This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/IXySvGWwyIxI8nEtVddBkpUSzNs.roa
File: IXySvGWwyIxI8nEtVddBkpUSzNs.roa (raw, json)
Hash identifier: PeXAtaHvOlNgD7t5U7ac8b5w1Raf72aXS6L9wTOS/m0=
Subject key identifier: 21:7C:92:BC:65:B0:C8:8C:48:F2:71:2D:55:D7:41:92:95:12:CC:DB
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019B7B361D9C075902A91C81EEF20E244B42
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/IXySvGWwyIxI8nEtVddBkpUSzNs.roa
Signing time: Thu 01 Jan 2026 20:18:22 +0000
ROA not before: Thu 01 Jan 2026 20:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47174
IP address blocks: 195.216.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:1d:9c:07:59:02:a9:1c:81:ee:f2:0e:24:4b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jan 1 20:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=217c92bc65b0c88c48f2712d55d741929512ccdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:f6:07:19:07:26:b0:af:49:52:3b:6c:fb:
7a:a0:58:aa:08:3c:f2:52:50:03:b8:a3:2c:89:94:
a7:e2:51:e2:34:24:66:be:d9:57:e8:5f:5d:4b:f0:
af:3f:a5:88:91:78:73:ba:5a:b3:dd:8b:09:25:06:
09:ab:05:bb:dd:31:6d:25:fa:51:d4:ce:62:5e:48:
08:a5:b9:10:3c:27:e8:fc:30:40:13:bf:3f:e1:59:
25:b2:d3:59:9a:6c:cf:f6:25:78:32:11:17:cf:39:
0f:34:6c:85:b9:8f:d6:e9:f9:1c:af:6b:b9:62:fe:
f1:c1:95:b7:2f:40:e0:2f:e4:3c:b4:c8:a8:77:f0:
2f:87:e3:8f:02:a0:f5:b4:05:5e:40:97:4f:f5:b3:
06:40:80:e2:f8:c7:f5:39:9e:45:0b:09:4b:5c:0d:
cf:6a:4c:fe:cc:7f:ee:e3:48:fb:e1:29:18:90:3c:
d5:00:df:48:aa:75:b0:fc:cb:2c:b3:f2:06:0d:4f:
0c:47:c3:f1:a6:0a:9d:6c:f6:b9:93:c2:27:6e:23:
1b:5a:7f:6c:15:b2:bd:61:56:1c:35:08:c4:dc:77:
06:dd:6d:91:27:ea:a2:14:92:4f:f9:ad:41:ad:05:
3c:d8:df:d3:53:32:5e:d5:c9:85:cd:7c:66:ef:5f:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:92:BC:65:B0:C8:8C:48:F2:71:2D:55:D7:41:92:95:12:CC:DB
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/IXySvGWwyIxI8nEtVddBkpUSzNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.228.0/24
Signature Algorithm: sha256WithRSAEncryption
57:75:37:d6:c1:1e:77:82:43:cc:ac:50:0e:e0:31:04:65:fd:
6f:6b:58:e9:d4:c9:1d:19:fa:9e:ec:3e:5d:01:a4:92:b0:92:
0d:44:23:39:55:e5:dc:e3:32:3f:23:cd:a0:f6:3d:58:b3:79:
62:6d:37:7c:53:07:7b:78:a3:bf:15:bd:c0:a8:ab:73:d7:5f:
fa:78:44:86:2a:62:f7:ba:03:67:8e:a3:2d:cd:20:d1:c3:35:
6d:3a:ff:92:1d:f1:53:b0:6c:5e:f2:80:60:b6:d7:d1:f2:d7:
2a:98:d4:4d:8c:04:4d:d4:7d:a6:ce:1f:d6:dd:a3:85:10:50:
25:7f:58:a2:05:20:9c:1d:c5:bb:48:ab:a9:a4:6c:76:3d:1a:
fb:3f:aa:3c:35:a4:3c:d8:f2:d7:91:e5:9f:9b:0e:e0:78:8a:
8d:76:55:6d:72:79:78:3f:40:88:3f:39:b4:a4:e1:6c:29:3f:
9b:c9:44:b4:40:0e:87:a8:6b:9b:39:a0:90:3c:e6:14:5e:44:
72:c2:d5:87:e8:38:a9:a1:3d:0c:66:6a:25:88:ee:1a:bc:f4:
f3:af:c9:79:af:02:d1:0d:6e:03:7d:ad:de:b8:3c:26:91:0b:
67:c7:27:86:43:a7:52:2b:58:be:78:16:de:70:29:31:ce:89:
32:cc:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:09 2026 by rpki-client