This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa
File: YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa (raw, json)
Hash identifier: GG+KZY/DsNiZCRN1+BVms1rbvVxcFkZrjnSVRWlHuMg=
Subject key identifier: 60:65:62:F4:8B:9F:C5:A5:32:E2:AC:6D:43:4B:D1:E4:CE:0A:8F:29
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 019B7759273D1F38F0A54221750674F9473C
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa
Signing time: Thu 01 Jan 2026 02:18:10 +0000
ROA not before: Thu 01 Jan 2026 02:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12502
IP address blocks: 193.105.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:27:3d:1f:38:f0:a5:42:21:75:06:74:f9:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Jan 1 02:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=606562f48b9fc5a532e2ac6d434bd1e4ce0a8f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:0e:55:d9:b4:83:27:e3:5f:49:04:24:13:
99:a8:9a:26:39:16:2f:95:c0:15:35:eb:e5:cd:55:
ff:4c:d9:28:e9:9f:3e:9d:cf:ea:27:cf:77:f2:01:
29:42:f1:ae:6d:b0:6b:8b:dc:01:02:3c:b4:77:e9:
8a:a9:c0:90:08:4c:dd:5b:21:e9:08:e6:af:5c:16:
41:fd:50:74:03:c9:ea:82:c2:87:0a:ad:9e:d7:c0:
af:a2:30:f5:d8:1d:2d:07:cc:69:fd:33:5b:54:4b:
79:8c:f9:3e:00:94:7a:a7:05:95:2e:04:42:97:49:
8c:6f:07:65:a0:5c:82:2f:13:7b:5a:04:f6:c6:0f:
6f:30:da:62:f9:c7:06:94:66:1b:15:36:b9:90:9e:
d7:65:9a:ef:eb:a3:5e:1d:62:eb:b0:0b:95:ea:55:
cc:3c:9d:b3:cf:ff:39:3a:52:55:41:e4:c2:f2:5b:
01:ba:04:23:b6:66:cb:e2:2f:2e:a7:94:ee:97:64:
14:6b:74:3d:6a:05:a7:b3:df:0f:1e:88:79:0f:a1:
f1:6a:46:44:c0:1d:26:ca:8d:45:88:70:da:e5:bf:
1c:da:ce:7d:a0:75:27:d6:33:b9:ab:f6:bc:ae:a9:
26:c9:3f:bd:14:85:b0:fd:5a:15:2b:3d:1a:92:ca:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:65:62:F4:8B:9F:C5:A5:32:E2:AC:6D:43:4B:D1:E4:CE:0A:8F:29
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:47:69:27:8a:22:dd:63:69:33:4f:18:e9:68:e5:7c:60:c8:
6e:26:13:f2:c2:c1:7d:06:82:1e:b4:65:d8:29:43:78:e9:0b:
8e:8c:c8:2a:5d:10:e2:ac:37:f1:fb:6d:f5:58:04:1e:70:4e:
9f:aa:1b:2a:02:10:e6:19:6c:8a:c7:b4:ec:58:8f:72:d8:1e:
a5:14:85:8b:7b:a0:69:20:8e:58:66:27:0a:77:ab:d6:f0:05:
84:34:1b:84:b5:d5:41:c2:a5:63:74:2d:5b:d9:dd:49:14:00:
64:e5:3f:31:b5:c0:2e:7e:8a:17:8b:80:40:77:dd:3c:e8:a2:
35:27:8f:8b:b8:63:4c:d7:80:05:b2:68:4f:85:ec:92:0d:c8:
c9:c3:a5:69:5e:e3:ad:dc:3e:3f:4c:f7:7d:0f:a7:93:15:8c:
74:4c:bc:df:73:2c:d0:30:c8:cc:89:75:86:f0:20:e5:fc:46:
24:32:0e:87:69:8b:7a:a0:2f:3e:7f:4e:d7:21:42:fd:f4:b8:
6e:33:e7:5f:45:30:a3:56:80:80:81:5c:5b:1e:fa:d4:26:77:
46:14:47:5e:5a:52:70:d3:9a:73:02:f6:c9:a2:b9:4f:bc:a9:
05:fd:ca:15:30:9f:34:1b:53:0d:7a:66:c6:da:67:bb:41:d8:
d4:35:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:03:20 2026 by rpki-client