This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa
File: 1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa (raw, json)
Hash identifier: DRLbOTG9czrpsVPaMEJ38IoGY3J/JcSc/4PjmqzOW9s=
Subject key identifier: D7:07:4A:90:25:B7:14:14:4A:68:C9:A9:CD:FE:11:45:D5:0D:3B:44
Certificate issuer: /CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Certificate serial: 019B865CA8488423590DE5754DB068878D4D
Authority key identifier: 11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa
Signing time: Sun 04 Jan 2026 00:16:17 +0000
ROA not before: Sun 04 Jan 2026 00:16:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28974
IP address blocks: 194.76.188.0/22 maxlen: 22
195.39.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:86:5c:a8:48:84:23:59:0d:e5:75:4d:b0:68:87:8d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Validity
Not Before: Jan 4 00:16:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7074a9025b714144a68c9a9cdfe1145d50d3b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e8:24:10:3e:73:b4:7e:2f:ab:c0:a4:54:a7:
27:d6:16:7b:f7:db:0d:ca:2f:b1:bf:33:3c:28:a9:
5c:b1:de:0b:26:45:9a:4c:d3:c5:e1:98:33:7d:e8:
e3:ca:61:51:94:44:f7:c3:87:77:ac:bd:30:21:f8:
94:24:5a:04:c2:0a:b3:08:fe:85:0e:dd:1e:2f:4d:
80:f8:4e:be:d0:98:59:ac:8f:10:49:0c:98:ae:ff:
99:95:33:cd:db:68:a9:23:16:93:49:d8:68:7f:4e:
85:d7:a4:1e:5d:36:93:cf:71:61:64:f4:54:86:b6:
d8:15:ef:49:49:1b:39:0c:27:87:cd:7a:cf:29:81:
f2:a4:12:98:29:9a:0a:d1:19:97:79:a6:80:33:e3:
33:d8:5c:ac:c4:8c:9a:a6:df:ad:77:85:77:35:6b:
15:7c:ec:55:dd:41:f7:66:23:3c:a8:3e:2a:6f:0c:
f4:62:7e:2d:c4:26:a2:a4:13:89:34:36:e3:57:a6:
26:2b:1e:20:8d:6c:7f:dd:7f:b6:51:d5:d4:b1:49:
22:35:70:2a:f6:78:cf:60:e2:63:c4:5f:8e:22:d6:
78:1a:c0:ae:b4:02:ff:2f:6a:b1:54:e0:75:15:0c:
45:b1:14:82:6e:2f:40:5f:27:2f:c0:4b:3b:58:81:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:07:4A:90:25:B7:14:14:4A:68:C9:A9:CD:FE:11:45:D5:0D:3B:44
X509v3 Authority Key Identifier:
keyid:11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.188.0/22
195.39.232.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:44:0e:2c:08:da:13:52:16:fa:74:89:8f:35:d4:cf:b0:21:
3c:4e:5c:29:39:8b:6e:85:73:77:6b:52:ef:58:ba:fb:7e:2f:
5c:4b:b0:59:f3:dc:8f:f5:9d:6e:d5:7e:80:4a:fc:17:c1:55:
34:0e:a7:29:32:7d:16:63:d1:f0:68:b3:cc:2c:a8:e7:7b:c2:
b7:50:ea:64:da:77:93:f2:69:10:ab:ad:1e:11:b2:bd:b1:e2:
21:36:99:ef:32:4a:ac:2b:3b:d9:11:57:04:58:16:e3:e9:a0:
14:09:9d:04:8e:5e:40:a1:1e:38:48:ed:94:ba:17:3a:b1:de:
81:72:78:d6:2f:e9:9a:90:ba:11:0c:47:c6:09:9c:eb:ed:4b:
19:de:e6:bf:05:25:63:ca:bc:87:f1:ed:93:9e:11:9f:b1:da:
a8:7d:79:bc:15:31:23:55:77:bd:46:88:58:b3:af:0f:2b:0f:
e0:cc:64:70:57:b2:89:9a:7a:05:83:6d:aa:75:0e:8e:78:5b:
be:b4:da:36:06:74:c8:7b:b4:dc:be:b3:48:a9:49:e5:3f:79:
68:3c:94:3a:90:89:e2:40:73:ab:4d:3c:f5:97:be:84:c4:57:
5b:2a:d0:1c:7d:e5:49:a8:dd:92:d7:3c:ad:3c:66:7f:7b:22:
c7:f4:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:01 2026 by rpki-client