This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/80PdpdaZu0agDCN9RQnDf0bgfeU.roa
File: 80PdpdaZu0agDCN9RQnDf0bgfeU.roa (raw, json)
Hash identifier: DH5ZQA3PWXrg29JH5F4jHegGPMYQINXJvtbDzJXlSLo=
Subject key identifier: F3:43:DD:A5:D6:99:BB:46:A0:0C:23:7D:45:09:C3:7F:46:E0:7D:E5
Certificate issuer: /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial: 019B791013270368459152BE418B5DA69547
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/80PdpdaZu0agDCN9RQnDf0bgfeU.roa
Signing time: Thu 01 Jan 2026 10:17:35 +0000
ROA not before: Thu 01 Jan 2026 10:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5539
IP address blocks: 194.39.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:13:27:03:68:45:91:52:be:41:8b:5d:a6:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Validity
Not Before: Jan 1 10:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f343dda5d699bb46a00c237d4509c37f46e07de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:7c:84:15:03:a8:4d:02:d7:92:b3:1e:d6:
3f:ce:a3:55:b9:a7:60:de:05:91:16:26:af:ae:99:
b0:17:b4:ae:75:f4:e6:c6:1e:e1:84:21:9b:9b:c5:
20:d8:b6:ff:90:62:de:88:96:57:f2:97:36:24:3d:
02:f7:74:14:2e:38:46:97:d9:bc:93:8f:40:6e:fb:
71:57:d1:f6:b4:5e:85:29:2a:ba:0b:c1:67:28:cb:
49:e3:e6:79:c0:7d:6a:75:30:af:65:83:ce:27:25:
be:7e:fc:61:95:a2:26:28:53:87:c4:24:e2:d8:77:
4f:a7:b6:21:bf:dd:98:37:de:71:9b:4a:49:27:56:
b3:1d:20:b4:e5:8d:44:68:c1:86:83:94:5e:11:82:
0c:45:44:3d:89:e2:8d:d3:cb:17:6f:97:41:34:87:
b3:ab:01:b1:a0:4d:8f:20:cc:43:f4:5e:f4:0e:b1:
2b:7f:6f:ed:a1:54:3c:1b:42:cd:16:6b:0a:f3:19:
35:5e:21:32:5b:45:5e:ec:41:4d:bb:f2:20:1b:4f:
d6:f6:e4:59:82:49:95:91:9e:ef:19:0a:76:93:00:
75:a9:ff:da:b4:0e:37:ad:70:d3:93:9a:a4:f9:33:
86:1e:a6:f8:03:f6:e9:62:c3:a7:07:db:a1:4a:ec:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:43:DD:A5:D6:99:BB:46:A0:0C:23:7D:45:09:C3:7F:46:E0:7D:E5
X509v3 Authority Key Identifier:
keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/80PdpdaZu0agDCN9RQnDf0bgfeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.121.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9b:7f:ee:39:f2:58:d6:4b:cf:87:a8:bd:31:23:a3:1c:ee:
c7:1f:1d:ee:2d:8a:69:bc:e3:bf:3e:ce:43:8e:2c:ea:91:80:
29:2c:e3:54:dd:b1:63:86:73:00:eb:fd:05:df:c3:59:2b:3e:
6e:83:17:ee:1e:d5:82:8f:6d:93:ac:d3:e1:d5:64:12:8d:0a:
da:b5:75:34:49:2e:db:16:78:bd:70:f1:81:24:88:ef:45:df:
71:cd:ba:a3:31:06:9c:b8:d8:27:93:bc:33:70:be:ba:04:e3:
a8:74:26:04:41:7a:e0:7e:dc:82:85:26:9a:ce:bc:79:56:37:
5d:97:42:be:16:03:fc:67:05:83:3a:f8:60:a4:b2:17:07:5c:
4d:4e:d3:2c:3c:36:30:1a:43:b8:c6:be:38:c1:c2:23:a8:fd:
7e:db:28:e0:7a:cd:25:16:b8:76:2b:4d:90:c1:eb:90:c7:d8:
07:9f:ef:4a:62:62:68:b2:d2:66:1d:d2:ae:b0:df:a9:96:72:
ca:c4:59:71:8d:b5:77:af:57:ca:35:5a:28:6a:3d:00:a3:72:
45:86:93:9a:f4:ca:31:ab:c4:6f:e7:ff:9c:52:e9:29:f6:d2:
9a:a1:2e:4d:d2:bc:53:52:f3:fc:76:ab:9a:74:87:6c:ed:fa:
c6:35:4a:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EBMnA2hFkVK+QYtdppVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMzk1ZWM4ODIxZDhmODE4OTQxMzM5MmJkODc2ZDdiZDc5
NWMxNmMwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzQzZGRhNWQ2OTliYjQ2YTAwYzIzN2Q0NTA5YzM3ZjQ2ZTA3ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzld8hBUDqE0C15KzHtY/zqNVuadg
3gWRFiavrpmwF7SudfTmxh7hhCGbm8Ug2Lb/kGLeiJZX8pc2JD0C93QULjhGl9m8
k49AbvtxV9H2tF6FKSq6C8FnKMtJ4+Z5wH1qdTCvZYPOJyW+fvxhlaImKFOHxCTi
2HdPp7Yhv92YN95xm0pJJ1azHSC05Y1EaMGGg5ReEYIMRUQ9ieKN08sXb5dBNIez
qwGxoE2PIMxD9F70DrErf2/toVQ8G0LNFmsK8xk1XiEyW0Ve7EFNu/IgG0/W9uRZ
gkmVkZ7vGQp2kwB1qf/atA43rXDTk5qk+TOGHqb4A/bpYsOnB9uhSuzusQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPND3aXWmbtGoAwjfUUJw39G4H3lMB8GA1UdIwQY
MBaAFMA5XsiCHY+BiUEzkr2HbXvXlcFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQt
ZjdlNzNkZGVmNGUyLzEvODBQZHBkYVp1MGFnRENOOVJRbkRmMGJnZmVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQtZjdlNzNkZGVmNGUy
LzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwid5MA0G
CSqGSIb3DQEBCwUAA4IBAQBjm3/uOfJY1kvPh6i9MSOjHO7HHx3uLYppvOO/Ps5D
jizqkYApLONU3bFjhnMA6/0F38NZKz5ugxfuHtWCj22TrNPh1WQSjQratXU0SS7b
Fni9cPGBJIjvRd9xzbqjMQacuNgnk7wzcL66BOOodCYEQXrgftyChSaazrx5Vjdd
l0K+FgP8ZwWDOvhgpLIXB1xNTtMsPDYwGkO4xr44wcIjqP1+2yjges0lFrh2K02Q
weuQx9gHn+9KYmJostJmHdKusN+plnLKxFlxjbV3r1fKNVooaj0Ao3JFhpOa9Mox
q8Rv5/+cUukp9tKaoS5N0rxTUvP8dquadIds7frGNUon
-----END CERTIFICATE-----
Generated at Mon Jan 26 22:36:00 2026 by rpki-client