This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/fskjKgPj5L9YOuWuL2aoh4G8vqU.roa
File: fskjKgPj5L9YOuWuL2aoh4G8vqU.roa (raw, json)
Hash identifier: 31yKilxbLobmkxS1Ne8oNBBHC8xU0xlQdNH3udg5Os4=
Subject key identifier: 7E:C9:23:2A:03:E3:E4:BF:58:3A:E5:AE:2F:66:A8:87:81:BC:BE:A5
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 019B7E3939C7BB31CF4C80FCA2D005A9BD27
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/fskjKgPj5L9YOuWuL2aoh4G8vqU.roa
Signing time: Fri 02 Jan 2026 10:20:38 +0000
ROA not before: Fri 02 Jan 2026 10:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213359
IP address blocks: 193.34.80.0/24 maxlen: 24
2a10:d840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:39:c7:bb:31:cf:4c:80:fc:a2:d0:05:a9:bd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Jan 2 10:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ec9232a03e3e4bf583ae5ae2f66a88781bcbea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3e:9f:7e:bd:3d:94:e7:36:8b:b2:2f:ba:d0:
6f:12:86:3e:10:0c:f6:e0:93:99:4e:e1:ba:13:98:
49:88:b9:2a:fb:3d:98:7f:70:9a:cf:06:3b:c6:d7:
6e:85:88:13:86:76:4e:2d:17:d4:43:7a:3f:f7:fc:
7c:65:c4:3b:94:24:28:c9:fc:f0:f9:6f:59:58:20:
2f:9b:92:1b:6a:55:74:cf:38:66:fe:15:5c:31:72:
0b:fd:8b:b0:38:c5:43:fd:14:a8:f6:3a:cb:6b:f6:
8b:51:7e:97:66:c2:58:64:bc:70:e1:20:41:15:0e:
e7:41:5e:81:6a:99:be:2b:67:88:0a:65:62:d5:7c:
0e:57:3c:c2:e3:68:dc:d6:12:1c:d6:d4:c8:ff:29:
e2:0c:32:c8:2d:a9:d5:89:98:42:74:0f:5f:89:d9:
65:1c:10:4f:a6:82:c0:4a:ac:ca:2d:03:a6:a9:24:
05:a0:4e:09:2b:5b:24:98:24:36:84:ba:d8:d3:88:
23:0b:03:ee:f9:c5:f9:20:4e:76:e8:77:3f:ed:0b:
b9:42:32:03:3d:66:e9:a2:f6:93:40:54:f1:4c:c7:
e8:4e:b6:b6:bf:e8:db:f3:97:a9:a7:e6:e4:34:29:
73:05:fa:ca:41:88:d2:41:c3:07:6d:24:12:18:1f:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:23:2A:03:E3:E4:BF:58:3A:E5:AE:2F:66:A8:87:81:BC:BE:A5
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/fskjKgPj5L9YOuWuL2aoh4G8vqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.80.0/24
IPv6:
2a10:d840::/29
Signature Algorithm: sha256WithRSAEncryption
a3:79:5a:07:46:18:a3:3f:ca:82:37:ae:31:73:7a:ae:58:ef:
af:c5:7b:4a:69:5b:47:b3:df:f1:a4:a5:5e:04:cd:d5:4b:e3:
a9:71:e9:75:7c:06:9d:a8:2f:7d:e4:c0:29:5c:ad:55:2b:3d:
b0:1d:2e:0d:0f:d2:eb:cd:31:2f:d1:b0:d1:23:63:d4:43:a1:
aa:e1:a2:e2:7f:d2:0e:51:11:6e:da:20:02:0c:16:3b:2b:7c:
b9:89:34:a6:d1:0b:73:bb:f8:4c:b5:b8:36:01:61:72:44:a5:
b8:b4:63:aa:42:3c:9b:0a:52:ba:08:35:fb:ef:6e:ac:4e:38:
20:87:a2:95:e9:37:a0:cc:66:6d:8c:19:4f:b0:d7:d5:ef:69:
44:37:06:99:33:bb:e4:18:78:6c:b9:d7:be:1b:6f:97:ae:be:
f8:12:17:5a:d3:6c:52:02:90:ea:6b:f3:35:6d:f9:76:61:17:
c7:a8:66:2c:70:8f:31:7d:de:67:9b:87:9d:de:30:dc:b4:ee:
be:f2:68:30:cc:1d:ca:e8:e9:40:10:09:5a:e7:e1:8f:a7:40:
67:e0:04:5f:a2:cb:43:2c:ff:f4:c0:4d:ac:98:4f:b8:08:91:
c2:ee:33:d3:ab:fd:b7:49:0b:e9:d5:74:7d:90:77:14:2c:c8:
c2:48:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:07 2026 by rpki-client