This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa
File: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (raw, json)
Hash identifier: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=
Subject key identifier: 37:49:56:31:8C:BD:2F:AB:54:82:DE:42:FC:02:EB:75:58:23:16:93
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 019B7D5C77AC2595C6ACEC4DB7F6258D590E
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa
Signing time: Fri 02 Jan 2026 06:19:30 +0000
ROA not before: Fri 02 Jan 2026 06:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 193.26.246.0/24 maxlen: 24
193.26.247.0/24 maxlen: 24
193.26.248.0/24 maxlen: 24
193.26.249.0/24 maxlen: 24
193.26.250.0/24 maxlen: 24
193.26.251.0/24 maxlen: 24
193.26.252.0/24 maxlen: 24
193.26.253.0/24 maxlen: 24
193.26.254.0/24 maxlen: 24
193.26.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:77:ac:25:95:c6:ac:ec:4d:b7:f6:25:8d:59:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Jan 2 06:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=374956318cbd2fab5482de42fc02eb7558231693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:92:a5:50:df:69:2d:53:d8:9f:7e:c8:fd:
74:36:a9:62:a6:d8:31:0f:16:72:6c:24:ad:c4:fb:
ca:00:de:32:ef:b2:51:03:34:a2:7d:d5:d0:b1:c9:
35:80:64:3a:87:49:a1:d4:af:57:1f:d5:92:0b:92:
8a:78:bf:ae:7f:80:b3:c3:f8:07:da:41:d7:62:3b:
b6:cd:dc:d0:23:bd:6e:5b:48:3b:9a:72:9e:b6:ce:
de:80:cf:1e:82:84:54:c8:6e:d9:29:d4:37:1a:15:
8d:7f:58:5a:b4:c2:5d:e8:22:6d:71:0d:60:f2:06:
cd:9a:f7:93:b6:39:24:9f:d3:cc:55:25:35:c7:a8:
6f:f0:16:6d:ef:40:0b:d0:c0:e1:48:99:30:91:ab:
6d:86:22:7e:57:f0:e0:1d:c6:c7:29:84:93:e8:20:
24:ee:34:31:3f:e4:1c:8c:7b:18:a4:05:bb:53:65:
be:96:3d:5d:db:8d:5e:5b:0e:bd:cf:a8:ca:3d:84:
42:60:72:cc:a5:31:3e:4e:6d:0a:cd:68:f9:96:db:
ee:3b:d2:d0:e4:8e:10:8f:21:80:fe:8b:b9:c2:a6:
31:64:88:9e:0a:36:35:34:83:1f:5c:ea:75:52:46:
4d:c7:39:ad:18:2c:0d:4d:bb:6d:27:4c:fc:e8:83:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:49:56:31:8C:BD:2F:AB:54:82:DE:42:FC:02:EB:75:58:23:16:93
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.246.0-193.26.255.255
Signature Algorithm: sha256WithRSAEncryption
78:05:41:ce:be:bf:c3:e6:bc:11:a2:68:71:77:69:33:e5:dc:
28:a8:ad:7f:42:46:58:c5:ac:0b:e7:e4:28:de:44:fc:0e:d9:
01:44:95:a8:79:a0:47:d3:aa:00:65:a1:2e:cc:70:2f:c8:1e:
1c:5b:6e:60:ce:dd:cf:90:28:54:9b:d9:e5:d6:88:00:a4:5d:
66:2c:16:ea:0a:aa:f4:2d:c7:e8:3a:a2:03:49:38:40:08:ef:
b2:74:9c:6d:ea:65:71:c5:8d:52:12:df:ee:e3:58:c8:78:1f:
90:af:23:86:24:09:83:c8:f5:8e:88:1f:f4:f1:14:80:6a:9c:
c8:2b:4a:a2:84:d7:3a:0c:1a:92:08:6f:82:b6:07:d3:7a:d0:
27:0c:be:57:77:0f:71:84:37:33:bb:4d:3d:91:8c:1e:ac:74:
77:cb:2c:7b:8c:f5:6b:5c:e5:0b:9a:e0:cd:fb:5c:71:b2:ee:
e1:14:a9:de:80:cb:99:64:d5:84:ff:f5:0c:ee:3a:d0:9f:d1:
a1:e6:b1:2c:fb:ff:50:2e:62:53:4c:ef:aa:b2:e6:69:5b:e9:
95:cb:43:cb:f0:cf:43:6f:2c:6a:7d:dc:7f:34:4d:5d:b9:5c:
d0:8e:36:97:c8:d1:3a:86:18:08:1a:e8:f9:22:c9:26:f0:49:
47:65:22:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:17:57 2026 by rpki-client