This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1-Mri9URhmkiVa4iw5spz39EIxSc.roa
File: 1-Mri9URhmkiVa4iw5spz39EIxSc.roa (raw, json)
Hash identifier: dtzko9RN76LXSZf3x4eR3rLOh5U43/tC36g9eGKY0FQ=
Subject key identifier: F8:CA:E2:F5:44:61:9A:48:95:6B:88:B0:E6:CA:73:DF:D1:08:C5:27
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019C18D61A0690C7F8F81B6DD37DDAD744AB
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1-Mri9URhmkiVa4iw5spz39EIxSc.roa
Signing time: Sun 01 Feb 2026 10:53:30 +0000
ROA not before: Sun 01 Feb 2026 10:53:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 144.56.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:18:d6:1a:06:90:c7:f8:f8:1b:6d:d3:7d:da:d7:44:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Feb 1 10:53:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8cae2f544619a48956b88b0e6ca73dfd108c527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:78:a3:45:19:ba:56:b9:e3:aa:85:25:fc:
f7:86:ee:21:de:68:e8:7a:7c:19:dc:7d:6c:21:ff:
a2:83:83:75:ea:d1:df:b2:c0:7b:3e:e5:cb:7c:74:
a8:ba:d7:b7:af:e9:ed:93:dc:b5:05:96:3d:c7:73:
15:f1:80:1d:e1:2e:ea:76:94:75:a5:73:2d:83:ad:
f7:95:8c:49:e5:15:2e:a7:0e:3c:fa:1b:b7:3c:95:
5f:ff:96:d2:f1:29:2d:9c:5c:5b:ac:ef:0f:b1:e0:
98:f6:8c:f5:94:84:8d:8f:ce:ef:68:ca:e8:73:e8:
fc:c9:3c:03:d2:6a:51:27:a0:8b:21:fc:69:fa:d1:
2d:a4:d7:39:c4:06:8c:65:68:dc:0b:2f:30:af:fe:
86:0e:c1:81:ff:f7:a2:fd:38:fa:db:48:bf:88:45:
41:c9:cb:0a:ff:0c:65:91:90:6c:a1:1a:76:b1:9d:
72:bf:1d:1b:cf:e9:99:60:66:86:81:0f:78:bb:ed:
b3:f8:b2:ba:12:f9:7a:b7:05:4e:18:b7:29:80:e0:
a1:00:d3:f7:55:92:a1:1a:37:3c:02:1e:c0:30:d1:
4f:08:42:54:aa:21:51:03:95:64:d8:ea:2f:30:e6:
c1:12:3c:dd:6b:d4:c9:5a:fc:d5:7b:01:c4:94:08:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CA:E2:F5:44:61:9A:48:95:6B:88:B0:E6:CA:73:DF:D1:08:C5:27
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1-Mri9URhmkiVa4iw5spz39EIxSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.37.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e4:ae:c1:62:98:6f:84:ce:0d:ef:eb:cc:a5:ba:cf:ba:b0:
4a:2f:a0:24:5c:48:ce:ef:38:b3:fc:5a:68:70:e6:1a:bf:8f:
fc:dd:77:c6:9d:3d:d4:c2:5e:30:30:5c:0c:0e:b7:12:4f:76:
96:b3:ad:5e:02:94:da:07:73:2d:11:bd:81:42:f4:9a:a9:ad:
9c:33:fe:53:46:7a:a1:93:45:ef:76:84:ca:e2:9f:1d:01:69:
5f:5f:64:8c:95:87:f2:41:4d:88:62:3e:76:73:61:3a:6c:a0:
ea:64:14:40:42:48:20:3c:b2:3f:9b:8d:bc:27:25:9b:45:d2:
e2:33:42:46:a7:48:e0:d1:48:8a:8f:21:f0:7f:dd:3c:52:75:
b0:27:c4:06:86:23:48:79:f9:d5:c5:a1:50:14:a8:bc:01:c2:
92:b9:d5:cd:e1:6b:71:07:73:0c:11:6e:48:e5:ea:7a:34:53:
f6:75:a6:bc:ec:1e:b9:e2:2c:44:c8:01:a9:63:46:3f:5a:ba:
15:19:b7:2b:cf:43:32:7a:47:28:4f:a7:04:19:86:70:a5:b3:
ec:8a:ed:fd:7e:07:ee:46:17:f7:0e:3a:fb:a2:f0:8a:29:15:
ea:29:f9:e9:e5:4c:c1:60:a1:69:08:4e:d3:ba:b8:38:2a:5b:
69:a6:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:50:21 2026 by rpki-client