This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa
File: fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa (raw, json)
Hash identifier: UicbF6HqFzNjuTONdGcIiDeIjerH1Ziz3AoeI+o7LaE=
Subject key identifier: 7F:2D:31:2D:17:1E:74:AA:DD:3B:3F:ED:72:A5:B5:5B:3F:44:61:5F
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 019B7C8008C2EA9BEE3431E35E5C6B342F42
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa
Signing time: Fri 02 Jan 2026 02:18:44 +0000
ROA not before: Fri 02 Jan 2026 02:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200375
IP address blocks: 193.178.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:08:c2:ea:9b:ee:34:31:e3:5e:5c:6b:34:2f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Jan 2 02:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f2d312d171e74aadd3b3fed72a5b55b3f44615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:2d:0b:db:ad:53:7f:14:e1:da:4d:90:ed:
3d:39:f8:96:e6:63:b5:f6:9d:e1:e4:1e:f0:a8:77:
cb:3b:ea:48:d6:d9:08:23:e3:29:89:2f:c3:c5:24:
d9:40:ea:bf:e5:85:87:66:b4:e4:1b:9f:0a:d5:c8:
58:94:71:4b:d4:75:53:22:0a:e6:07:20:34:41:b8:
ea:5f:74:8c:27:5e:5e:dc:54:9c:ee:49:79:2f:00:
82:e6:a0:c6:60:e0:70:a0:78:96:55:c0:0f:1d:ec:
0d:88:ee:3e:ea:f8:a2:f3:b7:ac:4c:3c:d2:79:e9:
f1:bf:c9:70:50:14:25:6a:2f:04:31:34:e7:d6:69:
e4:a7:50:bb:d0:ba:c2:b2:8a:d4:1b:e1:e2:2b:a0:
dd:be:5a:e7:cb:c0:81:af:01:8a:a4:f9:cf:53:6d:
d9:35:d3:c4:46:24:9d:76:4e:b3:ad:2c:1f:15:e2:
e8:c8:b7:4f:3d:e6:c5:39:d8:1b:b0:78:43:df:e9:
63:83:e9:0d:8f:ed:0b:52:78:95:5a:93:5a:e1:bf:
78:50:e8:cb:f8:bb:ae:e6:b3:2f:89:07:6f:cb:e9:
e7:08:15:55:6b:eb:52:ef:b5:ef:a2:e3:1a:6d:9e:
80:27:49:e6:af:a4:e4:8e:aa:b3:7d:9d:a6:58:09:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2D:31:2D:17:1E:74:AA:DD:3B:3F:ED:72:A5:B5:5B:3F:44:61:5F
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:d9:8f:d0:97:78:09:d1:e3:88:19:4c:d2:1d:79:b4:9d:1a:
21:e9:b9:13:34:a6:d5:65:cb:c7:2e:4c:4d:11:51:fc:57:fb:
36:b2:8e:13:ca:52:e7:bc:5c:7b:d0:85:b2:62:cd:6f:a6:35:
04:75:a0:db:76:12:82:05:16:5c:af:d1:49:5a:1a:41:e0:0d:
08:f8:7a:9f:77:31:68:b1:79:f4:43:7b:f8:ff:52:55:81:2a:
97:79:e1:78:4e:3f:4b:70:5c:f8:93:bb:88:5a:d9:a1:4f:83:
36:80:0a:6c:6d:6d:13:ec:ff:5e:7a:30:44:9e:a6:29:b4:3b:
4b:f7:3d:5f:c6:97:b0:dd:c4:e6:17:ef:de:e9:9c:c7:eb:96:
41:20:49:de:70:93:48:dd:3a:3a:63:db:8e:38:41:1c:b6:22:
82:78:71:f5:c9:7a:c9:3f:4d:88:53:41:91:71:66:22:0c:eb:
5f:ae:aa:f4:2d:ab:9c:45:55:17:48:39:a1:29:3e:42:a7:fb:
0f:ba:ce:28:30:c9:0e:32:e1:51:09:86:09:81:f0:7a:08:73:
d1:16:bf:07:35:0c:c5:ce:f3:73:28:20:5f:aa:fb:dc:37:83:
40:97:38:0e:79:7a:a7:96:83:95:cc:d5:c6:ee:d6:80:36:db:
11:21:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:21:37 2026 by rpki-client