This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa
File: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (raw, json)
Hash identifier: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=
Subject key identifier: 37:C3:59:77:C7:78:AD:1C:BA:FD:A6:65:43:52:01:F1:2E:D5:54:EE
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019B7C80C3298B341D9048546A7CC4993E27
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa
Signing time: Fri 02 Jan 2026 02:19:31 +0000
ROA not before: Fri 02 Jan 2026 02:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198938
IP address blocks: 95.169.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:c3:29:8b:34:1d:90:48:54:6a:7c:c4:99:3e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 2 02:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37c35977c778ad1cbafda665435201f12ed554ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:44:27:56:d8:43:d4:1e:4c:89:8c:48:20:
39:d0:ef:db:57:56:59:51:e1:35:2a:3a:4b:bb:ec:
16:78:b2:f1:60:cc:07:c1:b7:5c:99:53:1c:b1:ff:
5f:32:cf:43:b5:b0:13:27:88:c7:4c:86:bb:66:a0:
a8:07:2f:ce:5f:b1:82:31:01:f8:ba:49:b5:5b:f9:
10:a5:81:88:2d:62:02:40:0b:2a:e5:c2:88:6f:05:
82:ec:eb:88:f0:7a:c4:01:a8:c2:8c:e7:0a:bb:4a:
0f:d5:0b:9d:cd:54:f1:54:2f:5e:9f:0e:e6:9d:4c:
34:93:b7:60:8b:3c:1e:ea:86:e3:95:4e:af:8b:1e:
2e:81:5e:1b:2b:07:08:b9:31:1f:ab:2e:f2:35:76:
da:69:6c:d5:05:79:65:26:d0:65:10:b7:a5:e1:40:
15:eb:09:4f:1e:40:26:a1:c1:5e:16:a3:f9:64:4d:
04:5f:16:6e:ad:0f:2f:97:c1:8f:d1:8a:f7:23:c9:
6a:39:cc:79:ef:26:7e:a6:fd:a8:13:85:54:58:8e:
39:a5:33:de:fd:71:f1:d8:bf:7b:77:f3:d0:08:e5:
3e:f3:f3:ef:41:ce:cb:87:4f:0c:e3:bc:33:67:f7:
c6:cb:b4:a8:88:41:f6:d5:a3:e5:65:4b:e3:54:a5:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:59:77:C7:78:AD:1C:BA:FD:A6:65:43:52:01:F1:2E:D5:54:EE
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ee:ef:fc:78:4c:63:f1:fc:2c:f2:b2:17:84:11:e6:f8:fb:
50:4b:6a:59:a3:9d:28:a4:10:4c:7f:af:f1:5d:26:5c:ad:d1:
61:75:f7:31:0c:bd:36:bc:ef:c7:aa:56:df:5c:77:d9:b8:53:
c6:fa:e8:2f:01:b9:c5:ac:05:4d:f3:4c:2e:8b:4d:01:bf:1f:
c4:49:ce:b3:21:02:ff:3b:2d:4a:e3:c7:bb:02:bb:bd:cf:cf:
9c:5e:2c:23:eb:60:94:59:8a:2c:9f:e2:ea:53:b6:32:c5:3a:
6a:ef:42:3c:34:c9:c4:20:7a:78:dc:5e:fd:12:a4:38:8d:dc:
03:0a:6e:17:ae:6d:23:b2:aa:cf:48:7b:f7:49:cf:35:da:ed:
ea:8c:f8:9d:90:27:38:78:fe:44:30:43:62:29:c8:58:e3:bd:
80:4a:d3:fa:e4:f3:38:44:17:25:7f:07:ba:89:08:f9:37:c7:
86:b6:ed:dc:15:7a:d5:e9:a5:be:3c:c2:e2:48:64:55:e8:7d:
83:88:64:f2:96:2b:4e:af:d9:ed:d2:ce:60:80:b2:52:07:18:
cd:61:fa:f1:f1:ed:93:29:d7:d6:0e:4d:af:24:09:cf:15:e3:
b6:9f:9b:ba:66:40:d8:35:ff:84:1b:d6:1d:71:c6:36:5a:d9:
d4:f6:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:56 2026 by rpki-client