfGOWDilS38ttT1uvY.roa
File: cBCyxlvufUfGOWDilS38ttT1uvY.roa (raw, json)
Hash identifier: r7Dt5WSAAV3olhtKkx8/cVrUqstLuq8swjnGaqOS5no=
Subject key identifier: 70:10:B2:C6:5B:EE:7D:47:C6:39:60:E2:95:2D:FC:B6:D4:F5:BA:F6
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 019B783531A35D2C1DD03AEE01FB7A40BB0B
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/cBCyxlvufUfGOWDilS38ttT1uvY.roa
Signing time: Thu 01 Jan 2026 06:18:30 +0000
ROA not before: Thu 01 Jan 2026 06:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210425
IP address blocks: 194.60.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:31:a3:5d:2c:1d:d0:3a:ee:01:fb:7a:40:bb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Jan 1 06:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7010b2c65bee7d47c63960e2952dfcb6d4f5baf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:2e:3c:a9:6a:8d:8b:b2:bd:35:d5:89:fa:
81:ff:db:72:82:ec:53:19:26:1c:8b:68:d0:d4:80:
13:6f:68:d2:02:cf:04:27:1e:e0:23:63:24:8c:50:
aa:02:ab:df:bf:97:a3:5e:33:32:80:18:21:e7:38:
32:eb:85:3b:6f:86:f6:5a:d6:c1:41:4d:d5:e8:99:
cb:09:4e:f1:0a:fe:95:91:b2:c9:f1:f6:ad:1f:10:
78:6d:a6:ae:46:37:6f:55:b0:64:55:c3:76:19:fb:
d2:ce:a4:63:19:e3:50:be:c2:c3:5e:03:c5:71:76:
50:3f:6e:57:33:d2:a8:36:dc:5b:c9:49:f0:93:b2:
ed:5f:42:91:f3:81:e2:f8:bc:95:bf:e1:4e:f0:85:
cd:da:b8:59:e7:b0:c1:95:3e:44:88:04:84:c2:a4:
d8:22:24:00:9c:16:67:1c:31:31:ba:e3:63:bf:4a:
6b:63:19:68:88:49:c2:c9:29:2f:41:5d:c3:61:83:
c3:11:58:21:a6:7c:40:42:ec:15:60:e6:52:6c:9b:
0b:b0:dc:ac:29:c9:f9:f0:7f:71:bd:62:46:ba:33:
15:b0:4b:2f:9c:a8:e5:77:31:63:d9:f2:a3:8c:ed:
4f:52:37:4d:0b:fb:42:a6:b1:46:13:1d:30:08:d9:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:B2:C6:5B:EE:7D:47:C6:39:60:E2:95:2D:FC:B6:D4:F5:BA:F6
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/cBCyxlvufUfGOWDilS38ttT1uvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.144.0/20
Signature Algorithm: sha256WithRSAEncryption
50:7d:76:78:71:34:ae:07:83:0b:db:31:57:1b:45:dc:12:34:
12:f0:18:e7:21:a0:d8:81:55:55:c1:cc:e8:20:d7:44:5f:ed:
d7:e6:e0:18:9f:9f:60:5d:ed:3c:e0:c1:70:37:85:24:f6:bb:
18:ff:ea:09:40:bd:74:01:73:24:47:90:9c:36:5d:7d:5f:b6:
36:2f:d0:8b:9e:c7:69:a0:27:ad:29:fa:09:aa:c2:aa:0d:8d:
67:ce:fb:8f:dc:cd:60:6b:d2:b3:bc:f2:ec:3d:5b:34:14:b7:
0a:d0:a0:c3:df:d8:6d:1f:2c:07:d5:87:28:e4:f5:36:7c:06:
82:d3:13:5e:62:2d:13:1c:14:24:a9:7a:ab:7b:28:3a:28:cf:
62:00:19:63:06:a6:15:6f:92:78:f0:ea:18:1c:cb:9e:11:f1:
85:f1:98:25:c5:3e:17:93:c9:72:c3:29:58:5d:42:eb:56:f7:
f4:e9:27:e3:09:c6:9b:9b:b4:69:a0:23:ef:07:6b:e3:25:b2:
bd:c8:2c:a6:3e:97:f2:e7:b9:a0:e4:60:8d:2d:5a:0b:1e:a5:
8d:92:47:c4:63:3f:94:4e:2e:d3:ed:30:c4:ea:fa:48:f3:24:
98:95:17:6c:8b:f2:65:76:a0:fb:15:8f:ce:a6:6b:3b:da:49:
1e:cb:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:21:34 2026 by rpki-client