This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/poYWcnuxSWUQw-qCG45S2mPi0zU.roa
File: poYWcnuxSWUQw-qCG45S2mPi0zU.roa (raw, json)
Hash identifier: 3jABz4fmkg4saLIvKYstvBx79JjJ8+YfViVrz+rA8Jk=
Subject key identifier: A6:86:16:72:7B:B1:49:65:10:C3:EA:82:1B:8E:52:DA:63:E2:D3:35
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019B7BA4194BC2A6C4F378FAA3B9FB0B78E5
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/poYWcnuxSWUQw-qCG45S2mPi0zU.roa
Signing time: Thu 01 Jan 2026 22:18:30 +0000
ROA not before: Thu 01 Jan 2026 22:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209962
IP address blocks: 194.36.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:19:4b:c2:a6:c4:f3:78:fa:a3:b9:fb:0b:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jan 1 22:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a68616727bb1496510c3ea821b8e52da63e2d335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:fd:5b:d5:89:72:a7:1e:34:b4:6d:36:30:
50:91:9b:d3:02:ca:37:28:a8:65:77:8e:24:a5:ed:
c4:76:05:9d:ce:98:76:4a:97:08:b1:83:ea:3f:51:
3c:a9:db:ad:63:73:68:cf:1f:b3:99:42:ee:1a:17:
30:f4:2e:06:e4:45:ab:b9:f9:dc:ad:4c:55:9a:1d:
f8:d0:df:81:2c:71:c4:0c:a6:f1:a9:f7:37:be:9a:
77:53:aa:4f:69:e4:d4:e4:01:cf:fd:fd:e4:21:4c:
51:75:11:78:cb:28:ba:d0:38:c4:3b:17:94:af:f5:
2c:b4:64:00:7d:6c:5a:e0:96:4b:17:97:ff:9b:38:
d7:df:af:84:88:fa:43:2e:19:ff:a4:6e:bd:e6:2f:
b0:ad:ec:92:1a:71:ad:71:e6:96:06:17:d5:b2:47:
a5:39:9b:08:2b:87:40:1e:42:0b:e6:dd:4d:11:6c:
f2:97:26:1b:84:82:8a:15:dc:83:c1:0e:24:57:c9:
31:49:12:54:81:14:f3:0e:71:c6:26:19:85:3f:a8:
d2:e3:3f:94:dc:fc:67:8a:97:5e:87:b7:62:50:a5:
96:a8:0d:c9:12:2f:ff:5c:4d:50:cd:40:5d:48:e5:
af:01:0c:09:11:67:96:3d:f7:d2:41:d2:e6:26:c8:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:86:16:72:7B:B1:49:65:10:C3:EA:82:1B:8E:52:DA:63:E2:D3:35
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/poYWcnuxSWUQw-qCG45S2mPi0zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.176.0/24
Signature Algorithm: sha256WithRSAEncryption
75:09:90:86:da:16:73:18:c4:09:12:c1:a2:4e:05:eb:25:65:
f2:52:7b:a8:bb:9a:e2:94:f5:5b:63:cd:99:30:e3:eb:12:cc:
9f:8e:35:0d:9e:06:2a:0c:ff:8c:70:46:ac:05:3c:00:13:57:
f9:e8:e7:ba:bd:85:cc:fb:44:91:65:92:79:7d:b2:1a:fe:81:
4b:a0:2d:0b:8a:ba:6b:ec:14:fe:d4:13:e4:e2:ee:88:93:27:
d9:58:16:9e:59:2d:89:a4:51:76:c6:5c:b1:60:f0:50:ac:dc:
05:e7:5d:a2:15:87:e9:7f:39:64:8d:15:cf:a1:12:64:de:b1:
07:dc:5a:2b:07:d8:bf:db:1f:64:e0:2e:66:e2:ed:2b:47:3f:
e0:ff:94:37:48:08:70:ab:e8:e7:56:1c:4e:e0:f0:c5:f2:f2:
24:dc:a1:b4:a8:ce:26:a6:88:d9:bb:f6:58:88:cf:c0:e4:5d:
43:8f:29:43:f7:39:f7:15:7d:cb:76:5a:1a:69:80:98:b2:f5:
52:9f:ee:3d:7d:e0:38:f6:22:ae:42:25:60:67:4b:41:2f:40:
97:57:e0:fd:07:e9:96:a6:7b:4e:96:64:3b:22:e0:27:ad:e5:
ce:4f:bc:e3:f3:06:a8:32:1f:0e:a7:2a:00:93:78:0e:78:82:
73:40:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:56 2026 by rpki-client