This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/PRl542vKWzERjZy8INPb-TgkXr4.roa
File: PRl542vKWzERjZy8INPb-TgkXr4.roa (raw, json)
Hash identifier: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=
Subject key identifier: 3D:19:79:E3:6B:CA:5B:31:11:8D:9C:BC:20:D3:DB:F9:38:24:5E:BE
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019B7E38B8B711E9D99CA9345CE919653AB5
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/PRl542vKWzERjZy8INPb-TgkXr4.roa
Signing time: Fri 02 Jan 2026 10:20:05 +0000
ROA not before: Fri 02 Jan 2026 10:20:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 217.180.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Jan 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:b8:b7:11:e9:d9:9c:a9:34:5c:e9:19:65:3a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 10:20:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d1979e36bca5b31118d9cbc20d3dbf938245ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:31:be:51:38:5c:9d:41:50:b2:43:f2:52:
24:5f:72:5d:32:64:28:ab:ee:90:08:88:2f:7a:7e:
51:c3:ef:fa:48:55:0e:5c:d6:1e:43:b6:32:aa:8e:
a2:ad:70:0f:55:2a:67:2e:9e:c2:4c:66:a8:13:2f:
e4:b5:55:41:38:2b:3d:48:90:f6:21:60:11:b8:99:
66:1a:f6:1a:c4:3e:20:de:55:55:66:d1:e5:4f:81:
6b:01:63:56:99:f9:cf:6c:a8:93:da:bc:aa:ec:da:
91:92:ee:7d:89:81:9e:0a:73:0b:48:f1:45:04:f7:
cc:c3:d3:16:75:cb:cd:ac:8f:bb:71:81:a3:1c:1c:
67:7e:69:71:c9:f8:28:3e:78:a2:21:9f:3b:36:57:
e9:ea:5a:66:e8:da:fa:16:4d:6f:a5:48:37:64:42:
93:e8:e3:57:a0:1e:16:37:a5:4d:99:ac:67:d3:be:
48:f1:45:ec:2b:70:15:f6:7b:9c:ec:be:6b:73:e0:
d4:b9:54:0d:45:31:13:80:8f:83:a7:8c:45:0d:07:
50:40:cd:b7:86:7b:bb:31:38:4d:8c:a5:0d:f9:30:
be:82:ca:20:bd:ae:e5:a8:65:72:7b:22:d7:c7:63:
25:05:b7:5f:79:91:ee:45:dd:be:3a:d1:b7:82:86:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:79:E3:6B:CA:5B:31:11:8D:9C:BC:20:D3:DB:F9:38:24:5E:BE
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/PRl542vKWzERjZy8INPb-TgkXr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
70:63:57:69:f0:a9:f8:e3:eb:21:b6:4b:10:a8:20:35:02:f7:
63:d2:75:5b:64:d4:c2:cf:d8:2b:c6:64:53:49:3e:4f:53:92:
90:9f:f7:e6:d7:e7:f7:5d:74:aa:89:e8:dc:98:25:c9:29:bd:
9b:39:81:33:e7:d3:65:a9:b5:81:da:d7:0c:b5:da:f9:4e:68:
d2:0e:2a:d4:5b:32:80:3e:29:72:b8:80:47:72:3f:33:ce:ff:
73:a8:a7:88:ce:62:96:d1:cb:f1:8a:32:f1:54:78:b5:09:75:
c1:d6:75:18:9b:8e:45:ab:35:7a:6c:f9:1f:d1:a7:50:62:8a:
2a:56:7a:ab:36:cf:1f:79:90:26:77:a1:80:4e:1a:90:d6:35:
11:35:8d:5b:23:e8:36:0c:d0:ac:f4:cf:eb:14:77:cc:ec:6c:
8c:55:80:5d:8d:a7:9c:6d:18:9b:50:da:c6:ae:ed:d6:a6:13:
a0:55:86:c6:6f:d4:c6:c0:09:49:45:5b:32:bd:ce:4d:ea:ca:
0d:d0:75:fa:8e:09:c8:25:59:ec:bd:6c:55:cd:12:e8:54:65:
9e:52:a7:f0:29:70:99:74:35:9f:d6:91:36:5e:8a:10:62:b5:
c3:67:96:74:d9:ba:a7:14:91:91:5f:8d:e5:4b:fc:38:40:a6:
54:a6:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 21:10:47 2026 by rpki-client