This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/RmRjeHQ5LHoRU1fZMCv-SARJc8c.roa
File: RmRjeHQ5LHoRU1fZMCv-SARJc8c.roa (raw, json)
Hash identifier: zv/hPQoqGigtS053rI8GEj09bwC8kZaEZlvkwBWS8G8=
Subject key identifier: 46:64:63:78:74:39:2C:7A:11:53:57:D9:30:2B:FE:48:04:49:73:C7
Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial: 019B76EB720C36B97D7D4DA8270275797170
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/RmRjeHQ5LHoRU1fZMCv-SARJc8c.roa
Signing time: Thu 01 Jan 2026 00:18:20 +0000
ROA not before: Thu 01 Jan 2026 00:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56575
IP address blocks: 194.36.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:72:0c:36:b9:7d:7d:4d:a8:27:02:75:79:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Validity
Not Before: Jan 1 00:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4664637874392c7a115357d9302bfe48044973c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:19:f0:f0:f8:a6:35:7f:69:14:3d:64:16:
90:46:17:e9:3d:6c:d7:f0:97:b2:17:d1:97:a2:3b:
f9:b0:45:99:3c:89:cd:e5:e0:56:3e:13:5a:e9:25:
13:1b:60:5b:e7:29:34:87:d1:8a:50:e5:c0:e3:68:
b2:c8:45:34:b4:4d:80:71:d7:f5:4d:50:1f:a5:e3:
d0:36:b7:77:18:36:2a:31:0b:df:08:45:d2:2b:1c:
8a:39:2a:93:63:f1:bb:2b:4a:d4:d6:d4:0a:cb:66:
37:0c:0d:73:5d:0e:ab:68:9f:b4:13:0a:8d:20:ef:
f6:6f:d1:35:ed:56:27:d8:8c:e1:78:bb:e1:dc:60:
ac:9e:d0:99:82:90:51:84:70:be:36:8c:3c:bc:4c:
ca:9e:98:c0:91:fc:4f:4a:34:9e:67:2c:98:68:60:
6b:46:48:f2:61:cd:89:90:b8:5a:ea:ea:04:6a:d8:
69:8a:5c:86:4b:89:20:fb:99:51:57:02:3e:ef:9e:
6f:c3:51:b5:c1:b5:bb:eb:88:46:37:35:1c:e6:7e:
32:a4:1d:1d:d4:95:1f:3e:82:2c:d8:03:08:30:d9:
70:8d:48:6e:d6:e6:2b:5e:69:88:71:61:40:b3:a9:
bc:5e:c3:f2:1c:5e:e6:0d:74:75:2c:1e:3a:28:61:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:64:63:78:74:39:2C:7A:11:53:57:D9:30:2B:FE:48:04:49:73:C7
X509v3 Authority Key Identifier:
keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/RmRjeHQ5LHoRU1fZMCv-SARJc8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:81:da:81:47:73:f9:57:30:fa:a2:54:70:cf:59:b6:de:f2:
73:05:9c:b5:59:db:78:d3:8f:f5:0d:aa:ad:36:e6:26:ae:a6:
3b:c2:49:87:53:81:b3:fd:eb:7d:53:3c:40:be:d8:9e:7c:2a:
b5:18:e5:f5:0b:be:a9:cc:4f:e8:c4:b9:d7:cf:5d:67:ea:4d:
cb:41:62:28:aa:97:6d:97:17:f9:6c:16:7e:b6:db:fc:6a:9c:
db:e6:55:3d:53:9c:2b:77:a9:59:e6:7c:82:d2:2d:25:98:6c:
05:f8:54:9e:e3:03:ae:e7:b3:16:06:21:5a:af:42:cc:b5:5c:
2e:56:b0:a7:f3:dd:fe:54:b5:98:a5:c4:9a:75:ab:81:08:39:
82:9c:88:b3:91:e0:e4:34:2a:bf:6e:a9:a8:b3:3b:48:0a:52:
3f:9c:2d:d7:9b:82:24:f1:3f:5d:19:73:d9:21:e7:3c:eb:f7:
1a:84:7c:75:76:49:8e:2d:93:47:a2:0c:d1:4f:ee:4d:e2:28:
36:89:93:a0:57:1d:47:2f:4d:1e:1c:ae:2b:aa:cd:25:7d:a7:
a9:d4:14:31:d9:3b:62:4b:1f:3b:1c:51:0b:93:33:df:ba:b9:
64:3e:59:20:23:36:9f:69:2a:1a:a4:91:db:4c:dc:21:f4:5b:
15:48:11:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:51 2026 by rpki-client