This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa
File: yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa (raw, json)
Hash identifier: MAEY7tBraubtKoodWTH2DPA+SuxElYKFE3cdaGB9ZX4=
Subject key identifier: C8:05:09:35:87:14:FF:71:5D:9B:60:3E:83:D0:43:62:1A:1B:78:C6
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019B7F812D19EFE24AC0A379B40C57D75DA1
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa
Signing time: Fri 02 Jan 2026 16:18:50 +0000
ROA not before: Fri 02 Jan 2026 16:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35831
IP address blocks: 94.31.54.0/24 maxlen: 24
213.152.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:81:2d:19:ef:e2:4a:c0:a3:79:b4:0c:57:d7:5d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 16:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80509358714ff715d9b603e83d043621a1b78c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:cc:86:42:63:ce:e9:df:e5:fa:f5:64:1f:
ff:d5:51:4d:a9:01:ee:ea:f4:75:0c:38:a9:77:69:
9d:b4:c2:1c:ff:09:85:c7:38:f8:a4:81:6e:9c:08:
76:24:52:23:fd:6d:4b:63:c8:56:9c:d0:b5:bd:d7:
c4:67:a8:4d:db:a9:13:4b:0b:c1:3e:f1:a4:bd:e5:
62:b3:ec:d1:67:5a:51:61:45:35:1b:1e:87:93:1b:
b6:57:6c:29:0a:9b:d7:a5:9e:b7:fa:8d:11:54:d4:
00:a2:86:61:ae:ed:b6:e6:51:0b:5e:d6:c9:5e:90:
98:7a:91:8f:d4:4c:24:71:d7:20:e2:1c:63:e4:94:
66:e8:a1:37:1f:2c:7b:d9:df:7f:66:8b:9e:d0:99:
c2:95:0e:d7:d1:0b:8b:07:46:64:18:e8:88:34:95:
03:67:66:c8:1b:ea:26:95:39:f9:0e:95:34:95:fc:
0b:dd:a0:d1:41:10:b2:11:92:b5:5b:0a:f7:20:b8:
a0:7c:cc:87:ca:c4:92:1b:fe:04:4e:67:fb:17:a9:
04:f6:8a:0a:be:e2:66:96:71:45:57:83:89:42:32:
c3:1d:29:31:95:f2:31:79:0b:6b:98:3b:1d:e0:3c:
6f:6d:9d:53:4f:8f:c2:b9:11:c7:d8:6a:60:62:bd:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:09:35:87:14:FF:71:5D:9B:60:3E:83:D0:43:62:1A:1B:78:C6
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/yAUJNYcU_3Fdm2A-g9BDYhobeMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.54.0/24
213.152.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:1d:4c:17:f7:40:e6:42:eb:41:46:69:1f:b9:c3:76:68:1a:
b7:83:ce:0f:53:c1:98:03:26:71:53:0f:67:5d:ef:dd:ae:b4:
d1:4b:12:52:aa:6d:25:83:0d:1f:7f:0d:e6:20:fb:e2:a8:e2:
ec:f3:f0:dc:d9:86:e5:f0:54:d0:de:1b:ed:b3:93:7f:b6:2b:
41:56:8e:fe:19:48:3c:d3:e2:cf:6a:b0:c0:49:50:97:b7:4f:
66:7c:a4:e7:23:34:28:ad:b5:d9:9d:45:3a:cd:39:39:7d:a0:
9d:e1:fb:93:6b:02:d4:04:1e:72:97:21:8c:93:e7:16:4d:49:
b3:9b:bb:d0:3b:34:08:be:c5:51:29:6d:e1:be:c3:b9:ee:70:
58:4e:3b:c3:18:b1:29:97:b8:2e:28:9a:9b:c1:3d:12:c7:a0:
f8:b9:d1:25:44:38:40:d8:67:39:57:97:f3:50:cf:7f:9e:bc:
1c:ba:d3:f7:08:cc:4a:4c:35:b7:1e:36:c1:07:f7:10:c6:fe:
f6:91:19:86:7e:b7:3f:46:1d:9f:1f:8b:34:f7:0b:a3:c3:fc:
17:a8:2b:4e:4d:f5:d3:05:07:b6:c9:5f:af:1a:ea:23:fb:e6:
52:06:d8:a8:bd:58:89:da:e3:4b:4d:af:c0:40:2c:16:98:93:
88:25:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 03:49:27 2026 by rpki-client