This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa
File: k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa (raw, json)
Hash identifier: wEZygrh3ZXDp7V3oFcFdmkvylWDdJbyp7T5ic216Yzg=
Subject key identifier: 93:54:23:57:7A:60:CE:5C:2F:99:BC:CF:CD:45:FB:47:62:96:1E:F7
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019B76EB07D389B67E60705D939A8542F954
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa
Signing time: Thu 01 Jan 2026 00:17:52 +0000
ROA not before: Thu 01 Jan 2026 00:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 185.239.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:07:d3:89:b6:7e:60:70:5d:93:9a:85:42:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 1 00:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=935423577a60ce5c2f99bccfcd45fb4762961ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:7d:ec:ac:27:05:87:6e:3b:02:49:43:b3:
f8:b2:3b:30:2e:ed:17:01:d5:b1:d2:7e:c0:f0:ea:
83:13:e8:6c:96:59:ca:03:d1:dd:01:2d:91:7c:6b:
19:9d:19:b1:23:84:98:ee:7c:cb:68:08:59:1d:39:
67:fa:9b:72:17:07:8c:81:14:3c:7b:be:a7:c6:60:
9b:3e:21:f6:78:62:76:6e:58:7d:a0:2d:f2:98:f7:
9b:80:d3:19:03:b3:79:1a:a3:35:69:fd:e4:f7:e1:
09:03:5a:1f:92:42:e5:b4:5c:1b:7c:2a:7a:0f:3f:
1c:6e:cb:81:31:34:91:31:79:fd:ec:63:0b:a6:49:
86:62:78:74:c3:9a:f1:e1:d0:a0:61:1c:11:32:78:
99:ea:f4:d7:83:7e:4c:55:52:80:b1:fc:12:07:b5:
43:02:67:59:3b:25:fb:67:77:4b:64:e6:06:ee:fc:
9d:1f:5c:87:ab:af:56:02:ff:0a:54:eb:73:63:47:
36:9a:1e:02:a4:2e:a4:a8:67:7a:ef:09:fc:11:3d:
50:9e:d9:b1:f4:02:8d:79:bf:5c:29:7e:d9:3d:84:
2c:8a:3f:59:8e:b7:73:01:f4:6e:06:10:9d:a1:72:
55:f9:9a:ca:07:89:fe:5a:c4:29:f1:1e:6f:91:5c:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:23:57:7A:60:CE:5C:2F:99:BC:CF:CD:45:FB:47:62:96:1E:F7
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/k1QjV3pgzlwvmbzPzUX7R2KWHvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:35:0a:b5:5b:b2:d5:49:39:44:84:35:a6:55:37:41:6c:f4:
12:9f:35:1d:ea:58:1d:d2:1c:dc:92:61:13:93:c4:96:46:47:
9f:49:68:5d:89:c1:f4:7e:70:a1:bc:d3:e8:ef:3f:04:a7:6f:
f4:c1:b6:df:05:52:b9:c0:d2:79:be:59:81:9d:33:cb:4d:c9:
6b:80:c6:8b:a5:7e:57:1d:03:3f:8f:1b:78:5f:45:30:0a:3a:
e8:73:d2:6c:cf:1c:68:20:ae:31:53:9a:7b:4d:46:8c:5e:99:
18:f5:6e:da:05:65:e0:be:11:0a:4d:55:ea:07:4a:b4:0e:cc:
2f:b0:b6:cd:1b:6e:03:09:ec:f6:4f:0b:26:3c:8e:d7:61:58:
90:58:3f:98:a7:d6:8e:4f:f1:3e:78:2c:80:3e:7e:c4:98:06:
aa:5f:36:9c:5f:c8:3d:7d:e5:ac:0b:bc:4a:95:45:8d:e9:79:
81:51:ee:be:9a:25:f1:a3:d1:f1:47:d6:7d:b8:81:77:3f:a8:
89:0a:36:77:e7:fd:82:2c:7c:4a:35:11:c8:77:a3:9e:ae:15:
da:ad:bc:32:39:44:f9:90:bc:a1:a0:6b:22:c6:74:db:f7:c9:
88:a7:f6:ca:83:91:a4:2f:15:ff:17:f6:86:f7:66:b3:69:b3:
6a:29:7d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:00 2026 by rpki-client