This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/1vE1bB4EDBxNcUGfUCxckstUSVo.roa
File: 1vE1bB4EDBxNcUGfUCxckstUSVo.roa (raw, json)
Hash identifier: ZcEWN1iWGFKaa88mWnoVaJOYXC/9DLTCOLoGub+bZ74=
Subject key identifier: D6:F1:35:6C:1E:04:0C:1C:4D:71:41:9F:50:2C:5C:92:CB:54:49:5A
Certificate issuer: /CN=7678742468cb01f0a526b4e92226fe3b74c67c41
Certificate serial: 019B7CED6D0872746550BCFC035B8F5D6D26
Authority key identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/1vE1bB4EDBxNcUGfUCxckstUSVo.roa
Signing time: Fri 02 Jan 2026 04:18:13 +0000
ROA not before: Fri 02 Jan 2026 04:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43406
IP address blocks: 193.200.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:6d:08:72:74:65:50:bc:fc:03:5b:8f:5d:6d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7678742468cb01f0a526b4e92226fe3b74c67c41
Validity
Not Before: Jan 2 04:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6f1356c1e040c1c4d71419f502c5c92cb54495a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:ff:41:dd:c5:a9:5f:85:e1:b1:b7:68:bd:
66:7c:ba:9f:ee:ae:15:57:4a:be:fc:10:47:b7:63:
e9:a8:b9:66:70:8c:82:23:46:bd:dc:b2:60:c9:05:
74:6e:d8:fb:72:4a:5c:59:33:5b:79:3e:9f:7e:d5:
88:15:f7:54:d5:28:b8:17:8c:9e:79:b6:21:af:1e:
13:13:e1:fb:fc:cc:52:ad:bf:36:6b:a2:9a:11:52:
ed:a1:6a:d0:a7:fa:92:9e:1f:61:24:2d:74:c7:3d:
b9:2f:75:aa:c2:1a:82:03:e6:52:33:a7:30:22:91:
08:86:1b:ac:26:5d:f7:be:fa:24:ab:83:58:6e:33:
0e:65:4e:ed:80:bc:a9:eb:f7:7e:8c:2f:04:12:d0:
77:02:4c:dd:63:ce:d0:cb:22:93:d7:f4:f7:06:28:
b8:b7:90:7c:fd:73:2d:07:69:ae:28:3f:a8:30:27:
fc:7f:b7:7e:ee:32:b7:b0:a5:01:30:10:2d:4c:58:
b1:19:07:6a:0f:fd:bd:fb:ed:9c:ef:22:c8:05:08:
a9:07:1a:8d:86:a4:0b:f9:47:66:79:24:2f:ef:01:
c9:4c:08:ff:bb:c4:b3:2b:fe:e6:2d:1f:ef:54:4b:
dd:89:ed:6d:17:62:eb:06:e8:77:bd:68:5e:2b:9a:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F1:35:6C:1E:04:0C:1C:4D:71:41:9F:50:2C:5C:92:CB:54:49:5A
X509v3 Authority Key Identifier:
keyid:76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/1vE1bB4EDBxNcUGfUCxckstUSVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.155.0/24
Signature Algorithm: sha256WithRSAEncryption
93:73:52:97:ff:4c:84:bd:cf:97:14:10:cf:94:3c:95:c9:43:
aa:83:9b:47:80:37:3b:3f:a1:16:d6:71:0d:c3:7f:93:c9:59:
9a:4b:30:1f:77:0a:7b:00:d0:7a:00:6f:61:a3:6e:eb:67:89:
c5:56:9c:9c:87:63:ea:46:2c:d1:5c:93:3a:eb:e2:ff:84:57:
e9:80:11:85:4c:af:1d:fc:d9:83:8e:ba:7c:a0:25:72:44:dc:
d2:d1:bf:d1:7f:ff:ad:e5:a4:9d:89:47:bf:04:99:f9:3e:99:
33:29:5e:6c:03:29:8f:99:b7:5a:cb:52:42:71:10:01:de:5c:
e2:28:73:b9:a9:74:87:b9:d9:e5:47:e5:2a:55:4d:0a:ca:4a:
b8:d1:21:8b:66:32:5d:5c:84:03:55:ca:bf:b7:87:30:fa:74:
2c:0d:1e:2d:36:57:a9:a3:c6:d8:30:8c:93:6c:2c:79:27:66:
d5:c4:f1:b5:89:f1:b6:84:1a:d4:e9:70:19:f0:56:ae:22:d7:
9a:29:da:7a:a5:45:21:07:76:c6:dc:e1:7c:eb:d6:4b:55:68:
75:1d:13:a7:a1:70:de:30:86:3f:75:56:14:67:27:c8:56:0e:
70:c2:df:95:85:cb:e7:c4:0b:17:ee:50:74:75:37:a1:1f:b1:
e1:e9:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:46 2026 by rpki-client