This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/aDenCe1KG3TyvEfzC3K0RLYBIo8.roa
File: aDenCe1KG3TyvEfzC3K0RLYBIo8.roa (raw, json)
Hash identifier: O79f1hU9h1ztutsgUtFAtX9An++mnwkM5DagmosPmKk=
Subject key identifier: 68:37:A7:09:ED:4A:1B:74:F2:BC:47:F3:0B:72:B4:44:B6:01:22:8F
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 019B7EA491D31CCAD57A1352E0BF0C9916A8
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/aDenCe1KG3TyvEfzC3K0RLYBIo8.roa
Signing time: Fri 02 Jan 2026 12:17:52 +0000
ROA not before: Fri 02 Jan 2026 12:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 193.10.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:91:d3:1c:ca:d5:7a:13:52:e0:bf:0c:99:16:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 2 12:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6837a709ed4a1b74f2bc47f30b72b444b601228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:c7:ee:ff:23:19:44:6c:c5:80:a7:ab:48:
9e:f8:dc:dd:c5:a4:23:45:db:e4:5a:36:c4:25:dc:
1e:37:c8:ac:9a:78:25:98:de:77:c4:6e:45:89:f4:
16:82:13:8c:fa:77:83:f5:23:3c:53:a6:b4:6a:ed:
33:7a:3a:a8:bc:1e:56:20:48:87:95:71:63:9c:10:
83:68:0c:55:ab:8b:2f:9a:d6:bd:8e:e1:bf:1c:3c:
1d:3f:53:b5:ab:20:0b:46:cb:f0:7a:b8:76:de:0e:
4c:83:43:9b:9a:f1:ff:6c:05:31:6f:60:e0:41:d8:
06:a7:1c:ab:03:e3:a4:56:68:7a:3d:43:03:17:01:
de:5d:82:fb:1b:b1:d0:7f:49:5d:9e:5b:aa:ed:ff:
81:bd:e4:80:c2:39:8c:ef:cd:8c:97:bf:d0:5f:15:
45:4c:27:7e:7e:9a:6e:7f:a5:c6:0e:ad:5d:84:94:
5c:65:c7:90:f1:dc:1b:21:c5:04:fc:79:a6:41:c8:
ac:e6:9b:22:e4:c6:16:9e:d8:be:e1:9e:2e:12:b8:
30:fd:e7:ce:86:61:46:b5:dd:86:0e:93:ee:dc:fc:
5c:eb:97:05:39:bf:6c:db:11:e9:bc:b1:5f:e1:e5:
32:49:ce:48:5b:2a:65:fd:81:91:78:57:28:c5:3b:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:A7:09:ED:4A:1B:74:F2:BC:47:F3:0B:72:B4:44:B6:01:22:8F
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/aDenCe1KG3TyvEfzC3K0RLYBIo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.144.0/24
Signature Algorithm: sha256WithRSAEncryption
62:90:f7:76:72:32:19:31:32:f5:5c:af:48:05:96:92:da:18:
7e:9b:78:22:58:09:01:13:c8:f1:0a:92:a3:b8:9b:fe:eb:de:
4a:d7:d1:3f:31:03:6d:da:12:3a:70:36:de:fe:cc:82:b6:8f:
f4:69:c7:29:3b:36:e4:52:69:06:01:a3:01:19:ae:60:b0:87:
ea:07:60:06:24:c5:9e:51:74:92:6a:53:4e:97:66:b8:1d:c5:
52:bd:d7:1b:1e:85:67:b4:25:36:a2:98:4e:2f:8e:0d:06:30:
fb:a3:06:75:d9:aa:88:86:4e:03:73:33:17:db:1e:1c:f5:3e:
74:2c:72:48:e7:4d:a4:ab:61:c5:30:ad:10:8d:ba:ca:53:f6:
73:d7:b9:c8:6c:54:50:3b:85:0c:27:82:9f:c5:62:b4:25:f0:
65:15:c4:a3:78:76:9e:8f:e8:73:f6:24:31:cb:2f:f6:48:c4:
1d:31:05:a2:47:79:7f:96:44:4b:f8:6b:f4:42:c4:12:2c:13:
22:7b:44:3a:ae:da:41:bd:02:28:9f:7c:e8:aa:a7:b2:83:14:
21:4a:21:4b:01:e6:d7:23:66:34:f3:aa:87:7a:f9:71:08:ff:
da:51:1e:0f:23:f2:89:88:5c:e2:c1:c5:25:6e:1a:cf:9f:0f:
30:9b:d3:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pJHTHMrVehNS4L8MmRaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjYwMTAyMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODM3YTcwOWVkNGExYjc0ZjJiYzQ3ZjMwYjcyYjQ0NGI2MDEyMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v/H7v8jGURsxYCnq0ie+NzdxaQj
RdvkWjbEJdweN8ismnglmN53xG5FifQWghOM+neD9SM8U6a0au0zejqovB5WIEiH
lXFjnBCDaAxVq4svmta9juG/HDwdP1O1qyALRsvwerh23g5Mg0ObmvH/bAUxb2Dg
QdgGpxyrA+OkVmh6PUMDFwHeXYL7G7HQf0ldnluq7f+BveSAwjmM782Ml7/QXxVF
TCd+fppuf6XGDq1dhJRcZceQ8dwbIcUE/HmmQcis5psi5MYWnti+4Z4uErgw/efO
hmFGtd2GDpPu3Pxc65cFOb9s2xHpvLFf4eUySc5IWypl/YGReFcoxTsrlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGg3pwntSht08rxH8wtytES2ASKPMB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvYURlbkNlMUtHM1R5dkVmekMzSzBSTFlCSW84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQqQMA0G
CSqGSIb3DQEBCwUAA4IBAQBikPd2cjIZMTL1XK9IBZaS2hh+m3giWAkBE8jxCpKj
uJv+695K19E/MQNt2hI6cDbe/syCto/0accpOzbkUmkGAaMBGa5gsIfqB2AGJMWe
UXSSalNOl2a4HcVSvdcbHoVntCU2ophOL44NBjD7owZ12aqIhk4DczMX2x4c9T50
LHJI502kq2HFMK0QjbrKU/Zz17nIbFRQO4UMJ4KfxWK0JfBlFcSjeHaej+hz9iQx
yy/2SMQdMQWiR3l/lkRL+Gv0QsQSLBMie0Q6rtpBvQIon3zoqqeygxQhSiFLAebX
I2Y086qHevlxCP/aUR4PI/KJiFziwcUlbhrPnw8wm9Pi
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:23:30 2026 by rpki-client