This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/xXSGrl92krsM_urkQdlEmjIAToI.roa
File: xXSGrl92krsM_urkQdlEmjIAToI.roa (raw, json)
Hash identifier: wQLg7nZor+SidlIxB4lToP07634dxcVXfhFUBua4qFw=
Subject key identifier: C5:74:86:AE:5F:76:92:BB:0C:FE:EA:E4:41:D9:44:9A:32:00:4E:82
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 019B797F2AD081FC8DC26A704AE3ACC0456F
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/xXSGrl92krsM_urkQdlEmjIAToI.roa
Signing time: Thu 01 Jan 2026 12:18:55 +0000
ROA not before: Thu 01 Jan 2026 12:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39082
IP address blocks: 195.60.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:2a:d0:81:fc:8d:c2:6a:70:4a:e3:ac:c0:45:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jan 1 12:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c57486ae5f7692bb0cfeeae441d9449a32004e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:2d:36:86:37:45:bc:f2:41:7e:9e:59:88:
b0:ba:b0:ed:b8:77:1f:00:98:f5:51:1a:c9:02:35:
7c:ce:b6:32:57:1c:88:32:74:32:e8:a9:64:cd:e1:
76:34:59:86:4d:af:ec:09:fa:b9:a6:97:3a:53:10:
8e:31:7e:89:2d:8a:c9:2d:a0:ad:3f:e3:80:f1:2e:
28:ca:00:92:74:51:ff:4b:56:28:dc:23:5a:22:99:
ed:ea:a8:a9:c1:5f:01:58:e3:b5:06:d5:38:3a:14:
fc:74:6b:2d:10:3b:5c:e3:e4:bf:b3:08:41:b4:3d:
31:f1:91:e7:d9:70:d9:34:af:ba:0c:b8:d0:33:80:
5b:bd:f0:09:87:c9:be:75:9e:af:eb:9c:ea:99:77:
4f:f1:00:ba:dd:fd:ee:a0:65:97:6b:cd:4c:31:6d:
13:4e:5c:be:44:5f:5c:cf:ac:be:22:76:c2:09:99:
95:32:2a:64:ea:a1:71:f6:91:fb:9e:87:a1:85:c5:
0d:82:eb:b1:ed:af:ce:5f:d5:c4:86:6e:c6:65:ff:
21:cf:d8:bf:76:5a:be:c8:2c:51:f1:cd:20:1e:e9:
63:58:ee:7f:b5:19:51:a1:73:51:69:43:6a:79:2c:
50:93:0a:f8:84:68:a0:7a:62:39:ac:a0:c8:92:da:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:74:86:AE:5F:76:92:BB:0C:FE:EA:E4:41:D9:44:9A:32:00:4E:82
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/xXSGrl92krsM_urkQdlEmjIAToI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.178.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:04:74:b7:81:e9:5f:b4:8d:09:ed:62:9f:bc:79:ce:e6:76:
39:7b:4a:bb:ca:46:5f:18:93:5b:21:69:0e:21:0e:ef:1e:27:
59:83:79:03:b4:a7:d5:00:72:17:1d:a0:a9:7e:8c:98:3c:dd:
a7:71:e4:d1:01:27:da:be:ba:7b:fc:15:54:b4:ad:dd:5f:8e:
27:0f:be:f2:b1:19:ea:9b:ac:92:78:a5:e6:2c:00:9f:5d:8f:
c4:63:23:cf:e9:bf:47:74:8e:77:7e:82:33:de:7b:f7:b4:d3:
56:c3:72:e9:c3:f2:f2:ce:c4:49:2c:5f:b2:d6:e4:9f:b0:1d:
ac:80:c7:6c:e0:3e:c6:5a:48:d6:d2:54:5a:5b:5e:21:4a:f1:
b7:75:e3:11:6f:8f:55:ae:17:2c:86:fd:92:7b:72:10:65:12:
1a:ce:bc:82:46:b8:de:63:00:fc:19:e3:19:50:7d:52:59:cb:
83:58:09:71:c6:bc:bf:eb:93:5b:0c:72:40:36:ff:73:4f:fe:
7d:f9:b7:7d:a8:07:8c:31:f3:d5:38:ca:b5:e8:da:50:ae:64:
e7:36:40:c2:08:14:70:af:f5:04:56:7b:49:f6:fe:fc:8a:9f:
7e:ad:7d:77:23:d6:91:ff:03:24:e4:a5:07:95:06:df:e0:9c:
b4:c7:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:20 2026 by rpki-client