This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XZobFEHaPMeeFsTaDi9wCqUXgeY.roa
File: XZobFEHaPMeeFsTaDi9wCqUXgeY.roa (raw, json)
Hash identifier: kaCGO+SvN9xqOUb5E2IZ7/x546pEKwCZ5t+1YkuT9AA=
Subject key identifier: 5D:9A:1B:14:41:DA:3C:C7:9E:16:C4:DA:0E:2F:70:0A:A5:17:81:E6
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019B7D5B0A42C032F49D9B9221E458628D33
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XZobFEHaPMeeFsTaDi9wCqUXgeY.roa
Signing time: Fri 02 Jan 2026 06:17:56 +0000
ROA not before: Fri 02 Jan 2026 06:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215703
IP address blocks: 93.113.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:0a:42:c0:32:f4:9d:9b:92:21:e4:58:62:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 2 06:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d9a1b1441da3cc79e16c4da0e2f700aa51781e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:a1:66:5e:4b:3d:28:08:96:4c:72:3b:68:
73:29:d8:36:dc:c0:bd:4e:1a:a5:5c:98:45:ae:ae:
be:86:f2:41:43:a5:3d:d3:8d:f3:34:00:44:13:84:
f5:99:ba:f2:bb:a0:97:31:19:b6:5a:98:20:11:02:
71:a8:44:7c:4d:e8:6e:31:63:e0:3d:f7:fc:95:b7:
43:84:34:3e:69:4f:33:76:3c:69:b4:c5:23:20:54:
f7:8a:28:00:7e:87:86:e6:cc:f4:a9:90:49:97:ac:
56:54:c3:55:1f:e8:61:ff:db:26:67:61:ef:fb:39:
28:a5:56:ff:ac:02:6b:fb:d3:3c:43:29:c2:3f:8a:
ac:7a:5b:3d:7f:07:d8:49:f4:42:36:26:7a:ba:c5:
71:14:0d:14:42:4b:6f:00:a0:91:10:24:04:f7:22:
ab:0e:53:e3:b7:34:5b:05:b5:7d:30:51:3c:50:f1:
87:7b:e4:f2:12:34:9e:33:37:8f:b5:ff:2d:38:d5:
ba:40:9b:9a:43:83:7d:14:61:08:81:78:02:54:a4:
a0:7a:b7:4c:10:ac:1d:95:e7:8a:46:36:ef:ef:02:
d7:77:0f:07:d4:be:8b:e8:47:d8:51:f8:d4:c7:56:
90:81:71:ef:11:48:58:e1:13:f5:20:e5:a2:b1:ea:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9A:1B:14:41:DA:3C:C7:9E:16:C4:DA:0E:2F:70:0A:A5:17:81:E6
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XZobFEHaPMeeFsTaDi9wCqUXgeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.180.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c4:ef:4f:d7:99:ce:26:f6:1b:1c:03:c4:73:5a:7b:90:21:
82:6e:62:35:c4:8e:82:55:d3:36:0f:f7:58:41:dc:de:0d:f6:
a1:4c:4b:6d:fb:fb:d4:2b:d3:c6:c1:2c:4c:bd:a8:b1:c2:ec:
b0:31:a4:db:39:16:7a:90:e5:3c:59:3e:76:8f:08:ce:0a:37:
d7:c2:5c:c6:b6:94:6d:1c:76:5a:f9:92:1a:65:e4:58:4d:ab:
c6:66:3d:e4:eb:d7:07:8d:54:b3:38:7d:42:50:51:88:5b:a0:
68:04:39:2e:12:3f:96:42:76:ce:66:1f:5b:fd:0e:27:4b:b3:
f3:a2:6c:c0:b7:64:94:c6:1e:88:d9:58:ef:85:60:a1:26:0d:
c1:74:d1:01:b6:99:c0:29:a4:9e:31:a5:bf:38:41:09:da:9e:
80:54:bc:7c:ca:71:60:3f:2c:9c:f2:3f:b0:8d:40:ca:3c:a7:
05:d7:e0:e9:0e:76:47:e9:08:d8:f1:63:14:24:49:bd:ba:cb:
0b:31:f1:01:3b:45:42:be:0c:4e:f6:c6:fe:cc:43:e1:01:8d:
4f:b3:99:a1:1b:b3:ba:9a:ac:dd:c4:8b:e5:cb:97:74:8f:72:
d0:d5:de:12:f2:0f:5d:8b:5d:f4:ac:9b:a1:41:dc:6d:0e:5f:
88:f1:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:27 2026 by rpki-client