This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/nADULd3amnYGR0Tr5B09poIsE28.roa
File: nADULd3amnYGR0Tr5B09poIsE28.roa (raw, json)
Hash identifier: gJvUmAM3aJOUpRMN3qv/5KjDyZgYcOC2qsvGzHbLhP8=
Subject key identifier: 9C:00:D4:2D:DD:DA:9A:76:06:47:44:EB:E4:1D:3D:A6:82:2C:13:6F
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 019B7E38CC9BDAC488AA37B8F2F0E1E8C0B5
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/nADULd3amnYGR0Tr5B09poIsE28.roa
Signing time: Fri 02 Jan 2026 10:20:10 +0000
ROA not before: Fri 02 Jan 2026 10:20:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50608
IP address blocks: 83.220.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:cc:9b:da:c4:88:aa:37:b8:f2:f0:e1:e8:c0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Jan 2 10:20:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c00d42dddda9a76064744ebe41d3da6822c136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:e8:d3:3f:22:61:6f:20:8d:b2:f9:14:23:
55:32:1c:08:d4:b5:6b:1d:d6:bf:ca:ed:f5:0c:cc:
1c:ce:82:6d:00:4a:4a:6e:25:31:ca:41:0b:07:18:
05:b7:c2:c6:40:41:be:05:76:d2:ce:35:ec:9b:90:
c6:35:55:93:fc:a8:23:9f:e1:e8:d4:d4:c0:4f:3c:
03:d8:33:32:6d:5b:21:82:2b:30:44:00:ef:9d:eb:
13:fe:8b:a1:14:1f:c1:eb:a6:61:3e:5d:1d:5f:e3:
c1:98:38:6f:7f:ac:59:5e:7c:00:27:ef:32:2b:ed:
05:e4:6b:ac:88:bc:13:bd:20:db:92:c3:12:4a:9a:
3a:f2:16:bd:7c:30:d1:bd:a2:65:bd:05:0a:b4:5d:
f5:d7:93:f4:85:de:fb:b3:78:8d:08:39:69:25:4f:
7d:88:64:0c:16:85:e7:0f:79:f5:09:77:a3:73:37:
1c:6d:20:a1:c1:88:49:c7:c7:ee:d0:3d:cb:a2:51:
5c:d3:13:13:43:5d:7c:41:4f:69:15:67:dd:27:56:
eb:c6:3e:6c:c0:a0:28:d1:86:96:bc:34:8a:19:31:
0a:e4:ef:97:ce:ff:05:43:17:55:e7:cc:c9:ba:85:
8c:d4:da:d8:7b:a0:a0:c1:38:68:1b:a3:20:cb:1e:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:D4:2D:DD:DA:9A:76:06:47:44:EB:E4:1D:3D:A6:82:2C:13:6F
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/nADULd3amnYGR0Tr5B09poIsE28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.167.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bb:de:3d:96:de:f8:93:94:01:80:67:ca:d0:d1:ca:c9:02:
7a:3d:41:17:05:21:6e:ad:ef:08:96:9a:d9:79:a5:d3:19:05:
1f:16:66:3c:35:16:c5:de:0a:91:3f:b2:f9:1e:5f:e4:48:56:
c6:8d:27:f1:a6:2e:28:68:8b:fb:49:c3:05:3b:2f:0e:c2:91:
e2:d9:16:db:d3:7b:68:2b:4e:27:09:2a:94:ca:fb:80:0d:fa:
66:5a:1e:5b:55:32:ca:71:90:c9:2b:86:2b:fc:0a:b4:6e:2c:
1b:c9:3b:be:3b:1a:90:7f:f6:d9:8d:1a:6a:2b:96:a5:2f:48:
0f:cd:ec:8e:28:e5:8b:bc:dc:14:e5:95:9a:7a:89:b0:4d:e8:
78:ee:9f:0f:57:97:50:7b:ba:99:d2:3f:11:e1:0f:0a:fa:43:
46:b0:7d:a5:3b:78:a3:a1:86:97:5f:dd:40:30:57:50:9c:36:
47:d4:be:65:67:38:66:d5:ac:5e:85:a3:77:d3:d8:19:04:e4:
51:8d:ee:91:a9:20:2d:ba:8f:70:d9:80:c6:70:f0:48:e3:18:
64:aa:35:b2:4a:f6:d4:d7:e2:de:0b:f3:c9:c0:6d:ad:4e:15:
b1:5d:dd:17:9e:8f:dc:cd:ab:e2:47:ad:df:b9:1b:30:fb:93:
6a:f4:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:29 2026 by rpki-client