This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa
File: 84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa (raw, json)
Hash identifier: rNTsCrnkBSEotffzabMsfyCIf6z9oVHssU96RenS0Ts=
Subject key identifier: F3:8B:DD:E6:31:56:EE:73:A6:96:A7:C3:C3:FC:5A:D8:91:A0:EC:18
Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial: 019B7DCB5C3E7982F022C80B1660E29D5DB4
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa
Signing time: Fri 02 Jan 2026 08:20:37 +0000
ROA not before: Fri 02 Jan 2026 08:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25006
IP address blocks: 193.127.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:5c:3e:79:82:f0:22:c8:0b:16:60:e2:9d:5d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Validity
Not Before: Jan 2 08:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f38bdde63156ee73a696a7c3c3fc5ad891a0ec18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:95:4d:37:50:e6:7e:33:40:10:9c:6e:2e:
74:e1:52:d4:40:56:f3:67:38:44:50:cc:0b:96:44:
b2:36:e9:95:43:e3:7e:ba:2f:3a:23:be:a1:e3:2a:
19:bc:30:67:a9:fa:fc:18:15:c1:b8:f7:63:c4:02:
83:ba:7c:e9:36:8a:4b:f9:90:cd:c8:64:78:e0:7e:
e8:65:a7:88:cd:2a:75:ef:dc:54:39:92:8d:39:7e:
ed:77:c9:b2:1f:d9:19:7b:23:52:e8:a3:ac:e0:db:
76:7a:52:0a:d8:54:a7:1d:6d:28:1c:a6:ab:ac:7f:
aa:8b:9e:1c:15:8a:23:3c:08:3d:5d:47:67:89:e5:
f8:84:98:a1:8a:92:59:06:f8:89:e9:3d:87:3b:13:
e4:4b:fd:51:fb:ca:a2:3d:a6:83:3b:27:ae:34:d6:
78:ba:41:a0:14:4d:79:fb:07:92:db:c8:05:ea:70:
27:78:38:95:ec:09:c4:9e:ed:2f:c6:f8:ec:15:a1:
d9:50:1c:18:db:96:1a:bd:2e:44:cf:b4:ad:c6:25:
44:f7:fd:ac:fb:1f:a7:73:df:bb:03:e9:76:02:17:
7a:7d:5b:cf:79:11:e3:b8:9f:3b:59:37:19:78:da:
d5:36:e5:39:0a:90:8b:ee:e5:79:62:5e:ff:0d:cf:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:DD:E6:31:56:EE:73:A6:96:A7:C3:C3:FC:5A:D8:91:A0:EC:18
X509v3 Authority Key Identifier:
keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/84vd5jFW7nOmlqfDw_xa2JGg7Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.127.246.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3e:1e:2b:cf:17:c5:61:10:84:a8:5b:13:80:de:e3:6d:f1:
74:a3:c5:ef:b7:cc:e6:fb:d0:31:00:48:e7:da:7c:ed:31:51:
f0:18:c2:c3:c2:81:ce:68:3e:a9:49:d8:40:fa:bf:e6:2a:f3:
65:07:b1:a4:f0:44:18:be:63:c0:a3:c7:80:cd:b0:cb:9c:aa:
0f:97:d5:9d:71:5d:6c:fa:13:9e:05:43:b3:34:50:a0:1f:b5:
08:b7:cd:89:6d:ed:61:8f:ec:82:30:e0:78:a2:5f:b2:73:09:
95:73:c3:64:71:20:7a:84:0d:92:8d:2f:d6:d3:79:e2:c6:a1:
7f:1e:e0:f0:32:b0:ee:a5:e7:02:79:e9:ae:0e:a6:95:ee:68:
f9:61:d7:f5:c0:22:ae:8a:f4:9f:4c:85:83:ea:18:59:d1:2b:
0c:fe:00:6b:56:83:09:0f:8b:c5:54:6c:39:75:2e:9d:0a:a7:
e2:0d:f3:36:bb:48:c0:28:56:43:be:d4:ea:19:4c:6f:bd:34:
bc:66:55:39:85:e5:fb:07:4e:d1:03:c8:94:ef:e5:da:08:51:
8a:77:df:1f:47:b0:86:2a:d4:c6:0c:f0:3a:bb:4e:0c:ab:fe:
48:17:08:ab:cf:7a:65:ca:a6:bf:8f:31:d3:5b:c4:62:bd:43:
4d:9b:6a:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y1w+eYLwIsgLFmDinV20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjM2IwYWU1YjdmNzgxMTIyYzcwOWEyNjUwYWRmOTcyOTE4
N2UxZTEwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzhiZGRlNjMxNTZlZTczYTY5NmE3YzNjM2ZjNWFkODkxYTBlYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAaVTTdQ5n4zQBCcbi504VLUQFbz
ZzhEUMwLlkSyNumVQ+N+ui86I76h4yoZvDBnqfr8GBXBuPdjxAKDunzpNopL+ZDN
yGR44H7oZaeIzSp179xUOZKNOX7td8myH9kZeyNS6KOs4Nt2elIK2FSnHW0oHKar
rH+qi54cFYojPAg9XUdnieX4hJihipJZBviJ6T2HOxPkS/1R+8qiPaaDOyeuNNZ4
ukGgFE15+weS28gF6nAneDiV7AnEnu0vxvjsFaHZUBwY25YavS5Ez7StxiVE9/2s
+x+nc9+7A+l2Ahd6fVvPeRHjuJ87WTcZeNrVNuU5CpCL7uV5Yl7/Dc8pwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOL3eYxVu5zppanw8P8WtiRoOwYMB8GA1UdIwQY
MBaAFCw7CuW394ESLHCaJlCt+XKRh+HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEt
ZmZjY2EzZTFmMTdmLzEvODR2ZDVqRlc3bk9tbHFmRHdfeGEySkdnN0JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81M2UyNmItZTdlZS00NzNlLWE1NGEtZmZjY2EzZTFmMTdm
LzEvTERzSzViZjNnUklzY0pvbVVLMzVjcEdINGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwX/2MA0G
CSqGSIb3DQEBCwUAA4IBAQBWPh4rzxfFYRCEqFsTgN7jbfF0o8Xvt8zm+9AxAEjn
2nztMVHwGMLDwoHOaD6pSdhA+r/mKvNlB7Gk8EQYvmPAo8eAzbDLnKoPl9WdcV1s
+hOeBUOzNFCgH7UIt82Jbe1hj+yCMOB4ol+ycwmVc8NkcSB6hA2SjS/W03nixqF/
HuDwMrDupecCeemuDqaV7mj5Ydf1wCKuivSfTIWD6hhZ0SsM/gBrVoMJD4vFVGw5
dS6dCqfiDfM2u0jAKFZDvtTqGUxvvTS8ZlU5heX7B07RA8iU7+XaCFGKd98fR7CG
KtTGDPA6u04Mq/5IFwirz3plyqa/jzHTW8RivUNNm2pL
-----END CERTIFICATE-----
Generated at Tue Jan 27 12:59:52 2026 by rpki-client