This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vY_FGdkMRNwhVh6hnT9u47LJjA4.roa
File: vY_FGdkMRNwhVh6hnT9u47LJjA4.roa (raw, json)
Hash identifier: P2y69Lw9S6QcbZpLBNq/HWIMYJongno3oUFMs1V1ZS8=
Subject key identifier: BD:8F:C5:19:D9:0C:44:DC:21:56:1E:A1:9D:3F:6E:E3:B2:C9:8C:0E
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019B791057E4F57F2897D5C928E088A3B292
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vY_FGdkMRNwhVh6hnT9u47LJjA4.roa
Signing time: Thu 01 Jan 2026 10:17:52 +0000
ROA not before: Thu 01 Jan 2026 10:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200456
IP address blocks: 188.132.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:57:e4:f5:7f:28:97:d5:c9:28:e0:88:a3:b2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 10:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd8fc519d90c44dc21561ea19d3f6ee3b2c98c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:f6:38:b2:7b:07:40:66:d2:0c:b7:65:07:
2d:56:ec:44:b8:0d:1e:44:74:33:66:28:7c:66:85:
de:e3:ba:00:ba:bf:07:18:c4:e1:d4:7f:6b:19:60:
54:5a:dd:14:e5:b7:85:c7:6a:44:77:6a:bb:3d:35:
32:39:ac:bb:a2:66:9f:c7:2d:02:7d:2f:77:2a:43:
d4:ae:48:56:78:2c:d1:3d:de:52:7f:c3:3b:09:b9:
ea:62:da:49:34:51:88:f1:bc:54:72:87:32:e3:14:
54:91:db:ea:a2:c5:25:63:29:2b:7f:75:27:ec:33:
8d:4d:d8:52:34:29:ca:88:0f:ec:fb:63:68:d6:f9:
9f:75:c0:53:13:e8:bd:65:c1:9d:5f:84:65:cb:68:
16:ba:92:fb:d4:b3:05:d3:91:8a:4d:02:10:cb:d2:
fc:86:1e:9b:e4:97:1f:87:78:bb:e3:71:ea:04:c6:
68:87:99:98:d2:9f:50:85:24:db:50:46:a6:b8:d9:
ad:7a:cd:7f:51:a5:af:8f:f5:99:3f:0e:88:89:9d:
d6:dd:5c:9c:78:28:b6:22:a1:0f:08:f8:f5:13:d9:
1b:cc:68:e0:11:c8:c8:58:9e:53:32:09:21:ae:f2:
62:48:5f:6a:c5:9b:45:e0:3a:11:65:4b:ec:54:62:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:C5:19:D9:0C:44:DC:21:56:1E:A1:9D:3F:6E:E3:B2:C9:8C:0E
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/vY_FGdkMRNwhVh6hnT9u47LJjA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.230.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e1:2e:38:cd:34:3d:47:a3:8c:71:ad:9d:38:df:99:34:21:
28:07:02:9f:b9:5b:c2:d9:4b:02:5a:97:d7:fd:c8:61:6b:58:
48:e5:bb:ff:21:0c:2d:31:38:fc:a8:d5:fa:59:5c:1c:92:40:
27:32:7f:7a:0e:8d:a8:39:32:e7:bd:fa:00:d7:69:e5:90:f9:
40:60:50:9e:ae:e7:31:12:70:41:4b:49:d6:3d:00:33:80:47:
ea:2b:65:a2:4d:57:e2:79:96:fc:15:b5:14:c9:96:bc:d8:4e:
0a:32:f6:c8:ca:b4:f6:fc:b0:2f:92:c2:8a:e5:6e:27:d3:85:
4c:21:26:ac:87:d0:b0:05:7d:13:be:e8:25:7a:7c:cf:26:e8:
08:2d:c9:95:73:e4:6a:c7:61:c7:47:4b:b5:fb:eb:81:66:48:
66:a2:de:34:f4:c5:fe:91:45:11:e8:3b:d4:99:0b:47:de:e0:
b1:43:75:2d:0b:5b:64:b1:0c:52:2d:26:e4:b0:91:d9:bc:a8:
85:f3:ec:04:86:2f:5b:82:d8:1b:86:83:7e:62:05:03:73:e8:
aa:c2:5e:f9:74:ed:05:0a:22:40:ab:4a:ed:54:76:a7:c1:3d:
9a:a9:2d:22:a3:fc:93:11:13:53:45:85:f4:b9:29:55:78:80:
01:cc:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:34:50 2026 by rpki-client