This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/tLR8Xx9kGTwthIYBMxfEvODUS6s.roa
File: tLR8Xx9kGTwthIYBMxfEvODUS6s.roa (raw, json)
Hash identifier: KHsotfa52tk8ozmtkTvPKINqIBAb1ObEd0CzRfZjCVM=
Subject key identifier: B4:B4:7C:5F:1F:64:19:3C:2D:84:86:01:33:17:C4:BC:E0:D4:4B:AB
Certificate issuer: /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial: 019B7911323705CCB52E76E382C1474348DC
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/tLR8Xx9kGTwthIYBMxfEvODUS6s.roa
Signing time: Thu 01 Jan 2026 10:18:48 +0000
ROA not before: Thu 01 Jan 2026 10:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211861
IP address blocks: 193.3.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:32:37:05:cc:b5:2e:76:e3:82:c1:47:43:48:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Validity
Not Before: Jan 1 10:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4b47c5f1f64193c2d8486013317c4bce0d44bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:7f:b0:33:31:b6:a3:8e:6d:43:a6:9c:56:
2a:98:c2:46:e9:cb:da:65:37:88:28:9f:b7:71:4f:
b5:c1:96:6b:97:f1:d0:8e:d5:81:2f:79:4c:99:b6:
10:b0:39:d7:97:9f:29:2d:9e:2b:a0:73:87:f7:74:
d4:63:b3:07:9a:98:b2:1d:3d:2b:43:f0:55:71:1c:
5e:6f:b0:b6:cc:b1:10:8f:d3:7c:9c:1e:60:1a:03:
91:e0:39:5b:38:ec:68:5d:35:e1:c2:ac:fe:5c:98:
ab:cb:bc:95:8f:6a:77:90:89:59:bc:5b:61:7d:f9:
98:42:58:cb:25:62:c7:1f:88:8d:62:e7:2f:b2:21:
aa:c1:c7:4f:11:50:cc:b5:11:cc:dc:fd:44:dc:56:
16:39:e2:e7:7f:ea:a2:e9:45:3f:6f:83:a6:bb:02:
aa:d9:0c:f5:2e:a5:f9:cc:92:b6:3f:2a:cc:6a:8c:
77:7f:dc:93:d6:1c:c1:bb:bf:a0:e7:3d:d2:79:af:
90:3a:44:84:6b:3f:18:1f:f4:65:db:68:f8:02:de:
fd:ba:61:eb:0f:39:11:11:a9:d0:2f:f9:b4:f6:e7:
d3:66:b4:bf:c0:6c:57:a3:c5:50:8b:36:20:88:0f:
6a:fb:8c:79:a8:36:8f:1f:43:3e:86:5a:42:61:b0:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:7C:5F:1F:64:19:3C:2D:84:86:01:33:17:C4:BC:E0:D4:4B:AB
X509v3 Authority Key Identifier:
keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/tLR8Xx9kGTwthIYBMxfEvODUS6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.29.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4e:c5:8b:69:cc:c8:4c:10:f9:a9:fe:6b:de:0c:db:15:35:
05:84:86:b6:48:9b:f4:c5:b8:18:2f:4d:44:17:de:c5:5a:d1:
24:c5:b9:dd:8c:9b:52:19:55:88:4d:c0:b7:b5:f7:8a:6f:4d:
c3:d9:94:c3:e9:34:d6:51:86:b2:6c:f5:ca:f5:99:59:47:66:
3b:07:73:fa:fb:5d:d0:d4:f6:98:d3:23:2a:78:df:6d:3f:5b:
be:d8:95:a3:4f:d5:7b:4b:55:c0:91:6d:3b:cc:16:74:b1:28:
b0:09:7f:70:05:57:58:89:1b:5d:4f:c0:14:72:ae:60:71:02:
9f:97:ec:6f:6d:98:45:f6:24:ad:7e:d7:d1:8f:4d:8a:b3:ac:
c7:0b:f4:4b:ba:bb:01:70:09:42:d8:07:c3:fd:2c:8c:21:7e:
1d:47:89:39:ab:f4:7e:a6:7c:96:3b:72:7a:29:ea:d1:98:d8:
67:4d:c9:cf:11:93:24:c6:43:07:3a:bb:f6:c2:91:6a:d4:60:
a1:26:44:df:e3:aa:11:cf:dc:0c:ff:4d:70:4c:98:76:16:0f:
86:4d:d0:fc:5c:9c:52:f4:4f:d8:b8:6d:ca:10:02:ff:c1:43:
20:ca:ab:1b:de:8e:d2:c1:16:05:3e:63:61:89:4a:4d:d2:b2:
97:d6:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:53 2026 by rpki-client