This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_xPl_VXmR6xVCZvOikIVp_6PWVc.roa
File: _xPl_VXmR6xVCZvOikIVp_6PWVc.roa (raw, json)
Hash identifier: rQeiitKCeo/oVyL/XxlChVT/Tk4lOwm4mnq+EiETsvM=
Subject key identifier: FF:13:E5:FD:55:E6:47:AC:55:09:9B:CE:8A:42:15:A7:FE:8F:59:57
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019B7BA49AC0BC1DED76EE73D6A0711999C7
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_xPl_VXmR6xVCZvOikIVp_6PWVc.roa
Signing time: Thu 01 Jan 2026 22:19:03 +0000
ROA not before: Thu 01 Jan 2026 22:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57785
IP address blocks: 193.22.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:9a:c0:bc:1d:ed:76:ee:73:d6:a0:71:19:99:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 22:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff13e5fd55e647ac55099bce8a4215a7fe8f5957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:f9:9f:44:07:58:1d:d5:ce:59:34:b4:3a:
fa:29:f3:22:1e:45:95:1c:4c:0b:cc:ce:70:95:fc:
ad:45:a4:36:d4:a2:57:94:cd:94:20:ca:b7:b2:18:
92:0a:e8:41:f7:84:92:9d:7f:ee:24:53:1b:50:1f:
be:4f:55:0a:f0:b7:0f:49:06:0a:cc:1b:e2:fc:96:
23:c3:ab:e6:16:40:86:fe:e5:77:97:00:9e:ea:4e:
45:c8:af:d5:ae:e5:17:31:17:3c:dc:c4:eb:0c:99:
71:ee:11:f7:83:e8:db:58:f6:37:18:e4:fe:d2:b6:
72:79:98:95:32:34:95:7d:9f:22:8f:aa:8e:6a:01:
fc:11:d2:da:9a:5d:91:55:cf:c5:20:a0:20:22:8b:
6f:f4:b0:8b:58:a7:b1:29:b3:49:ab:92:c5:37:82:
ef:86:3d:d5:55:ac:cd:8b:88:ca:d3:54:d0:71:d1:
81:c4:5f:de:f1:e0:be:45:50:19:88:1c:60:e5:24:
31:2e:0e:e0:49:e7:ac:e1:51:10:97:6e:52:82:1e:
2d:16:02:ac:17:bf:e4:83:e6:14:7e:0c:04:c0:3d:
a5:7a:1f:ea:d7:b5:b9:ae:71:26:90:fa:c7:ac:d3:
f6:1e:4f:d4:c9:7b:37:d5:49:a3:c7:38:92:34:20:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:13:E5:FD:55:E6:47:AC:55:09:9B:CE:8A:42:15:A7:FE:8F:59:57
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_xPl_VXmR6xVCZvOikIVp_6PWVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0a:8e:d2:d5:fe:cc:64:33:4b:fc:6f:67:6d:1f:c3:4d:7c:
18:15:3e:b5:7f:0d:3e:b7:f5:c4:71:af:f2:ec:da:e8:d6:f5:
44:fe:fb:48:6f:cc:c6:c9:cf:75:7e:d0:1a:c1:44:58:8c:df:
a8:59:4b:a5:0f:ec:fa:b1:8a:43:da:23:b7:b6:c9:42:22:a7:
5b:b6:69:1e:cf:09:39:f5:b0:b1:d5:c9:ed:6e:b9:69:74:24:
d4:92:35:b9:1e:b7:ef:fc:83:57:c4:34:c3:d9:cf:c8:93:b3:
07:35:cb:7e:22:f2:85:54:93:9e:68:99:64:d5:9c:e8:9f:68:
d5:fc:96:53:60:85:d9:cc:22:85:ff:8e:dc:6c:5f:3e:00:f6:
f9:aa:ec:6a:50:16:41:c3:f4:fa:e4:50:3b:48:7e:da:4f:66:
8c:25:e2:63:3e:03:88:a0:7e:c4:1d:cf:ca:05:ae:48:12:56:
1e:7d:9a:e6:cf:6d:3c:84:84:14:23:af:2c:4e:2f:0c:fb:1f:
f6:9c:0e:4e:fc:74:d7:96:9d:c4:67:07:80:f1:eb:17:3e:61:
83:81:ae:32:9a:be:ee:ba:4e:4d:e3:69:0c:97:d7:ab:34:25:
08:ec:7c:b5:3f:ec:55:5b:bf:01:d3:0c:75:61:a3:61:5a:a6:
62:69:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:45:59 2026 by rpki-client