This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/xG0VUDOknHsZasT5TDaZxzA4pvE.roa
File: xG0VUDOknHsZasT5TDaZxzA4pvE.roa (raw, json)
Hash identifier: Xzghi2lIosJPiXM8pVY4mOf1fz9gQv7/1SCn9lu4mdc=
Subject key identifier: C4:6D:15:50:33:A4:9C:7B:19:6A:C4:F9:4C:36:99:C7:30:38:A6:F1
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 019C31EFEB861FF91E24D6B73B215C392526
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/xG0VUDOknHsZasT5TDaZxzA4pvE.roa
Signing time: Fri 06 Feb 2026 07:52:12 +0000
ROA not before: Fri 06 Feb 2026 07:52:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49097
IP address blocks: 31.3.150.0/23 maxlen: 24
80.70.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:31:ef:eb:86:1f:f9:1e:24:d6:b7:3b:21:5c:39:25:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Feb 6 07:52:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c46d155033a49c7b196ac4f94c3699c73038a6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:07:64:b3:23:a6:9d:d1:4b:f4:2a:20:c1:
ca:6b:8b:99:18:46:16:78:4e:4c:d4:8e:4f:55:b1:
bb:47:f0:d6:f9:9d:bf:9f:e6:13:e8:75:76:be:c7:
ce:cc:19:56:99:5f:5a:9f:34:07:df:b5:23:c2:b7:
6a:33:bc:1c:aa:54:ce:c9:22:93:c5:51:3c:61:88:
12:24:02:9b:10:6f:a4:e5:d4:87:38:fe:58:b2:ad:
0a:b6:14:c2:6f:b2:81:eb:63:a0:21:b0:75:c4:90:
82:35:cc:57:03:f2:36:8b:4a:3a:56:f9:07:02:72:
1d:e7:43:1f:c5:55:5d:fc:5b:4d:9b:59:26:92:6b:
40:e6:10:af:09:dc:84:8d:9b:bf:7c:7f:21:2e:fa:
74:07:7d:38:08:62:e0:cd:d3:8c:cb:14:27:1c:7c:
2d:a8:81:9b:55:b6:32:77:7f:0b:f6:73:24:f3:f9:
af:30:d9:ef:30:e6:39:74:e9:8e:87:d8:35:98:b3:
77:19:3a:f1:6b:5d:7f:e4:b4:f8:3f:ec:98:04:a9:
20:69:98:c7:86:12:b2:0d:8d:ab:e4:c7:3a:49:d0:
16:06:5f:1d:a0:a4:b6:6a:32:e8:ef:1e:d5:e2:23:
02:ea:92:5d:dd:a3:be:66:04:22:51:43:2a:a8:e8:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:15:50:33:A4:9C:7B:19:6A:C4:F9:4C:36:99:C7:30:38:A6:F1
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/xG0VUDOknHsZasT5TDaZxzA4pvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.150.0/23
80.70.170.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:9f:05:61:f5:56:91:b6:54:1a:a4:1b:dc:a8:58:c3:73:0f:
f5:48:10:d7:bf:35:74:00:d5:0b:e2:aa:2a:44:ca:f4:7b:51:
b0:8a:6e:e2:c1:32:27:39:fa:06:d4:57:12:39:db:a6:11:c6:
b3:a2:52:a3:6d:2f:15:19:fc:7a:7b:40:13:86:34:29:10:0e:
6b:47:1f:15:c2:d0:62:24:dc:55:ee:e6:41:c5:ec:03:47:43:
00:78:ca:bb:cd:cd:18:9c:75:6c:3b:9f:be:9d:82:28:2b:0b:
65:0b:86:b7:c6:e3:6d:51:6f:13:c7:81:f6:2e:b0:ea:21:45:
31:d0:17:c8:fe:f3:b5:b1:ec:0b:87:72:f6:3f:fe:11:08:93:
a7:7d:97:fe:57:ee:3d:60:d9:c1:c9:3e:be:db:34:8c:95:7c:
70:31:69:cd:16:51:3a:8e:61:96:d3:5b:c3:fc:c2:3a:a5:22:
f4:8b:9d:f2:6c:03:36:8f:28:7d:78:b4:7c:47:d4:42:85:3c:
b2:2b:68:56:b4:4e:9e:46:ea:7a:81:78:ff:35:9d:f5:f8:5e:
8e:22:d5:dc:df:09:ea:90:a4:cb:c7:4b:c3:93:31:1e:1e:df:
29:27:ba:ed:a7:86:a2:44:2f:93:2e:03:1b:e4:7c:b3:ea:e0:
46:62:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:36 2026 by rpki-client