This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa
File: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (raw, json)
Hash identifier: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=
Subject key identifier: A5:C1:AC:61:0E:96:9A:32:D0:ED:F5:BE:97:9D:05:68:7A:BC:7C:0C
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019B7E38B914C003175E69790C55F0D3F3BD
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa
Signing time: Fri 02 Jan 2026 10:20:05 +0000
ROA not before: Fri 02 Jan 2026 10:20:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 213.18.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Jan 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:b9:14:c0:03:17:5e:69:79:0c:55:f0:d3:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 10:20:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5c1ac610e969a32d0edf5be979d05687abc7c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:52:01:9c:71:df:0b:c9:8b:3c:fa:cf:c8:
55:f3:ea:5b:b2:43:f3:37:a2:8a:19:ab:4c:5a:c9:
59:df:78:47:e8:89:e6:c2:f9:20:1a:05:3c:6c:4a:
00:3e:4f:00:69:8d:d2:f8:41:fd:01:f7:bf:63:3c:
59:77:9b:f1:d5:f6:a1:cd:fa:c8:37:8e:7e:8e:47:
7c:1b:80:2c:06:21:ee:68:cc:7e:ee:92:62:c3:cd:
cb:51:2b:08:94:1c:82:60:3c:87:ad:3d:0f:8a:04:
12:f8:c6:b7:12:1d:4a:05:b6:4a:f6:98:43:cc:18:
94:37:14:e6:7c:80:07:88:8b:34:3b:0e:d2:04:41:
77:dd:3c:6e:1e:a0:75:3b:f4:3e:21:a3:fc:88:83:
67:66:a5:3a:39:01:03:cf:9a:6a:c1:b7:a1:36:d6:
e3:87:d7:2a:08:8c:0a:71:bc:25:bb:78:cd:fc:66:
0d:6d:f7:6a:3e:94:cb:e8:41:b1:ba:ef:16:24:a7:
41:61:0f:c7:9a:1b:ed:6b:74:dd:09:8f:49:e5:53:
bb:49:5e:db:79:41:3a:02:ce:52:ce:2e:28:66:73:
2e:b1:79:e4:f1:37:5d:97:64:66:29:48:e0:f1:50:
b3:73:6e:cf:be:4f:93:a9:c9:7a:47:77:c8:85:6e:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:AC:61:0E:96:9A:32:D0:ED:F5:BE:97:9D:05:68:7A:BC:7C:0C
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.242.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:f1:80:8a:f9:8f:e0:3e:d8:e1:52:3c:e1:46:95:d7:85:7c:
b5:92:95:5b:ba:38:9f:b6:f0:7f:67:92:43:7d:02:55:72:ba:
86:9d:33:9e:44:11:70:e6:a8:e6:07:8e:12:8a:31:d7:ae:51:
51:32:5d:0d:b0:e4:7d:7f:45:e0:ad:93:c4:c7:fd:db:c4:47:
ad:d9:bb:c0:46:42:57:ca:a8:f1:ee:7e:22:f1:0f:41:37:2a:
84:ea:95:c9:c9:b6:0c:6b:46:49:4d:ac:b9:3e:b5:d9:ff:7d:
23:57:cf:b4:07:92:6d:ed:21:72:1c:36:41:2c:6a:36:30:a4:
7d:0c:98:11:63:d0:1b:91:00:ab:8b:b9:9c:51:bf:9f:94:3a:
5b:04:61:b4:bc:20:f2:a6:ef:7a:7e:d9:8b:98:a3:26:62:8f:
df:b8:e1:07:5f:cb:97:b7:be:fd:08:6b:01:9e:ad:03:b8:5d:
70:a2:6a:32:af:ec:87:0b:01:be:e4:70:85:8c:ba:71:d4:bf:
bb:b3:72:af:5e:eb:b0:3d:92:b7:22:c5:00:c2:11:97:05:39:
ec:4d:73:96:73:64:cb:3c:6d:81:1f:73:01:ed:04:b1:9f:f0:
ff:94:70:4d:cf:5c:f3:78:95:58:3f:81:ab:71:70:fd:96:93:
5a:84:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 21:09:54 2026 by rpki-client