This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/yStu7fUJ4d3XFcfOQg22LsTiouA.roa
File: yStu7fUJ4d3XFcfOQg22LsTiouA.roa (raw, json)
Hash identifier: ctxQ3m3dI3y/AfnIPbS2bBuBtxSFTcTZOSoaflEqyZo=
Subject key identifier: C9:2B:6E:ED:F5:09:E1:DD:D7:15:C7:CE:42:0D:B6:2E:C4:E2:A2:E0
Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial: 019B7EA6D4F8A983919FBAD11DC7D5ADAAE1
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/yStu7fUJ4d3XFcfOQg22LsTiouA.roa
Signing time: Fri 02 Jan 2026 12:20:21 +0000
ROA not before: Fri 02 Jan 2026 12:20:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197864
IP address blocks: 195.225.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:d4:f8:a9:83:91:9f:ba:d1:1d:c7:d5:ad:aa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
Validity
Not Before: Jan 2 12:20:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c92b6eedf509e1ddd715c7ce420db62ec4e2a2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:b6:55:d5:df:11:ce:5e:47:d3:23:50:a5:
2b:63:da:97:04:0c:1e:0e:8b:62:7a:8b:e1:bf:1e:
c0:c4:c8:42:70:55:7e:ee:92:40:3d:15:a7:67:c8:
bc:6b:3a:43:32:11:9b:01:58:f9:e4:66:2e:2a:90:
47:3c:c4:b4:61:77:31:96:98:ab:0c:5c:dd:a5:99:
62:8e:2b:ef:f4:65:13:bc:4c:a1:72:0b:de:2c:24:
27:fc:c0:25:47:27:72:f5:d2:e3:72:eb:3f:2c:3a:
c8:29:c3:60:2d:48:5a:7e:a0:50:f1:27:d4:a5:f6:
f4:bf:7d:6f:eb:a5:e0:15:71:c5:bb:a1:8f:35:a0:
79:cf:64:d6:58:4a:99:7e:39:b9:88:31:1c:51:87:
53:09:e1:a2:d6:bb:ac:bc:49:6d:3c:4a:66:d3:16:
cd:89:07:24:ed:f6:ee:36:7f:f5:69:70:7f:9b:a5:
2a:c8:d6:9b:6b:fc:8a:d2:9e:f7:c5:43:26:44:fe:
78:30:7e:ae:6c:d0:b3:3d:80:12:f8:c6:bf:53:52:
d3:9b:f4:d0:69:6a:b2:ad:c0:a9:2b:4e:1c:f3:98:
16:80:34:bd:d9:02:f8:12:96:0e:23:fb:f0:ec:86:
68:4a:ce:22:30:84:44:e9:c3:16:71:63:a3:6a:df:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:6E:ED:F5:09:E1:DD:D7:15:C7:CE:42:0D:B6:2E:C4:E2:A2:E0
X509v3 Authority Key Identifier:
keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/yStu7fUJ4d3XFcfOQg22LsTiouA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.50.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ff:eb:5d:9b:70:9a:ef:c0:5f:f0:11:bb:e9:8d:6a:68:88:
e0:79:b3:8d:4b:ba:ed:80:02:79:b7:5e:74:7d:78:92:15:37:
e1:d4:46:81:db:66:d1:b6:6d:55:c5:60:8c:ce:dc:4d:ac:4c:
a8:00:7c:fb:1b:e6:22:69:47:f4:3f:16:48:16:56:41:6e:87:
7f:2d:2d:8c:33:37:14:0e:87:4f:32:64:cd:c6:77:7b:c4:56:
e2:8c:ce:15:e3:59:3b:ce:f6:40:c5:2c:a2:09:a5:e8:eb:4a:
33:8c:c8:08:e7:37:8a:42:69:43:fa:53:29:42:e2:9a:3f:fa:
af:1a:f9:4e:b6:da:27:d1:11:a8:6c:44:2e:b4:02:bc:cc:40:
41:fc:99:b2:6f:e7:73:0c:ba:05:3a:b2:19:d4:70:2f:49:27:
4c:70:00:1a:3e:be:68:fd:c0:ce:c3:9d:8e:96:4f:23:9f:de:
a8:ad:a0:ff:84:b0:1f:ec:d0:ae:f9:e6:85:02:a2:22:13:ae:
a2:47:21:a1:6d:88:23:56:65:bd:24:0d:6b:b6:dc:4c:66:96:
c5:df:2c:41:11:4a:25:f6:d7:a8:3a:85:79:e4:8f:98:c9:e4:
7a:89:5f:f0:ec:7c:fb:fe:40:01:91:0d:00:76:e3:3b:b2:ea:
48:dd:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:03 2026 by rpki-client