This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ig2ees5HLfOePoZmV44oy1ypzFU.roa
File: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (raw, json)
Hash identifier: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=
Subject key identifier: 22:0D:9E:7A:CE:47:2D:F3:9E:3E:86:66:57:8E:28:CB:5C:A9:CC:55
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019B7F82FFDF71BF2F578347C176CCB73C80
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ig2ees5HLfOePoZmV44oy1ypzFU.roa
Signing time: Fri 02 Jan 2026 16:20:50 +0000
ROA not before: Fri 02 Jan 2026 16:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60026
IP address blocks: 194.61.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:ff:df:71:bf:2f:57:83:47:c1:76:cc:b7:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 2 16:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=220d9e7ace472df39e3e8666578e28cb5ca9cc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:a8:96:19:c9:99:7d:26:a7:3f:c6:79:d4:
90:47:d1:e0:8b:ee:8d:8e:92:9b:83:6f:11:63:97:
8f:72:bc:5a:27:55:9f:74:5f:5c:11:c4:f9:ac:dd:
44:6a:50:87:5a:ec:91:de:e7:06:30:fb:b9:38:85:
68:8f:75:96:7e:e9:aa:38:aa:62:a0:2b:f2:08:75:
6e:c6:01:75:86:b7:0e:8d:e9:3a:3e:dd:95:6a:54:
84:82:25:d0:d9:47:8d:04:39:81:30:56:e3:96:8d:
66:db:55:87:ba:82:9f:e4:e5:52:3c:47:8f:db:b4:
b9:98:b3:b4:fd:11:9a:b5:c5:38:79:18:4d:9e:b6:
97:d6:dd:1d:77:e7:1f:85:f2:29:44:ef:08:99:24:
36:9d:21:ac:ab:fc:8d:da:10:da:92:be:fe:1b:03:
ad:93:87:76:10:bd:b0:59:4d:4a:62:92:82:9d:c1:
55:37:c2:17:ff:c1:07:5a:87:16:db:9d:e5:4d:4c:
33:52:63:28:10:38:32:cd:84:be:9f:73:cb:d5:76:
f2:2b:c9:1e:20:2a:e3:29:4d:cb:9e:7b:d4:ea:d3:
f9:b7:03:8d:31:12:7e:61:d2:e2:89:59:1a:2a:d7:
d1:71:73:20:3c:b8:59:14:77:4c:e5:90:19:c6:6a:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:9E:7A:CE:47:2D:F3:9E:3E:86:66:57:8E:28:CB:5C:A9:CC:55
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ig2ees5HLfOePoZmV44oy1ypzFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.80.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d6:80:6d:05:94:22:09:4f:5f:88:e4:f6:31:07:bb:dd:e3:
10:c9:47:86:ed:1f:12:29:40:97:23:3f:90:83:c9:62:39:a4:
dd:74:67:b0:cb:6a:5f:ac:6d:fe:30:d0:60:3b:73:69:5d:4e:
fc:7e:20:58:1e:c2:b5:56:a0:0d:80:70:03:47:4d:65:07:a2:
ed:a1:82:68:69:20:b0:14:11:4d:f8:71:16:b1:8d:ff:10:be:
19:91:b9:f7:c7:da:3e:e8:af:56:11:1e:2f:88:c8:42:81:ef:
42:e1:d2:b3:bb:99:ff:21:e4:04:d3:96:c7:3e:f1:63:3e:49:
18:80:cd:6f:ce:21:f0:75:05:11:25:fa:fe:44:90:d2:76:d6:
13:07:dc:f8:65:c3:65:7a:e0:c4:0e:f8:ec:c0:e4:25:d9:2b:
5d:6c:46:b6:3f:89:6b:ff:0c:61:e1:20:24:b6:c9:8a:91:a2:
1f:9c:e7:c6:cc:13:8e:e4:86:ae:7c:e4:51:0b:87:58:ab:b8:
b9:f4:98:bf:72:66:57:14:93:5d:6d:91:73:a5:51:88:5b:c7:
fc:89:68:13:9a:4b:cb:61:12:2e:c6:92:8a:aa:19:99:b3:0b:
1a:26:1a:7b:3a:98:f0:93:95:32:fd:c0:45:75:3f:bf:24:a2:
6d:15:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:25:49 2026 by rpki-client