This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa
File: xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa (raw, json)
Hash identifier: 1+/9Z/D/KU/a6AJWSS+7jp2T1wnZtSaOlAbOLEGldwc=
Subject key identifier: C5:43:A0:DD:49:D1:E4:DC:D9:9E:CA:2A:41:30:8C:DB:3F:10:72:E0
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 019B7EA6420098E5B31FFF51995F793985E5
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa
Signing time: Fri 02 Jan 2026 12:19:43 +0000
ROA not before: Fri 02 Jan 2026 12:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35280
IP address blocks: 132.74.0.0/16 maxlen: 16
132.75.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:42:00:98:e5:b3:1f:ff:51:99:5f:79:39:85:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Jan 2 12:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c543a0dd49d1e4dcd99eca2a41308cdb3f1072e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:33:d5:f7:b2:95:7c:32:01:ae:a9:e0:90:
d4:8a:82:4d:c0:e3:50:81:35:69:90:30:f2:c5:d1:
c3:e4:e9:74:a6:bc:f9:40:ad:d7:b6:9f:b8:8c:8b:
3d:85:ac:85:35:f1:80:f3:5b:22:13:d9:03:05:45:
39:1d:94:43:60:31:1f:2a:ce:71:2a:1c:ec:39:12:
66:cb:e4:90:3b:67:f8:83:16:17:7f:3c:db:b3:f2:
a7:27:da:87:2f:d4:2d:3b:f9:fb:81:eb:26:39:6d:
5e:86:11:65:da:e9:8b:96:8f:3c:7f:61:ce:c2:8e:
81:5c:7b:0f:d8:14:39:df:d3:8a:7e:21:29:53:bf:
41:2b:fb:c9:51:df:24:1f:9b:8a:3b:7c:85:0d:01:
45:51:76:81:b2:d0:f9:03:70:c8:6b:f5:c4:a8:b8:
ee:9e:89:fa:91:9a:55:f9:a7:eb:e0:7a:f9:ec:4d:
ec:44:59:80:31:02:87:1f:3d:1e:70:a8:6b:23:10:
f8:19:47:b9:23:f2:e9:b3:8a:3a:ad:3b:a0:4c:0b:
2a:a0:d8:7b:7f:b4:eb:4f:11:b3:39:c9:da:7f:05:
61:5b:56:c1:a9:81:3a:f0:8d:54:a5:ba:35:3a:01:
c2:a0:08:d6:ac:68:cd:48:96:58:7e:2b:5c:c1:88:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:43:A0:DD:49:D1:E4:DC:D9:9E:CA:2A:41:30:8C:DB:3F:10:72:E0
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/xUOg3UnR5NzZnsoqQTCM2z8QcuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
91:07:60:90:66:f4:2d:e3:f0:ea:eb:26:ff:ee:57:c0:bf:2d:
45:51:b4:2f:3e:4e:8e:0b:2c:e4:e1:20:1c:c6:0f:65:33:da:
33:42:6c:0d:46:f2:f5:90:5b:a5:df:ea:37:15:12:b0:f9:7b:
8c:fb:a2:b5:12:b5:4a:c6:c3:f2:ac:74:9e:81:1b:46:b0:df:
f5:72:62:b5:81:31:fb:32:70:59:d7:42:00:53:db:c5:48:dc:
c1:ad:b8:53:02:31:fc:fe:58:47:9e:56:01:d9:c9:4a:90:e3:
a6:c8:d7:66:d3:42:82:d0:d5:30:13:bb:c5:f6:cc:0a:13:ce:
bd:84:22:ac:32:ad:e8:9d:2e:9c:8c:21:c0:4f:d2:2a:29:3d:
4f:8b:0c:1e:27:9b:a3:8d:0f:c4:96:df:f9:63:9a:96:fe:f0:
ce:7d:70:67:54:27:3f:8b:89:ee:03:c0:e0:ab:ce:f5:c6:18:
ea:57:3e:cc:71:0d:a3:81:8a:8d:11:99:fc:e1:99:36:b1:3f:
58:24:4b:0a:81:25:fe:c8:48:6e:b1:0f:0d:e5:1d:3f:f9:76:
72:4e:3f:3b:24:6a:31:92:e7:77:a0:19:90:e6:62:90:b0:47:
ff:24:38:67:70:16:6c:9c:39:e6:cd:d0:93:53:26:29:cc:7c:
cf:b0:b3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:02:10 2026 by rpki-client