This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/mNrbGyIIfa4fLmutHXkEY0XNdeA.roa
File: mNrbGyIIfa4fLmutHXkEY0XNdeA.roa (raw, json)
Hash identifier: XyZ31cfTK799tFnPajLPxNb05Usvc+Q+zvjntqi0x6E=
Subject key identifier: 98:DA:DB:1B:22:08:7D:AE:1F:2E:6B:AD:1D:79:04:63:45:CD:75:E0
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 019B7910E79F7746B4C4D5C51B5F57C55BA2
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/mNrbGyIIfa4fLmutHXkEY0XNdeA.roa
Signing time: Thu 01 Jan 2026 10:18:29 +0000
ROA not before: Thu 01 Jan 2026 10:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 193.104.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 13:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:e7:9f:77:46:b4:c4:d5:c5:1b:5f:57:c5:5b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Jan 1 10:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98dadb1b22087dae1f2e6bad1d79046345cd75e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:bf:42:2b:14:91:b9:25:e7:97:f0:20:31:
29:90:c5:75:19:c3:bf:d4:66:e6:79:25:8b:87:02:
1b:0d:4f:8b:dd:a4:12:96:6a:2d:a2:fb:e1:e5:0c:
14:af:9b:0f:00:57:ed:2b:99:b3:f1:39:de:a0:5c:
71:93:03:1c:17:b5:de:29:23:4a:94:ef:af:90:b6:
a4:f0:df:81:a0:1b:48:61:cd:21:ae:b7:37:d1:25:
cc:0d:f8:d6:78:2c:b1:9a:93:2e:8e:85:93:7b:b9:
17:19:c4:84:80:cf:ba:1a:c3:aa:af:6b:20:d6:d1:
ba:90:58:27:39:e6:5c:e2:0a:c2:26:69:f6:5b:f4:
e0:39:25:8b:33:61:9e:61:0b:dd:29:cc:c6:86:8a:
70:b3:1a:98:65:21:69:ce:82:3d:ad:50:bc:7c:60:
29:35:b0:06:45:52:48:da:72:5e:90:0a:a0:d1:0a:
16:32:b8:08:ac:7c:e4:cb:f0:98:93:8a:81:bd:c7:
ca:dc:fc:be:ff:9c:dc:4a:fd:f7:43:eb:f5:55:a4:
c4:4c:ff:0a:ec:51:78:6c:d5:e1:8f:28:ec:cb:7f:
8f:50:f4:26:0b:7d:f6:64:37:f3:e0:ad:37:0d:93:
2f:8c:8a:76:00:32:a2:c1:ec:eb:a7:18:ba:51:3d:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:DB:1B:22:08:7D:AE:1F:2E:6B:AD:1D:79:04:63:45:CD:75:E0
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/mNrbGyIIfa4fLmutHXkEY0XNdeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0c:e2:58:9c:22:e3:93:6e:d0:cc:5c:35:19:bb:4c:a3:e0:
13:4a:05:5a:99:61:2b:bb:b9:e7:84:67:02:1f:14:53:f1:35:
39:dd:6a:c2:e7:72:ed:48:02:02:49:0d:1c:88:ed:07:5c:63:
b5:3b:06:62:3e:b5:15:06:31:27:c4:e6:2c:3e:d9:d1:6a:4e:
15:9a:af:cb:28:ff:b1:a9:21:c4:db:b7:2b:d6:1d:18:ac:e2:
a6:08:97:0a:58:0e:d4:cb:38:20:f2:8e:a4:af:bb:b4:65:c2:
7e:29:e5:4b:71:af:ca:b9:26:7f:99:1b:65:f0:eb:f0:d0:28:
11:18:40:92:8e:be:b4:6a:a5:76:75:ab:62:7e:55:b1:73:8b:
b3:ab:70:62:3a:79:0c:fd:f6:49:5c:98:e5:3d:bc:78:da:dd:
bd:e4:92:61:a1:cb:32:d4:bc:bf:d5:49:cf:16:05:50:20:d9:
1c:28:2b:ea:62:9b:f1:4b:c4:ef:7c:e7:43:a8:51:92:aa:88:
b4:7a:76:e1:90:60:4c:14:04:7f:f9:58:15:a4:0e:ec:9b:ad:
06:fb:10:fa:eb:c9:18:41:2b:e5:0f:a5:4e:07:e0:a6:e8:8d:
4d:d9:5f:25:06:aa:f2:1c:c2:a9:57:7c:8e:30:f8:ab:36:cd:
0b:e8:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 20:49:55 2026 by rpki-client