This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa
File: 14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa (raw, json)
Hash identifier: weE6FiUWFJlgjSn45t8SYEOqGWgUP2W1fkEVmJ8kNgo=
Subject key identifier: D7:88:48:15:45:BA:BD:2D:A5:46:B1:61:85:37:2A:9F:0E:58:D3:F5
Certificate issuer: /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial: 019B7F81F49E5390BC83BD737CF38D6130AC
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa
Signing time: Fri 02 Jan 2026 16:19:41 +0000
ROA not before: Fri 02 Jan 2026 16:19:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62161
IP address blocks: 2a00:f5a0::/29 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:81:f4:9e:53:90:bc:83:bd:73:7c:f3:8d:61:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Validity
Not Before: Jan 2 16:19:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d788481545babd2da546b16185372a9f0e58d3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:92:7c:09:78:dc:52:8c:63:04:82:a8:f5:
67:85:41:04:80:0b:9c:0d:68:7a:7a:36:1f:1c:02:
a1:1a:b6:e1:3c:b3:57:9c:84:2d:61:d5:0f:75:ed:
c9:fd:30:e7:47:90:d5:f7:7e:c4:0d:71:94:bc:f0:
69:e8:24:3f:63:cf:80:ca:6b:49:b7:94:81:d3:8f:
48:d3:2c:4e:c8:2d:ec:bf:2b:8d:bd:ff:c3:9b:c1:
20:d8:8d:dd:94:c2:95:6b:c3:1a:4b:1b:d0:9d:25:
a6:60:cf:c2:5f:54:25:dd:b8:cf:22:d1:4a:a8:64:
4c:c5:41:19:c8:b6:9d:dc:64:c7:b7:2e:69:07:f5:
51:03:cf:a7:ef:a4:a8:f6:ab:3c:82:f4:ce:02:9f:
27:21:af:38:2b:dc:a7:df:66:96:38:9c:59:02:c3:
03:52:30:3e:fc:ff:d2:e5:33:d4:7c:c3:56:fc:8c:
a1:82:05:6e:3b:b0:d7:cf:53:ed:65:91:fe:1a:4c:
dc:87:27:a1:1a:a2:f8:6b:1e:e2:ea:91:67:09:d2:
b2:34:e0:9f:f3:7c:82:1f:76:71:a9:f2:a2:65:ff:
1f:d0:fe:a8:6b:af:a2:ba:51:68:2f:db:4a:88:fb:
40:9c:0f:cf:ac:ce:1b:cc:e4:fd:e4:a4:11:c7:c7:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:48:15:45:BA:BD:2D:A5:46:B1:61:85:37:2A:9F:0E:58:D3:F5
X509v3 Authority Key Identifier:
keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f5a0::/29
Signature Algorithm: sha256WithRSAEncryption
46:ae:c1:1e:e6:b5:3f:e3:e8:5c:e6:af:01:d0:76:19:46:5e:
2f:30:04:0a:84:8d:26:bf:9c:31:c2:fa:28:06:de:2c:2c:71:
6d:47:19:92:17:ca:ff:16:56:5c:8d:60:aa:e5:89:8a:bd:a9:
c8:10:c2:94:9f:10:d2:8b:b3:39:13:ca:0b:67:25:ab:8e:b0:
0a:b8:10:64:79:83:43:54:1e:f6:14:84:f6:bd:29:e1:9b:4b:
1d:38:ef:6d:fb:4b:ab:21:eb:25:73:3d:4f:b3:94:ca:75:59:
4c:de:94:d5:4c:4b:67:c7:ac:0a:2c:6c:d0:37:c2:81:11:18:
bd:fa:dd:77:3d:27:c2:21:7b:fb:01:fc:59:97:ea:6c:5b:ac:
a7:2a:54:4f:8f:c6:42:4d:db:75:fd:91:81:b1:06:17:79:ab:
8c:69:59:8e:b7:cb:60:ce:4c:0a:8f:28:f6:5e:33:90:db:3f:
b8:e2:c3:7c:62:91:c4:3e:ba:91:db:fa:a1:37:05:49:2c:99:
8e:07:32:77:bd:81:8b:89:f5:fa:96:d1:b2:3d:bd:a3:3b:77:
77:22:48:97:d0:a5:0c:6f:c9:5f:b8:36:d0:b8:d6:b5:f1:f3:
72:7a:73:63:c2:3f:43:30:c9:22:39:69:d5:df:d5:7c:af:fc:
32:20:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:27:42 2026 by rpki-client