This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1Uo76hmvh5FzNDo276Zm4m_BT0s.roa
File: 1Uo76hmvh5FzNDo276Zm4m_BT0s.roa (raw, json)
Hash identifier: N6dkUQu86zvoRHT3ompLiDGklhcKWt0L+DfJn/M9Ues=
Subject key identifier: D5:4A:3B:EA:19:AF:87:91:73:34:3A:36:EF:A6:66:E2:6F:C1:4F:4B
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019B7B36B283649CD834B83EF2CEEBA1DBCF
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1Uo76hmvh5FzNDo276Zm4m_BT0s.roa
Signing time: Thu 01 Jan 2026 20:19:00 +0000
ROA not before: Thu 01 Jan 2026 20:19:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205022
IP address blocks: 193.232.72.0/24 maxlen: 24
193.232.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:b2:83:64:9c:d8:34:b8:3e:f2:ce:eb:a1:db:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 20:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d54a3bea19af879173343a36efa666e26fc14f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:7f:5a:8d:7f:60:cb:7b:0c:89:14:76:cb:
68:67:a2:08:c9:17:14:e4:fb:91:16:e6:77:e2:dc:
c2:04:3c:1b:5e:25:cb:54:7c:f5:38:e7:f0:5c:5e:
73:d8:9d:55:02:d3:71:21:59:82:e3:92:82:af:96:
1a:06:04:4d:e7:ba:9f:fd:23:f9:77:12:99:4f:ad:
d5:da:d6:fe:49:38:69:be:95:40:0c:31:e1:49:4f:
9c:60:51:a6:5b:fd:3b:5e:bd:e0:b3:6f:a8:2a:74:
9b:fb:d2:e4:49:9c:5b:64:b3:91:8b:7a:16:bb:0e:
06:f5:96:64:88:23:5a:05:eb:60:11:0a:0e:14:f0:
ce:b1:14:76:06:31:63:2e:1a:bc:6d:16:de:aa:8c:
2e:1b:e8:a8:07:97:98:6a:e5:62:80:be:1b:c7:dc:
f3:0c:24:42:96:8f:bd:c6:83:26:d1:43:89:b8:bd:
00:24:40:19:82:a4:e0:15:72:ca:97:cb:86:0a:c6:
59:74:f6:a3:06:c6:d7:1b:6b:47:b5:56:2a:d9:32:
a2:a9:f0:b7:d8:a0:76:2e:84:25:1d:37:38:4d:4d:
ee:95:e3:d4:3b:0d:1d:9f:28:98:24:c3:08:9f:ad:
31:c9:49:e2:98:f8:47:67:b3:81:cd:50:d1:1a:51:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:3B:EA:19:AF:87:91:73:34:3A:36:EF:A6:66:E2:6F:C1:4F:4B
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1Uo76hmvh5FzNDo276Zm4m_BT0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.72.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:65:d5:b6:c1:97:d4:50:0b:a3:d0:e4:99:2e:d4:2a:7b:8f:
3b:f5:3d:ec:d5:2b:56:a5:e8:bc:c0:ff:a2:9b:98:5d:b3:fa:
26:e5:ba:79:87:1d:ed:7b:fc:b4:11:fe:b1:7c:3f:1a:b1:2e:
11:0d:99:50:61:5a:2a:92:ff:f7:bb:0d:1d:43:da:e4:83:a6:
60:a6:88:e2:81:04:61:f7:15:6c:f2:0e:80:c5:52:f4:a1:8b:
a3:c0:0a:ce:45:b7:df:2e:6e:f0:46:68:ef:4f:21:5f:4e:ef:
c4:ce:7e:33:42:19:bf:bd:b4:eb:aa:08:d8:56:29:ac:f7:51:
d4:ea:ff:fb:7b:95:d4:6a:11:c5:6b:21:59:e2:9d:3a:fa:81:
97:77:08:c3:77:97:c5:9a:4a:bf:71:6f:38:65:9c:af:a5:5d:
26:51:db:82:53:d0:48:b4:ca:7e:1a:53:27:b7:89:53:f0:0e:
d5:19:5a:07:c9:b9:49:cf:e0:e7:e3:c7:15:5f:30:af:95:73:
c4:90:70:e6:8c:8f:7a:d1:1b:56:78:4b:7c:ec:8c:36:e3:10:
6c:64:78:f6:16:c2:f9:08:e5:fd:d7:85:a6:ad:0c:8c:3f:71:
09:0c:9e:d0:d2:de:53:ea:d3:ae:96:dc:3e:14:60:db:6a:50:
ef:2d:3e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:40:49 2026 by rpki-client