This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/Hm_m491XoXkRYN13NObfd481Amk.roa
File: Hm_m491XoXkRYN13NObfd481Amk.roa (raw, json)
Hash identifier: aw00i43ojCPAL/bMwtW4sU2iXT88omwAr6mDI5/DvVY=
Subject key identifier: 1E:6F:E6:E3:DD:57:A1:79:11:60:DD:77:34:E6:DF:77:8F:35:02:69
Certificate issuer: /CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Certificate serial: 019B797EC32241C1EF4020DD0921D2484772
Authority key identifier: 08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/Hm_m491XoXkRYN13NObfd481Amk.roa
Signing time: Thu 01 Jan 2026 12:18:29 +0000
ROA not before: Thu 01 Jan 2026 12:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6951
IP address blocks: 193.163.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:c3:22:41:c1:ef:40:20:dd:09:21:d2:48:47:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b54b05af5e3e8743e7bf4af41ea622bb09411
Validity
Not Before: Jan 1 12:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e6fe6e3dd57a1791160dd7734e6df778f350269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:84:5a:25:e3:ae:aa:58:d5:81:3e:e1:9f:
84:a8:1f:b4:95:4a:ad:66:ee:36:9e:54:cd:72:d4:
ff:73:c3:a2:b8:d4:1b:e1:5c:73:4d:df:d1:c9:33:
a8:5c:cf:0f:c3:84:8c:8a:49:4a:4a:82:b4:ac:c1:
a7:e0:a6:78:f1:31:d9:d2:b3:09:ed:52:bf:a1:6e:
9b:c5:ea:73:04:5c:fa:e8:be:8e:6c:f2:a5:20:17:
16:f6:74:73:e8:51:8c:a0:f3:95:2a:3d:9f:f5:1e:
0c:ef:8e:53:9d:94:82:17:3c:23:64:cd:4a:43:c7:
f2:ff:e7:06:e5:ab:92:e6:dd:67:54:2e:5c:e5:93:
71:70:20:72:00:ea:62:7c:d6:8d:57:4c:e3:5d:0f:
f9:c0:ba:55:b2:47:38:b6:d4:dd:fe:2c:e7:74:b5:
0a:ed:c5:92:75:2d:b7:d1:ac:53:34:c1:b7:42:0e:
0f:21:c7:1d:33:01:e8:2d:f9:90:22:5d:0b:9e:d9:
2d:3e:c7:58:5e:40:f1:de:88:3a:ae:5e:16:94:eb:
33:34:8f:45:35:e8:67:93:5e:9c:b2:88:04:7b:0f:
71:e4:63:1b:1d:39:ca:91:6e:7e:9b:bc:8b:e6:6d:
cc:fc:49:f8:b5:4d:dd:7a:83:a7:8c:4c:d1:20:4a:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:E6:E3:DD:57:A1:79:11:60:DD:77:34:E6:DF:77:8F:35:02:69
X509v3 Authority Key Identifier:
keyid:08:2B:54:B0:5A:F5:E3:E8:74:3E:7B:F4:AF:41:EA:62:2B:B0:94:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCtUsFr14-h0Pnv0r0HqYiuwlBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/Hm_m491XoXkRYN13NObfd481Amk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0900a1-924f-496a-ad4c-195060671a0c/1/CCtUsFr14-h0Pnv0r0HqYiuwlBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.48.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3a:4e:15:6f:79:3a:41:8d:df:ed:4c:5e:e1:9e:d8:d0:e2:
d8:1a:cf:01:c9:66:cd:f1:bb:43:27:09:21:39:bb:f9:f2:ec:
73:52:4b:e5:6a:0a:0c:ec:01:f2:f6:3b:45:fe:6d:b3:7e:ba:
7a:e5:93:1d:3d:42:8f:5f:b5:bd:7b:ec:f2:e2:cf:cc:86:c3:
9c:5c:1b:a0:81:3f:62:9e:fc:45:e3:f0:79:17:8b:89:bf:de:
0e:32:7a:f6:b9:02:d6:c8:26:64:71:81:a5:44:b0:f5:75:77:
b2:e5:e5:bb:bb:d5:7a:6f:37:78:64:8d:90:71:ad:f4:31:40:
79:34:80:13:20:71:be:22:58:f4:fa:fb:2a:bd:76:e7:d5:db:
6d:2a:74:2d:80:ca:e9:26:da:10:fd:b8:eb:ba:7b:cf:87:e8:
31:78:67:42:38:38:37:df:93:0e:06:82:f0:86:d1:9a:ad:42:
a1:c2:92:78:20:78:d6:09:d5:6a:e9:ab:77:92:a1:1a:2f:c2:
89:74:e6:6f:f9:72:95:c0:f6:d5:62:a0:c6:07:48:b9:5c:1c:
22:36:17:ba:4b:6b:43:84:47:ff:d4:52:75:d4:4e:d2:49:bc:
05:bc:6c:6f:d3:4b:3f:4f:8d:77:a9:0a:9f:c9:5b:89:8b:07:
f4:03:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:32:02 2026 by rpki-client