This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZXcMeeipBn7sUUJEU91rzEI17zk.roa
File: ZXcMeeipBn7sUUJEU91rzEI17zk.roa (raw, json)
Hash identifier: 5bsppIb2wCZVXZGFfEu5mwku1Y7/zmbNHcXjdaosbrc=
Subject key identifier: 65:77:0C:79:E8:A9:06:7E:EC:51:42:44:53:DD:6B:CC:42:35:EF:39
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019B77C707E5B63D56244D4862289A1F0D9C
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZXcMeeipBn7sUUJEU91rzEI17zk.roa
Signing time: Thu 01 Jan 2026 04:18:10 +0000
ROA not before: Thu 01 Jan 2026 04:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 188.214.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:07:e5:b6:3d:56:24:4d:48:62:28:9a:1f:0d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jan 1 04:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65770c79e8a9067eec51424453dd6bcc4235ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:ed:62:ae:a5:a2:a2:1f:52:4b:d6:0e:00:
ac:a9:e2:3b:86:05:3d:d4:32:9f:5a:6b:41:83:98:
62:34:d2:4e:f0:bc:14:47:2f:58:ea:22:a6:ed:5f:
ff:f1:1b:75:35:c3:11:b0:2c:43:89:9a:96:bc:09:
17:3d:57:93:fa:f6:5f:af:b5:2e:73:79:39:2e:a4:
24:fa:bb:54:3c:43:46:e6:2e:f1:b1:e6:8c:34:72:
00:fd:14:d7:3f:ec:17:6c:ba:5f:7f:77:cd:9c:d6:
d3:8c:5b:2e:5c:a5:a9:ea:2d:59:cc:59:55:2a:5d:
6b:f5:3c:8f:dd:d1:77:5f:03:26:93:20:92:72:da:
62:82:26:60:02:ad:e6:f9:7c:d2:dc:1e:71:a1:c7:
fe:71:14:77:72:db:20:78:72:d1:ae:57:0f:a4:54:
cc:d1:6c:88:be:93:de:a4:34:3a:9f:3b:35:7e:2f:
a4:dd:e3:60:8f:fb:33:d3:47:46:57:85:3d:2d:53:
59:4e:a4:71:17:d3:db:bb:d7:6d:c4:12:cb:df:b2:
cb:0a:1a:58:8b:9c:93:42:a2:29:81:d0:96:ff:11:
fb:be:42:0f:d5:72:39:68:92:f6:e1:d8:4f:6f:28:
12:82:c6:47:a3:ed:68:64:c3:c4:96:df:b4:61:36:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:0C:79:E8:A9:06:7E:EC:51:42:44:53:DD:6B:CC:42:35:EF:39
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZXcMeeipBn7sUUJEU91rzEI17zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.144.0/24
Signature Algorithm: sha256WithRSAEncryption
94:51:69:0c:82:7c:b6:e6:51:50:64:1b:53:e9:73:e2:8a:d9:
39:c5:4b:4d:28:ba:43:eb:d3:23:87:58:f8:22:0f:c7:b2:66:
0b:a9:1e:39:22:ef:86:31:20:4d:47:59:ad:8a:25:06:25:66:
c1:b0:e8:7e:c6:7a:69:76:e6:5d:18:fb:d8:ee:36:3a:f3:4f:
2b:ea:ad:83:4c:fe:4c:8f:01:a3:f9:ab:c4:a9:76:72:01:c6:
7f:9e:05:e8:b7:9f:69:b5:97:b5:6c:51:6b:e5:c2:7d:0b:c5:
17:37:db:df:65:77:52:8a:98:02:0a:82:fa:93:77:ce:e9:b5:
e6:3e:c5:31:b6:66:7a:78:e8:53:2e:4f:62:e6:3e:f5:d1:40:
00:e4:3c:d1:af:4b:8b:8d:43:e3:93:0b:27:c0:8c:4c:d3:c6:
7c:6a:c1:57:5b:eb:45:e8:44:77:24:8c:07:d5:ea:f7:4c:15:
dc:6b:44:2c:05:8d:ad:c2:a7:4c:8c:7f:3f:bf:c6:c0:16:b1:
cb:ec:96:4e:02:98:54:9d:45:68:4d:12:d6:26:0f:99:6f:44:
42:a0:43:65:05:bf:5f:b2:4c:47:21:ac:ac:04:b9:c8:94:24:
f6:c3:b6:e1:23:b1:44:93:14:03:cc:49:58:a0:cc:28:35:a5:
f4:0f:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:56:01 2026 by rpki-client