This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/X44UuuaUhAM50Kozh7XZVDvdF14.roa
File: X44UuuaUhAM50Kozh7XZVDvdF14.roa (raw, json)
Hash identifier: kIvHQLjOEtZWEUfUCpYD6bbto6town5tHTLofDklsdI=
Subject key identifier: 5F:8E:14:BA:E6:94:84:03:39:D0:AA:33:87:B5:D9:54:3B:DD:17:5E
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 019B7C7FD0CC9392DF1D0EC28EF5EC97307F
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/X44UuuaUhAM50Kozh7XZVDvdF14.roa
Signing time: Fri 02 Jan 2026 02:18:29 +0000
ROA not before: Fri 02 Jan 2026 02:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35684
IP address blocks: 2001:67c:74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:d0:cc:93:92:df:1d:0e:c2:8e:f5:ec:97:30:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Jan 2 02:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f8e14bae694840339d0aa3387b5d9543bdd175e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:0b:13:f4:08:db:8d:f1:51:15:60:c8:80:
b0:c6:ce:03:61:e7:ee:59:4e:48:e3:18:1f:08:de:
2a:56:59:22:22:25:47:3d:11:a8:44:01:e5:cc:ef:
59:82:b6:65:f8:3e:35:58:bd:80:6a:5b:99:f3:55:
59:b5:9e:3d:1f:b2:5e:41:d1:3b:ef:86:86:41:6b:
7f:16:4a:b6:fc:16:07:61:6a:90:c1:11:d4:09:7f:
ad:17:5c:46:05:53:8f:27:35:2a:e6:f6:6e:57:43:
84:c7:76:a6:b9:a5:55:7b:da:d5:08:39:01:ca:4f:
58:6a:eb:b9:b9:44:dc:bc:fc:35:98:03:33:26:35:
c6:d7:51:a4:c8:88:a6:7b:1a:3b:13:ab:15:e6:93:
73:85:10:7c:7f:51:37:41:3b:15:5b:77:79:88:e4:
16:64:26:81:7f:20:b8:f4:4c:6b:dd:20:19:c3:f3:
8a:1b:3b:9f:f6:22:e3:9c:ad:10:b9:35:8b:3d:e9:
ad:0b:a1:f8:8f:5c:af:22:52:03:d1:57:ab:8b:7c:
6c:3b:c8:c5:2c:00:fa:ef:c0:e6:87:bc:c1:ea:a6:
74:a0:c8:f9:72:a0:55:48:32:80:25:52:df:81:38:
32:33:78:d9:9c:72:29:1c:61:28:fb:72:c0:71:e1:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8E:14:BA:E6:94:84:03:39:D0:AA:33:87:B5:D9:54:3B:DD:17:5E
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/X44UuuaUhAM50Kozh7XZVDvdF14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:74::/48
Signature Algorithm: sha256WithRSAEncryption
c5:c6:63:c9:f2:f1:6c:8b:a7:55:0e:d9:b5:57:cf:c8:3e:95:
6b:2f:ae:54:c8:6b:63:6a:da:02:2c:9d:27:94:72:a9:06:63:
61:71:1f:07:a4:d4:3c:ce:ae:51:98:75:47:99:ac:9f:bc:83:
32:b5:ec:f8:30:08:af:b0:6b:88:31:2d:e3:d3:5d:4a:79:ae:
3b:c0:de:20:c3:5b:ef:cd:cf:68:06:22:da:2b:d6:c8:b9:10:
61:0a:d2:da:f3:80:01:a2:7f:f9:a6:32:ca:b0:5d:d3:a7:80:
b6:e8:95:44:41:23:39:26:47:2d:20:47:3c:1f:29:9e:33:d9:
2f:d6:75:bc:23:f1:08:65:99:d6:bf:18:b3:53:71:97:38:b2:
0e:56:37:33:59:81:a0:92:3e:b0:a2:a5:cc:95:20:d0:c1:d4:
d3:e1:b2:6a:22:95:94:53:9f:32:ae:92:50:71:f4:e4:99:fe:
f3:28:8c:b0:14:47:45:01:35:16:04:da:e5:f2:2f:db:77:7d:
5c:a9:6c:3a:b4:78:d1:55:06:89:1d:ef:be:5c:79:09:dd:0f:
6f:df:73:82:30:77:b9:ef:15:e6:d6:f4:7c:6a:68:c7:8d:ef:
ff:39:64:6c:5d:60:5b:cd:b0:a0:5a:c8:42:18:05:3b:15:74:
8d:0c:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:36 2026 by rpki-client