This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/dkLJNc8YE1qupqt8vejn4yN_8pU.roa
File: dkLJNc8YE1qupqt8vejn4yN_8pU.roa (raw, json)
Hash identifier: 9F30pB6QAME+aQUtJBPApccmf32qIQY7Y6P8efT0WEs=
Subject key identifier: 76:42:C9:35:CF:18:13:5A:AE:A6:AB:7C:BD:E8:E7:E3:23:7F:F2:95
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 019B79106C279987FF19FB40E253AC9DD2F6
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/dkLJNc8YE1qupqt8vejn4yN_8pU.roa
Signing time: Thu 01 Jan 2026 10:17:57 +0000
ROA not before: Thu 01 Jan 2026 10:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199967
IP address blocks: 185.196.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:6c:27:99:87:ff:19:fb:40:e2:53:ac:9d:d2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Jan 1 10:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7642c935cf18135aaea6ab7cbde8e7e3237ff295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:08:22:a2:d3:3d:9a:88:c4:d3:e8:ef:bb:
16:e0:b6:1e:0b:40:97:bd:f4:fa:9d:3c:4c:e5:d7:
8d:3b:1d:8f:91:ab:97:f2:01:f2:5a:32:f5:08:06:
8f:c5:a1:e2:b4:0f:86:5b:49:6e:3b:43:b4:74:a4:
62:fb:cb:bc:2e:e0:c0:a0:53:7f:3b:63:5b:10:7b:
5c:ba:ff:74:e3:1c:61:26:c8:17:0c:47:b3:69:4c:
aa:53:b3:22:4a:8e:ae:e4:50:e0:61:c3:96:a8:f5:
0f:d2:3c:de:49:eb:ad:f8:6f:17:16:9e:16:c1:63:
77:9f:60:a7:c2:36:11:b3:ab:47:5e:6d:e7:3a:9f:
a2:71:84:df:02:e0:8d:76:0d:d9:7b:a4:e1:d3:6d:
e9:88:32:7e:13:1c:fd:b1:08:ab:9b:b0:15:50:ce:
5d:21:98:8d:f5:1d:e6:48:0b:cd:7a:fd:e6:b9:60:
0e:76:e4:ed:6a:2f:53:ae:31:8a:49:ca:29:50:49:
ca:1d:72:8f:9d:2e:97:13:96:94:a0:78:7e:43:84:
be:9c:44:8d:4d:ca:37:20:94:6e:d0:c0:3e:0f:a9:
60:b5:f9:16:cc:57:bd:90:49:7c:75:b3:ad:8f:5c:
76:77:6f:35:ea:52:29:37:37:d5:f2:fd:eb:d1:60:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:C9:35:CF:18:13:5A:AE:A6:AB:7C:BD:E8:E7:E3:23:7F:F2:95
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/dkLJNc8YE1qupqt8vejn4yN_8pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c3:01:81:5c:a3:b6:aa:bb:64:87:de:a9:07:c9:e5:fe:02:
15:cd:5a:6b:4c:2e:91:8f:3e:91:63:9e:ac:3d:78:28:3b:11:
24:6c:2e:06:9a:34:38:7b:34:16:ea:d5:52:0c:8d:99:7e:fd:
66:83:c0:5b:82:13:3c:b7:75:ce:f2:68:5c:f2:b3:d5:ec:11:
a4:10:cf:b0:5b:5e:79:2a:13:a5:d1:eb:55:37:52:f4:a9:29:
91:76:c9:aa:d4:07:1c:13:8a:df:75:74:7a:f9:5c:b2:cd:fd:
f2:6c:9f:94:ce:9b:7c:b5:77:17:1c:ae:f6:e6:14:18:83:91:
69:95:b6:2e:ec:4e:a7:62:a0:ad:4f:bf:50:1e:63:ca:6c:e1:
a1:2f:5f:fa:7d:38:f6:0c:9f:45:98:14:42:d6:b1:bb:43:34:
c8:f4:95:eb:8c:a8:9d:57:e8:e7:de:6f:a9:23:4c:44:08:5a:
c3:5c:29:cd:fe:4d:ce:c3:68:40:53:e6:f5:de:59:da:61:0a:
3d:19:a5:ae:65:70:5d:76:7b:ef:64:5b:5a:b2:27:d7:01:9d:
f8:64:6b:48:f5:84:f7:a5:1d:e8:f8:e1:8b:e8:a1:5b:9b:63:
a8:0f:2a:29:66:18:0b:40:6f:c6:a1:fb:94:d4:39:00:6d:f4:
ed:70:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:21:54 2026 by rpki-client