This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/PSue4eiiw2nCVw1drjwPSALcgXg.roa
File: PSue4eiiw2nCVw1drjwPSALcgXg.roa (raw, json)
Hash identifier: 1oP3e5TROxxn5gXpmfRVqjhOwGv4slj/HbiqgPw4q/Y=
Subject key identifier: 3D:2B:9E:E1:E8:A2:C3:69:C2:57:0D:5D:AE:3C:0F:48:02:DC:81:78
Certificate issuer: /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial: 019B7C80531C6898C4081B7A041AF6B90979
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/PSue4eiiw2nCVw1drjwPSALcgXg.roa
Signing time: Fri 02 Jan 2026 02:19:03 +0000
ROA not before: Fri 02 Jan 2026 02:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197569
IP address blocks: 2001:67c:2f8c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:53:1c:68:98:c4:08:1b:7a:04:1a:f6:b9:09:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Validity
Not Before: Jan 2 02:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d2b9ee1e8a2c369c2570d5dae3c0f4802dc8178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5f:df:a3:f6:05:e3:0b:95:dd:8c:6a:cd:b1:
fa:b4:be:5d:fe:ce:94:1b:d1:28:2e:e5:10:8d:82:
a7:d1:46:62:c6:ec:92:39:bf:66:59:c5:05:0c:44:
d6:36:f7:c9:b4:3a:9f:51:73:a2:42:5c:bc:97:82:
54:4c:4c:4d:89:15:15:68:73:38:46:78:5a:fe:31:
56:74:ef:58:39:76:61:4b:07:e6:d7:1e:53:91:bc:
f3:ca:96:a9:d9:fa:bc:32:96:37:37:61:19:a4:b9:
77:ee:62:3e:5f:c1:b8:61:eb:69:62:79:ba:93:44:
2d:0c:84:48:e1:ca:e3:87:6b:c8:42:ec:df:c0:18:
5c:30:ba:8f:cf:36:a7:5c:76:fa:dd:80:42:6f:b9:
4b:3f:0c:9d:54:df:58:b6:f4:29:1d:86:6f:e5:7e:
b1:1d:10:90:75:1b:70:2c:fd:0c:a6:ac:8c:d5:d1:
51:4a:20:09:c7:af:53:a5:85:57:c7:fe:82:ff:9c:
6f:ea:9f:0b:21:47:bc:6b:1d:e5:7d:8c:a3:da:57:
9c:cc:73:70:6e:0d:b2:b3:9f:03:39:72:73:50:b7:
8c:44:50:fb:4c:0f:f7:e7:1a:d3:9f:df:57:67:1e:
06:72:e9:5d:9f:a5:6d:44:36:ed:54:5e:40:d4:d0:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2B:9E:E1:E8:A2:C3:69:C2:57:0D:5D:AE:3C:0F:48:02:DC:81:78
X509v3 Authority Key Identifier:
keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/PSue4eiiw2nCVw1drjwPSALcgXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f8c::/48
Signature Algorithm: sha256WithRSAEncryption
60:f2:dc:d8:49:a7:0a:dd:91:56:b4:0b:d0:86:3b:cb:d9:dd:
b9:f8:0a:29:2f:08:1e:99:c4:42:33:05:a7:e3:85:02:a9:cb:
a2:b1:f1:4c:21:b3:b7:c5:87:f4:49:05:13:ab:b2:b8:9e:3f:
65:12:6f:f0:c2:90:d9:03:88:08:ea:0d:90:7e:1a:0c:d0:d1:
82:32:fc:8e:ff:fc:b4:99:01:0c:18:1e:a8:7c:29:c4:15:47:
c5:d9:dd:68:7c:93:09:69:5b:cb:48:8a:9c:20:91:e7:e2:c3:
e4:d2:3b:35:85:d6:e8:0e:60:7c:9f:b0:e9:04:1e:bb:e4:51:
36:50:86:87:d5:f2:e0:3f:39:4a:12:9a:fa:61:5c:f3:a8:14:
a2:7e:53:86:bb:f4:e1:dd:a3:1d:af:df:2e:c5:8d:65:72:2b:
cc:07:f1:35:2e:b4:f2:b3:87:47:ac:ab:02:49:d7:75:b5:4c:
f5:0f:87:0e:b8:41:51:b5:68:29:e3:a2:23:4f:17:67:be:28:
ba:2c:e1:3c:ae:ce:e1:43:8a:67:d3:eb:bd:4d:99:e4:05:a3:
54:51:c3:43:11:c5:eb:23:05:01:8b:18:54:76:a2:4c:0e:f8:
ae:8d:80:f1:d7:73:fa:08:bd:79:07:2a:46:9d:ef:81:47:d3:
34:60:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:31 2026 by rpki-client