This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/hyuJnqHTUP-j_jGz8MPlfzMgtes.roa
File: hyuJnqHTUP-j_jGz8MPlfzMgtes.roa (raw, json)
Hash identifier: Jf92T3HcvUu9gKvTKaIN40nmZBRzASHCnUFbjWdcaEw=
Subject key identifier: 87:2B:89:9E:A1:D3:50:FF:A3:FE:31:B3:F0:C3:E5:7F:33:20:B5:EB
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019B7758AF4018E3BE92B2D15A0DD9E077D7
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/hyuJnqHTUP-j_jGz8MPlfzMgtes.roa
Signing time: Thu 01 Jan 2026 02:17:39 +0000
ROA not before: Thu 01 Jan 2026 02:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 194.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:af:40:18:e3:be:92:b2:d1:5a:0d:d9:e0:77:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 02:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=872b899ea1d350ffa3fe31b3f0c3e57f3320b5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:e9:16:4f:9c:99:f6:e7:d7:7a:61:67:d5:
8f:3c:97:92:7b:03:7c:6a:76:20:22:89:d8:97:c6:
d5:37:10:fe:e5:d8:18:fd:be:55:d9:dd:9c:f5:2b:
5c:64:50:78:4a:71:32:5c:10:80:69:39:ac:eb:91:
c5:13:91:a0:dc:b8:ec:34:dd:92:07:73:de:ee:e6:
08:ee:a3:c6:8f:dc:b1:2e:fc:ad:38:ce:f7:3a:d2:
dc:59:a3:60:bf:65:c6:84:42:65:de:ce:6c:3b:c3:
b3:a2:d4:44:96:61:4c:4a:1f:2e:d0:45:9a:0f:fc:
ad:19:f0:1c:4a:23:03:b3:7a:e0:1f:9a:0a:5a:26:
89:29:53:88:ee:21:f6:ca:d0:dd:09:20:5e:2b:4e:
8b:b3:d3:d0:31:76:d6:fd:f1:ad:51:d0:68:eb:81:
51:05:e5:88:48:c0:54:66:4b:ce:53:29:30:a5:07:
ce:34:8e:1d:60:98:f9:c4:cf:df:05:3a:44:c5:98:
e9:b5:45:18:6f:d1:e7:8a:99:cd:9a:e0:47:99:4c:
47:5d:74:4a:96:fa:12:f6:a5:b8:09:94:1f:c2:aa:
da:26:f7:c4:cb:5c:f9:3b:2f:bd:81:65:5b:2c:cd:
0e:df:8a:2a:d8:61:27:87:c0:56:ba:aa:6a:35:d2:
96:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2B:89:9E:A1:D3:50:FF:A3:FE:31:B3:F0:C3:E5:7F:33:20:B5:EB
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/hyuJnqHTUP-j_jGz8MPlfzMgtes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.54.0/24
Signature Algorithm: sha256WithRSAEncryption
66:55:17:1b:66:16:c5:5e:fa:ac:d8:d6:77:ab:d7:c3:17:9f:
a7:dd:59:c1:03:5f:e8:f6:a7:5d:c6:02:36:53:a7:e1:1a:11:
85:6e:a1:d8:16:51:06:36:73:ae:59:76:15:b7:96:41:b4:77:
92:87:57:04:3b:d3:3c:1f:88:f9:56:f9:8f:25:97:75:46:74:
88:8d:46:e6:ed:a3:41:fb:17:7c:9f:f8:ea:fb:8e:d4:b6:58:
08:3e:ee:40:e4:ff:35:99:b9:8d:e0:de:a6:9d:86:49:9a:31:
49:93:a9:40:36:d5:ef:65:16:f8:25:30:a4:68:41:92:70:49:
1c:95:9e:61:76:46:18:63:a9:d1:f5:81:23:c7:24:77:3a:11:
8b:60:65:09:bf:8b:be:be:35:7f:1e:ec:77:9f:2a:e4:96:6d:
f9:a4:8f:53:e7:46:ae:45:58:2a:60:fa:fc:d6:23:35:51:a6:
f1:21:f2:d2:ec:2e:98:95:f6:71:6d:01:43:4b:70:a5:11:d8:
cc:1f:54:d2:0b:91:22:09:77:8c:d0:e0:41:98:d1:49:a5:6a:
83:36:7c:3e:69:73:96:86:92:f6:b1:75:57:de:47:d9:2b:24:
86:31:65:04:ab:51:08:2e:d7:12:7f:8e:0e:8b:a5:d7:7f:7d:
c3:e4:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 11:15:18 2026 by rpki-client