This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa
File: N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa (raw, json)
Hash identifier: p2mqoQD/zjBSyOFNJGsdIrV1TF5FFtEk9b08kwg3UPc=
Subject key identifier: 37:58:E7:64:A8:05:59:E7:8E:FE:64:8E:67:E6:5E:E1:54:2E:C3:8D
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 019B7AC8EA162B787817C3903415AEFA2884
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa
Signing time: Thu 01 Jan 2026 18:19:06 +0000
ROA not before: Thu 01 Jan 2026 18:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 193.25.48.0/24 maxlen: 24
193.25.49.0/24 maxlen: 24
193.25.50.0/24 maxlen: 24
193.25.51.0/24 maxlen: 24
193.25.52.0/24 maxlen: 24
193.25.53.0/24 maxlen: 24
193.25.54.0/24 maxlen: 24
193.25.55.0/24 maxlen: 24
193.25.56.0/24 maxlen: 24
193.25.57.0/24 maxlen: 24
193.25.58.0/24 maxlen: 24
193.25.59.0/24 maxlen: 24
193.25.60.0/24 maxlen: 24
193.25.61.0/24 maxlen: 24
193.25.62.0/24 maxlen: 24
193.25.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:ea:16:2b:78:78:17:c3:90:34:15:ae:fa:28:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Jan 1 18:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3758e764a80559e78efe648e67e65ee1542ec38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:dd:03:e9:c1:5b:7d:99:cd:50:19:37:ea:
e0:b6:fd:28:39:ba:eb:88:39:3d:2f:29:c1:8d:98:
e2:26:d0:30:45:2e:b0:70:f6:96:bf:01:58:36:4f:
c8:6f:81:48:85:6e:40:2c:e2:b4:9a:5c:8c:05:dd:
66:e4:6c:de:ae:34:05:b4:f1:c0:b4:ae:5c:83:ad:
d0:69:0e:48:20:a8:13:29:45:79:56:4c:53:fd:81:
d6:95:94:5f:99:bb:29:5e:64:63:3a:6b:7e:f6:7a:
c6:b1:00:50:5d:93:f4:bc:09:0e:31:31:e4:5e:51:
ee:ea:dd:16:38:c9:fe:ad:63:17:c8:b7:80:28:e6:
7d:75:d1:6d:72:da:04:3d:81:b6:39:7d:9a:11:b7:
66:4f:d4:9a:5c:13:50:4a:43:b0:8e:9c:c1:1c:7f:
10:76:21:37:fc:60:61:b7:54:8f:eb:87:06:72:14:
5e:ee:15:4b:a1:58:17:83:a9:ee:e7:b5:46:c9:50:
a0:0f:a3:30:b9:ff:69:f0:e3:ce:a4:38:aa:b1:16:
76:76:1c:99:c8:f5:6a:27:73:91:a7:d5:24:81:61:
3b:02:61:e6:9d:ba:60:c7:21:50:38:28:9d:a0:ac:
a3:22:aa:27:a2:e5:40:49:cf:8b:c6:ca:26:01:e8:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:58:E7:64:A8:05:59:E7:8E:FE:64:8E:67:E6:5E:E1:54:2E:C3:8D
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.48.0/20
Signature Algorithm: sha256WithRSAEncryption
36:c4:74:99:87:41:46:81:a1:fa:1e:51:1c:1c:37:52:15:97:
6c:2b:8a:fe:1f:76:7d:90:28:9c:a4:18:7c:46:76:f2:c1:94:
b3:29:17:60:fc:e3:e6:25:c4:1b:25:aa:cf:3a:37:4c:1d:60:
35:01:05:63:af:0f:76:85:23:2e:a0:18:86:40:51:0d:59:30:
45:f4:40:5e:0e:0a:22:a5:64:fc:e9:fb:82:ae:77:a1:ce:f4:
76:75:99:c4:82:24:15:21:49:e7:d4:ed:5c:d0:fe:f3:e7:76:
3b:30:16:0e:a1:5e:d4:cb:be:5f:8e:72:57:99:63:98:05:2a:
61:4e:ec:49:82:b7:8d:2d:a2:42:e0:20:f5:ff:b9:dc:97:58:
90:5b:1c:a5:39:c7:c8:ab:33:36:46:8c:95:97:04:c0:99:d9:
36:c6:d1:4b:f4:8f:97:ec:e9:00:ad:cd:25:2b:0d:fc:15:0c:
e6:52:03:34:a3:a5:8f:9e:67:e4:21:74:29:cc:73:aa:8d:78:
14:6e:88:3e:eb:26:38:84:de:de:16:e8:ba:28:36:d5:92:1d:
be:c9:49:d5:c4:78:d0:bf:12:c8:f6:20:e5:89:31:40:26:4a:
c5:5f:87:00:d2:29:a4:48:8f:d5:fa:5d:cd:70:0d:3a:56:b0:
a2:87:ef:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yOoWK3h4F8OQNBWu+iiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl
ZGEzNGEwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzU4ZTc2NGE4MDU1OWU3OGVmZTY0OGU2N2U2NWVlMTU0MmVjMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SzdA+nBW32ZzVAZN+rgtv0oObrr
iDk9LynBjZjiJtAwRS6wcPaWvwFYNk/Ib4FIhW5ALOK0mlyMBd1m5GzerjQFtPHA
tK5cg63QaQ5IIKgTKUV5VkxT/YHWlZRfmbspXmRjOmt+9nrGsQBQXZP0vAkOMTHk
XlHu6t0WOMn+rWMXyLeAKOZ9ddFtctoEPYG2OX2aEbdmT9SaXBNQSkOwjpzBHH8Q
diE3/GBht1SP64cGchRe7hVLoVgXg6nu57VGyVCgD6Mwuf9p8OPOpDiqsRZ2dhyZ
yPVqJ3ORp9UkgWE7AmHmnbpgxyFQOCidoKyjIqonouVASc+LxsomAegs/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdY52SoBVnnjv5kjmfmXuFULsONMB8GA1UdIwQY
MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt
NGRhZDQ4YTE2ZTQyLzEvTjFqblpLZ0ZXZWVPX21TT1otWmU0VlF1dzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy
LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwRkwMA0G
CSqGSIb3DQEBCwUAA4IBAQA2xHSZh0FGgaH6HlEcHDdSFZdsK4r+H3Z9kCicpBh8
RnbywZSzKRdg/OPmJcQbJarPOjdMHWA1AQVjrw92hSMuoBiGQFENWTBF9EBeDgoi
pWT86fuCrnehzvR2dZnEgiQVIUnn1O1c0P7z53Y7MBYOoV7Uy75fjnJXmWOYBSph
TuxJgreNLaJC4CD1/7ncl1iQWxylOcfIqzM2RoyVlwTAmdk2xtFL9I+X7OkArc0l
Kw38FQzmUgM0o6WPnmfkIXQpzHOqjXgUbog+6yY4hN7eFui6KDbVkh2+yUnVxHjQ
vxLI9iDliTFAJkrFX4cA0imkSI/V+l3NcA06VrCih+91
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:22 2026 by rpki-client