This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/80aJQ6CwmN_iXkdynJ-JevLk1_4.roa
File: 80aJQ6CwmN_iXkdynJ-JevLk1_4.roa (raw, json)
Hash identifier: hkZIR1/iUDUqAH2nUaoa+yABGOF58uWl3Iy2v40ImfE=
Subject key identifier: F3:46:89:43:A0:B0:98:DF:E2:5E:47:72:9C:9F:89:7A:F2:E4:D7:FE
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 019B7F84664929E3C8A8539D0AD1E4BBEBA4
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/80aJQ6CwmN_iXkdynJ-JevLk1_4.roa
Signing time: Fri 02 Jan 2026 16:22:21 +0000
ROA not before: Fri 02 Jan 2026 16:22:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52117
IP address blocks: 195.33.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:66:49:29:e3:c8:a8:53:9d:0a:d1:e4:bb:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 16:22:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3468943a0b098dfe25e47729c9f897af2e4d7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:f1:de:67:02:a3:24:a1:e9:2f:ab:0b:ae:
e7:89:b3:91:6a:39:9e:61:c1:14:53:10:93:f7:62:
0d:72:a6:b0:e2:0e:38:c0:34:1d:af:5a:de:6d:14:
7e:5c:9e:ab:3d:18:1b:85:b0:fd:a4:75:4d:eb:0b:
a5:71:ea:2d:a2:44:87:9d:19:44:bc:2a:df:4d:aa:
a3:93:63:47:70:01:f3:18:88:3c:6c:c8:93:1c:0d:
89:f2:da:9f:22:15:6a:23:08:cd:fb:65:e6:e2:da:
b7:7a:07:12:4d:03:44:d9:e1:2a:45:32:26:3a:84:
dd:c4:08:12:8c:15:13:e1:82:af:d3:19:18:13:b1:
27:05:5f:02:40:78:70:53:40:88:ae:b2:52:83:97:
97:bb:53:47:87:b6:4b:a3:50:9f:1d:e6:aa:77:ee:
ec:2f:0e:f4:ed:20:6e:a3:5f:dd:34:cd:2c:4f:dc:
6a:98:42:57:95:1e:ac:b6:28:45:28:61:3d:a1:d4:
c2:d6:11:bd:c5:ac:f7:18:4d:7e:8f:b4:8c:0e:dd:
12:69:ea:a9:68:ad:bc:e3:67:e8:24:45:08:15:4d:
86:ed:a2:85:91:f1:42:35:19:69:f1:a8:21:18:f3:
54:eb:cd:95:ab:45:db:fa:76:e3:67:e3:74:b9:36:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:89:43:A0:B0:98:DF:E2:5E:47:72:9C:9F:89:7A:F2:E4:D7:FE
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/80aJQ6CwmN_iXkdynJ-JevLk1_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.33.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fe:27:41:35:77:4e:a3:fe:4b:cd:a4:40:53:a1:98:7f:07:
ff:53:f3:ab:b4:d2:4a:94:b3:47:40:d8:73:93:05:b7:22:60:
3b:d5:8b:eb:18:ed:0b:4c:0f:28:f8:30:da:7e:c6:1b:11:19:
7d:dd:da:6f:87:e4:73:19:db:72:6c:30:a0:5b:9b:57:69:7b:
de:c6:d3:ef:88:75:9e:59:3f:c1:a0:17:f3:75:66:83:5a:0f:
29:7e:9a:be:51:98:49:0e:f8:fc:1e:eb:58:02:34:10:04:f7:
1f:2d:1a:9b:8a:d2:b1:0f:05:f3:a9:6c:79:74:7c:78:ae:ad:
88:1c:5e:4e:34:e3:43:5d:11:b8:89:38:90:70:e9:de:68:27:
41:9a:41:65:aa:c6:6b:ca:0c:0f:17:00:e7:57:8d:96:e4:e9:
4c:90:bf:90:30:c2:b4:6f:99:6d:34:ae:02:72:43:af:0c:4c:
f8:97:17:2b:f9:48:07:25:84:83:6d:72:c8:55:63:b6:ad:c0:
e1:da:a9:fc:1a:56:f7:68:d0:e3:9a:5e:f5:60:d8:9d:e6:22:
b9:06:81:86:69:9a:63:70:36:89:f5:a3:b0:48:db:a4:7d:e5:
b1:4a:5a:11:5c:7f:e4:6c:ab:d1:0d:3b:ec:56:e1:b7:48:71:
8b:3d:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:38:52 2026 by rpki-client