This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/H9CdRCLLB89FGC_P99zvO9bw22M.roa
File: H9CdRCLLB89FGC_P99zvO9bw22M.roa (raw, json)
Hash identifier: /+D8bia7Or2I7xsqu4Z5whu7vt5QZWNJo6zSPqWl4CQ=
Subject key identifier: 1F:D0:9D:44:22:CB:07:CF:45:18:2F:CF:F7:DC:EF:3B:D6:F0:DB:63
Certificate issuer: /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial: 019B7D5CBD12F276B37CE8AE246A4F634518
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/H9CdRCLLB89FGC_P99zvO9bw22M.roa
Signing time: Fri 02 Jan 2026 06:19:48 +0000
ROA not before: Fri 02 Jan 2026 06:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56365
IP address blocks: 176.123.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:bd:12:f2:76:b3:7c:e8:ae:24:6a:4f:63:45:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Validity
Not Before: Jan 2 06:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fd09d4422cb07cf45182fcff7dcef3bd6f0db63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:7d:36:3f:44:da:fa:1d:ed:d9:75:fc:2e:
24:9d:68:6d:75:7f:e3:0d:46:53:4f:77:ef:48:30:
ed:6b:ca:5a:f0:b4:33:e9:2e:16:02:4c:5e:bb:00:
ad:5d:d9:30:54:08:d8:f9:e4:e3:19:33:60:d3:e6:
f1:47:64:c0:2c:02:1f:4b:b0:50:2e:10:96:41:fa:
5a:f3:28:85:ab:9b:5c:86:e1:6e:82:9a:05:a8:b6:
5c:98:ef:1b:4d:50:6d:63:ca:04:dd:f5:ae:5f:50:
9c:46:c1:36:36:c0:c1:36:e0:96:59:b5:17:d8:cd:
3f:60:10:dc:cf:84:a5:d7:c6:4f:1b:7e:a1:77:67:
e8:68:de:2f:2a:2a:00:5a:cf:0d:a6:69:72:d0:83:
4a:fe:c1:c5:b5:d2:2b:3b:c2:c0:3a:c2:01:75:eb:
59:57:ab:79:82:1c:b0:fb:67:79:5d:fc:04:b1:ab:
a5:57:e5:07:74:d4:48:d9:76:6c:d0:b6:39:44:4d:
33:8d:57:61:44:e2:7d:20:72:42:ce:5b:18:61:d5:
6e:98:c4:7b:ff:c8:8b:36:d5:a0:9e:e0:a9:a0:8d:
15:0c:3a:e3:78:c7:65:e6:6f:f0:32:60:23:1e:ea:
1b:54:f2:78:51:c9:b9:c3:b3:03:75:1c:47:39:19:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:9D:44:22:CB:07:CF:45:18:2F:CF:F7:DC:EF:3B:D6:F0:DB:63
X509v3 Authority Key Identifier:
keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/H9CdRCLLB89FGC_P99zvO9bw22M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a9:6a:ae:29:59:d2:bc:79:f7:d8:26:52:74:c8:32:16:a9:
3d:a0:b1:ce:30:aa:dc:24:9d:98:95:81:2f:7e:36:be:ed:76:
31:25:dc:e3:48:9b:58:ac:b2:fa:db:ea:01:db:06:21:d6:ab:
88:f4:9f:e3:8b:64:13:84:6a:8b:bb:23:db:ae:cc:9b:81:33:
ff:ab:39:21:bb:ca:a4:a8:a1:9d:f2:d6:c9:c1:53:43:8c:fb:
70:df:d4:ab:e8:81:0c:a8:56:94:96:78:02:f3:1f:fe:d5:01:
65:33:75:5b:20:8d:50:af:2f:c8:08:e9:83:87:8f:7a:1f:50:
0c:c9:87:02:68:d3:92:7b:d7:9c:51:0b:65:52:ea:43:a4:0e:
38:04:18:75:54:05:3d:df:d5:f0:14:74:bb:58:12:01:be:84:
85:c8:53:94:83:e9:25:44:35:ed:0f:ca:25:b5:25:e8:1b:49:
0e:41:18:cf:39:91:3f:18:09:b0:01:e0:ee:89:74:82:7f:f2:
7c:cd:38:4b:8b:8f:4b:62:c7:02:f5:2c:0e:d4:9b:9c:31:c8:
c9:ba:97:ed:e6:f7:22:34:5f:ef:d6:82:9a:65:d6:42:8d:f6:
74:53:9d:d2:e6:1e:4f:58:7b:46:6d:bb:c0:29:8e:ce:98:81:
82:00:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:30 2026 by rpki-client