This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/g84cD1l0NIWiAh0qYxQZFWYbDew.roa
File: g84cD1l0NIWiAh0qYxQZFWYbDew.roa (raw, json)
Hash identifier: 3YtnarT57s4PMZl4o0PMkx+Dnjlo0jMzpQu5PPXZZnk=
Subject key identifier: 83:CE:1C:0F:59:74:34:85:A2:02:1D:2A:63:14:19:15:66:1B:0D:EC
Certificate issuer: /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial: 019B7DC9FFF2E099B9CA07CD4F056CDD2C32
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/g84cD1l0NIWiAh0qYxQZFWYbDew.roa
Signing time: Fri 02 Jan 2026 08:19:08 +0000
ROA not before: Fri 02 Jan 2026 08:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212416
IP address blocks: 2001:67c:f18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:ff:f2:e0:99:b9:ca:07:cd:4f:05:6c:dd:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
Validity
Not Before: Jan 2 08:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83ce1c0f59743485a2021d2a63141915661b0dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:be:21:28:22:4e:db:da:ac:60:a1:6a:d0:
ea:98:b9:30:73:2d:c7:d8:6f:53:9a:0a:ba:a6:d0:
68:13:56:dd:ac:d2:21:3a:69:85:d1:7e:65:a3:ab:
5b:8a:25:85:65:e2:78:47:58:08:0e:d7:4b:d5:b7:
50:87:be:d3:44:1f:c8:84:6b:73:c7:5f:62:cd:84:
11:9a:e3:29:a8:8e:16:ee:b9:f3:bd:c0:a1:5d:82:
c1:51:c5:5b:5b:60:41:68:57:dd:4a:8a:11:34:1e:
68:c2:d7:12:e2:70:a6:30:2e:56:f6:3d:e4:73:34:
8d:e9:b2:7d:89:35:e3:c1:07:af:93:86:e1:60:37:
d0:fe:a7:bd:bc:d8:ff:2a:48:38:08:9f:88:1b:42:
bf:71:00:b2:a4:19:6f:4a:8c:bd:a7:66:01:cb:b0:
d4:c4:ee:7b:65:5b:f9:aa:b4:16:ae:43:8f:42:65:
06:38:ec:68:19:fe:64:03:d0:55:e5:da:17:a2:82:
d7:a1:3a:90:43:bb:bf:b3:2e:84:d1:16:51:65:69:
d4:37:10:0b:09:bc:f0:bc:ff:a4:f3:5c:05:dc:57:
ae:1f:d1:09:4b:05:9c:ad:c0:50:a0:95:c2:2e:48:
45:5b:2f:b4:f8:ba:24:fe:28:21:91:5d:1b:64:16:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:1C:0F:59:74:34:85:A2:02:1D:2A:63:14:19:15:66:1B:0D:EC
X509v3 Authority Key Identifier:
keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/g84cD1l0NIWiAh0qYxQZFWYbDew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f18::/48
Signature Algorithm: sha256WithRSAEncryption
84:53:85:6b:0d:fc:e8:e2:ae:40:cf:e4:42:aa:e1:13:01:d5:
5d:85:d6:32:bc:15:53:7b:72:b0:be:e7:7d:5f:86:eb:32:ff:
ea:cf:58:8e:91:3e:93:a4:45:73:33:92:ec:c9:59:bb:a5:af:
a7:87:9e:23:ec:1c:2f:56:91:ba:dc:b9:bd:ac:c1:d7:fe:9f:
a8:22:7c:79:ae:a1:72:80:3b:93:08:bb:60:48:59:50:b6:78:
37:61:53:5a:1d:9a:b4:5e:44:17:90:60:91:59:88:29:79:f8:
c1:af:58:85:57:be:05:d3:5b:65:b8:9a:44:3f:9a:81:38:8d:
4e:e1:d3:59:b6:b8:58:88:89:34:b8:b0:a5:7a:db:ee:6e:8d:
87:4b:2a:44:6f:32:fe:14:b1:a8:ff:32:24:f5:61:1e:48:e3:
72:5d:3e:df:75:e3:8e:db:9e:07:ca:df:c0:a9:02:5e:53:10:
6f:47:02:2a:d0:d5:13:8f:d7:15:1d:e6:c6:40:2b:b6:23:3f:
e5:20:52:8d:fd:95:e0:65:11:49:56:01:88:b7:44:14:03:72:
2b:0a:c8:bf:ff:1a:04:94:d0:09:35:bc:9a:2d:e4:15:52:2f:
8f:06:87:4c:73:4b:aa:4c:ec:0a:5f:97:a2:ae:03:9a:f2:08:
65:58:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:59:33 2026 by rpki-client