This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/84a_5dunO5tT13Gn8_j3cCElA5U.roa
File: 84a_5dunO5tT13Gn8_j3cCElA5U.roa (raw, json)
Hash identifier: myvurQJ8o/9M7JEPK/Rdbm3h4MrG2xioG91InHNEhRU=
Subject key identifier: F3:86:BF:E5:DB:A7:3B:9B:53:D7:71:A7:F3:F8:F7:70:21:25:03:95
Certificate issuer: /CN=999281e87d5e9b8758f240e78eef7102c4012189
Certificate serial: 019B7C808717A2FD22A48DC99681D1B88179
Authority key identifier: 99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/84a_5dunO5tT13Gn8_j3cCElA5U.roa
Signing time: Fri 02 Jan 2026 02:19:16 +0000
ROA not before: Fri 02 Jan 2026 02:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.54.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:87:17:a2:fd:22:a4:8d:c9:96:81:d1:b8:81:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999281e87d5e9b8758f240e78eef7102c4012189
Validity
Not Before: Jan 2 02:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f386bfe5dba73b9b53d771a7f3f8f77021250395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:64:ab:e5:58:43:cc:05:98:d4:fc:40:2f:
2a:eb:f9:25:2c:5c:ab:01:7c:e2:ed:a9:4d:92:03:
92:f7:d0:0b:59:24:cf:2d:fa:a6:97:ef:8c:2f:7b:
51:98:e2:de:8f:0f:e8:dd:fb:a0:e9:a1:09:6d:32:
25:a8:eb:6e:85:b9:c8:fd:d3:00:b6:4e:05:76:ab:
de:ef:5e:14:c4:6d:a5:c8:cd:bd:ec:bf:d3:c9:68:
a3:33:2f:00:fa:93:2a:3a:c3:98:c0:19:c6:8c:f8:
0a:85:ad:74:b5:a7:f5:ed:fb:46:47:db:3f:a6:8f:
4f:c5:c7:b4:9c:36:a7:2e:84:a3:aa:f3:79:2e:93:
5c:08:9e:1e:7f:b3:42:04:1c:a8:8c:40:c7:16:e7:
56:e8:6a:aa:4b:88:bd:47:c5:f7:61:2c:df:83:a4:
32:a8:c9:72:36:49:6d:15:89:6c:26:05:77:08:e1:
83:51:65:c8:40:32:ad:3f:db:c5:03:da:2d:42:d1:
cb:95:44:3c:07:a1:ff:47:f1:13:30:2b:44:df:2d:
7a:83:55:91:2d:d6:83:44:70:91:b6:21:a6:68:11:
0a:75:88:31:55:c7:cf:e7:5f:3c:b2:16:72:4d:69:
f8:ed:a6:d7:4b:5e:8a:43:7d:93:45:1a:d6:f9:67:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:86:BF:E5:DB:A7:3B:9B:53:D7:71:A7:F3:F8:F7:70:21:25:03:95
X509v3 Authority Key Identifier:
keyid:99:92:81:E8:7D:5E:9B:87:58:F2:40:E7:8E:EF:71:02:C4:01:21:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZKB6H1em4dY8kDnju9xAsQBIYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/84a_5dunO5tT13Gn8_j3cCElA5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b83863-5f4b-42e3-b822-a0f00be3bce1/1/mZKB6H1em4dY8kDnju9xAsQBIYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:39:b7:f4:21:67:7d:e6:72:71:a9:39:de:25:d6:5f:fd:7c:
5d:34:91:7b:c3:a1:56:42:58:0b:0b:de:df:c1:c8:bb:74:6c:
06:a5:8c:f9:cc:33:cd:30:d7:10:60:39:73:4b:0b:d6:12:41:
80:24:cc:f7:f2:00:c1:4f:f1:f1:64:d8:b7:6e:f3:bc:d8:4b:
fd:fd:e3:72:e9:da:da:83:db:a9:d5:38:5a:63:07:25:3c:33:
a8:27:28:20:c9:76:59:42:28:a0:4e:02:fa:b5:8b:b2:26:60:
b9:54:8f:ef:bb:42:14:fc:f0:07:f5:f3:e6:11:c4:d7:04:69:
b7:fa:52:a6:d7:bb:14:ec:75:33:7c:4a:7d:6d:18:33:7b:a0:
fb:46:e0:3b:4d:0b:82:24:0a:92:44:a4:81:96:ee:82:c5:87:
d6:68:9a:18:63:43:76:e2:67:8d:4e:bb:a2:da:87:c7:fe:20:
27:61:ed:59:20:ef:c9:89:19:76:12:76:07:99:9f:5f:ae:5a:
c9:10:db:a6:ff:b3:46:f0:d6:cb:48:d3:6f:0e:05:8d:c2:41:
c5:f0:15:07:d9:08:36:2b:e3:7e:4a:54:d9:ea:63:3a:d7:c3:
44:2c:fa:db:41:41:10:86:24:63:bf:43:35:55:3e:53:bb:07:
34:28:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:25:54 2026 by rpki-client