This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/pBkk9LVfl1YeDqerByjctvBzveM.roa
File: pBkk9LVfl1YeDqerByjctvBzveM.roa (raw, json)
Hash identifier: 82EkgbLocyrxDWGRLc2Y2vY6Tv5jWzO4gLVCaKvDFFE=
Subject key identifier: A4:19:24:F4:B5:5F:97:56:1E:0E:A7:AB:07:28:DC:B6:F0:73:BD:E3
Certificate issuer: /CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Certificate serial: 019B7C1150CD738DF9257D7584DE56BC2462
Authority key identifier: 79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/pBkk9LVfl1YeDqerByjctvBzveM.roa
Signing time: Fri 02 Jan 2026 00:17:48 +0000
ROA not before: Fri 02 Jan 2026 00:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 195.95.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 00:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:50:cd:73:8d:f9:25:7d:75:84:de:56:bc:24:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Validity
Not Before: Jan 2 00:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a41924f4b55f97561e0ea7ab0728dcb6f073bde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:50:06:b9:52:4e:09:8a:18:56:3d:c1:d7:
c3:6b:50:e2:80:44:4e:6a:60:5e:95:84:bb:77:72:
13:14:d0:c0:73:84:f7:7c:4f:25:bd:09:00:70:ff:
12:0c:1f:e3:c1:f1:f3:87:ed:0a:48:42:56:6c:5c:
df:a5:c5:2e:a2:05:23:2f:5d:87:b8:21:48:75:83:
a3:cf:3e:40:eb:9d:79:89:00:52:a5:7f:97:27:6a:
3f:9e:1e:85:63:ad:2e:9d:e2:64:bb:c6:2c:98:43:
bd:bc:47:bb:ad:f7:9c:e8:2c:89:fa:24:9b:ac:a9:
d3:bd:1b:97:0c:b3:10:1c:68:b9:0a:7b:2a:67:cd:
24:fe:01:cd:a7:43:d0:08:c6:ac:ec:17:47:c2:f6:
b3:e2:84:62:05:75:10:fb:13:67:9b:47:ed:10:1d:
53:b3:cc:dc:ff:d7:d7:cd:a2:bb:bf:fa:d8:71:db:
9f:f5:27:dd:ea:76:66:8a:7d:ff:91:56:c1:d0:53:
c6:8d:4d:42:11:28:02:9e:94:30:d0:2a:80:97:fc:
80:69:44:0d:e4:25:06:d5:c8:c3:8c:8e:dc:fc:fc:
69:5f:63:87:1b:9f:d4:f7:2b:ea:f5:de:b7:8b:51:
0f:d0:ae:7c:d8:39:ef:e5:b2:fa:57:0c:88:e3:16:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:24:F4:B5:5F:97:56:1E:0E:A7:AB:07:28:DC:B6:F0:73:BD:E3
X509v3 Authority Key Identifier:
keyid:79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/pBkk9LVfl1YeDqerByjctvBzveM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:71:04:ae:57:bd:03:b4:2e:22:bc:e6:a5:a2:eb:e1:4d:3c:
3d:d9:a0:6e:29:2f:67:71:bf:9f:66:77:9a:79:1b:4c:bb:dc:
f3:18:9b:0d:47:3e:cf:1c:a6:fc:07:7e:71:da:c8:e4:0c:1d:
2e:37:7a:c4:86:f9:7a:2c:fb:fc:ea:47:0c:87:de:34:03:e0:
8a:f1:38:30:90:bf:28:dc:3c:a8:8a:e9:e7:97:62:35:10:76:
15:3e:9a:67:e5:4b:54:dd:70:ba:09:58:02:09:f3:70:73:85:
e4:05:a5:76:db:e1:ff:f7:cf:f9:9a:b0:97:f7:30:a8:0d:03:
95:28:c6:ef:74:61:43:56:26:92:8f:7e:1f:34:32:f5:cd:1d:
9d:8f:de:f5:5b:fb:ff:87:60:f5:fe:4d:c9:a8:cb:21:fe:50:
ea:40:8b:fd:5c:07:a2:a0:a1:32:ea:6f:b8:64:45:dc:03:e2:
7e:4c:0a:44:60:15:f0:f3:82:78:b6:86:a6:f2:9e:87:c5:8c:
56:07:b8:82:aa:41:1f:07:a7:c4:48:04:40:c2:fd:5e:c7:0d:
b4:fe:8a:9f:c6:91:3e:01:e1:73:3d:0d:71:ab:b4:68:11:b6:
d9:27:00:fa:38:1e:f2:5d:98:c0:3f:8b:bf:3b:bb:69:22:72:
37:82:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:26:57 2026 by rpki-client