This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/_xkuMQSwRHi0DljPKAluJEXoLPg.roa
File: _xkuMQSwRHi0DljPKAluJEXoLPg.roa (raw, json)
Hash identifier: EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=
Subject key identifier: FF:19:2E:31:04:B0:44:78:B4:0E:58:CF:28:09:6E:24:45:E8:2C:F8
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 019B797F19E8B5F14DAC720B936241D662C7
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/_xkuMQSwRHi0DljPKAluJEXoLPg.roa
Signing time: Thu 01 Jan 2026 12:18:51 +0000
ROA not before: Thu 01 Jan 2026 12:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31274
IP address blocks: 193.25.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:19:e8:b5:f1:4d:ac:72:0b:93:62:41:d6:62:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jan 1 12:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff192e3104b04478b40e58cf28096e2445e82cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:3a:e9:ff:45:ea:31:ac:ac:f1:61:9c:8e:
8c:95:65:25:e9:52:02:64:62:60:04:c3:ff:0b:cb:
a5:0b:07:da:c3:57:ca:8a:18:06:4e:58:a2:4a:bc:
42:3c:de:0b:4e:97:f2:b3:bc:c1:5b:b5:7f:54:be:
03:e3:1c:79:d0:5a:d7:6f:5e:ff:b8:f3:f4:05:27:
74:33:da:65:b9:71:1f:b7:81:3a:ea:9e:8f:70:c6:
16:56:12:f4:56:5e:22:89:a9:34:79:60:37:43:74:
98:87:35:4e:59:56:33:94:7d:d7:06:05:5b:e0:e8:
48:4b:6a:f6:d6:4d:ae:ac:c7:68:ea:ce:5d:dc:a4:
11:6c:cb:13:64:3d:0f:db:fd:03:1b:5b:6d:70:46:
f2:cb:1f:c3:77:e8:6c:85:95:7c:93:98:e4:92:15:
d4:78:b4:13:14:d6:cf:f2:51:1b:e1:14:ef:a7:fa:
65:31:40:1b:82:66:37:eb:90:a0:d0:6c:20:9d:f5:
0b:16:c1:d6:f2:cb:e8:ce:bf:87:f4:04:1b:2f:b0:
58:83:f9:18:fb:5b:85:ed:0e:24:f5:6b:fb:3a:16:
e7:c6:7e:47:9e:2e:cc:1b:6c:07:e2:71:b5:e3:91:
e1:6e:da:51:d9:7e:76:c7:d6:c8:91:07:86:32:09:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:19:2E:31:04:B0:44:78:B4:0E:58:CF:28:09:6E:24:45:E8:2C:F8
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/_xkuMQSwRHi0DljPKAluJEXoLPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.124.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:ad:f4:c3:b2:dc:2a:64:64:26:3b:ae:d5:20:e2:f9:d6:4f:
01:61:b9:59:2d:2d:f9:52:88:1b:dd:1e:bd:30:aa:29:a2:ca:
73:8a:66:74:a7:5d:66:d9:bb:e2:60:1f:ce:1c:82:78:dd:79:
92:28:b4:4d:23:1e:aa:4a:4a:21:11:8f:27:50:67:29:6c:87:
2b:2e:63:41:5d:c8:2f:57:a2:f7:ce:a6:a5:c7:40:8f:96:04:
f8:12:b1:9f:37:12:12:f9:4a:dc:3d:11:e1:39:57:91:5b:3b:
98:b2:a8:0e:1d:f4:0a:22:8a:10:c5:bc:3f:77:9a:0e:26:0c:
3a:ab:53:c5:d3:32:07:ec:7d:01:7b:f4:88:10:9d:41:a9:17:
f8:0b:f9:18:4f:b3:c8:9a:a8:31:49:a5:68:77:db:36:f1:7d:
42:c0:c9:58:a1:52:11:24:87:de:17:af:86:34:ec:80:91:32:
65:18:8d:8e:60:3f:43:b7:9b:c8:7a:f1:58:44:93:88:7a:00:
75:e5:41:e0:f9:d6:54:df:9e:b6:5d:11:4f:65:2d:cb:4a:39:
43:27:56:84:a3:98:a4:19:2f:ec:9d:4f:30:b0:09:55:62:9d:
53:8d:f0:d4:92:3a:8b:5b:8d:e8:4c:7e:38:a2:17:3a:ba:18:
12:70:f4:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fxnotfFNrHILk2JB1mLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODM2MTMwN2VmZDlmM2FiZWZlNjliZDE0ZGUwZTFiZDYw
YjZlNmEwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjE5MmUzMTA0YjA0NDc4YjQwZTU4Y2YyODA5NmUyNDQ1ZTgyY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSY66f9F6jGsrPFhnI6MlWUl6VIC
ZGJgBMP/C8ulCwfaw1fKihgGTliiSrxCPN4LTpfys7zBW7V/VL4D4xx50FrXb17/
uPP0BSd0M9pluXEft4E66p6PcMYWVhL0Vl4iiak0eWA3Q3SYhzVOWVYzlH3XBgVb
4OhIS2r21k2urMdo6s5d3KQRbMsTZD0P2/0DG1ttcEbyyx/Dd+hshZV8k5jkkhXU
eLQTFNbP8lEb4RTvp/plMUAbgmY365Cg0GwgnfULFsHW8svozr+H9AQbL7BYg/kY
+1uF7Q4k9Wv7Ohbnxn5Hni7MG2wH4nG145HhbtpR2X52x9bIkQeGMgkxCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8ZLjEEsER4tA5YzygJbiRF6Cz4MB8GA1UdIwQY
MBaAFAKDYTB+/Z86vv5pvRTeDhvWC25qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTct
MjdjMjczYTYwNzg4LzEvX3hrdU1RU3dSSGkwRGxqUEtBbHVKRVhvTFBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lODEwMWEtMjQwZi00ZTMyLWEwOTctMjdjMjczYTYwNzg4
LzEvQW9OaE1INzluenEtX21tOUZONE9HOVlMYm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRl8MA0G
CSqGSIb3DQEBCwUAA4IBAQDDrfTDstwqZGQmO67VIOL51k8BYblZLS35Uogb3R69
MKopospzimZ0p11m2bviYB/OHIJ43XmSKLRNIx6qSkohEY8nUGcpbIcrLmNBXcgv
V6L3zqalx0CPlgT4ErGfNxIS+UrcPRHhOVeRWzuYsqgOHfQKIooQxbw/d5oOJgw6
q1PF0zIH7H0Be/SIEJ1BqRf4C/kYT7PImqgxSaVod9s28X1CwMlYoVIRJIfeF6+G
NOyAkTJlGI2OYD9Dt5vIevFYRJOIegB15UHg+dZU3562XRFPZS3LSjlDJ1aEo5ik
GS/snU8wsAlVYp1TjfDUkjqLW43oTH44ohc6uhgScPQZ
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:02:05 2026 by rpki-client