This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa
File: IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (raw, json)
Hash identifier: 9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=
Subject key identifier: 20:F4:8B:37:A5:3E:98:F8:0C:C7:48:D8:8B:F3:91:65:90:F0:81:D4
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019B78A359F75D48B8F663651C2AE8FD0668
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa
Signing time: Thu 01 Jan 2026 08:18:49 +0000
ROA not before: Thu 01 Jan 2026 08:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 194.50.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:59:f7:5d:48:b8:f6:63:65:1c:2a:e8:fd:06:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Jan 1 08:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20f48b37a53e98f80cc748d88bf3916590f081d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:27:98:ed:94:a4:29:90:cd:1c:5a:9f:66:
37:51:08:c8:31:14:85:5a:66:de:d1:1c:1e:23:9c:
14:b4:8b:17:93:22:d9:91:d1:fd:ae:59:f1:e1:21:
55:06:96:ff:a0:4e:d1:50:35:f8:d6:84:21:9f:5a:
5b:68:54:d7:7b:76:32:99:58:b9:7e:5e:14:20:fc:
39:14:be:8e:da:6e:2b:48:e0:4e:bc:53:71:41:81:
58:c9:cf:3e:03:d9:70:07:0f:11:a6:05:ba:96:49:
1e:0a:a8:bf:30:d6:8c:80:0b:fd:d2:c4:16:f4:67:
f1:80:ef:cb:aa:18:23:ce:ee:5a:d9:62:1f:d1:13:
21:ae:24:22:7f:8f:1e:41:4f:74:bb:fa:41:49:a9:
9e:cc:d9:d3:da:c6:4a:e4:f4:7d:95:33:67:9e:1f:
4c:c2:a0:3a:30:69:a0:3e:e2:d2:f5:e7:b1:e8:49:
7d:ab:21:fc:a6:12:0e:35:b8:e8:49:40:01:f3:56:
7a:38:fe:51:ea:5e:ae:5c:c9:56:7f:93:99:d3:e8:
27:cf:3f:0e:8f:fb:99:f7:d2:5c:47:91:29:0c:16:
b3:4c:78:7a:bb:c3:85:7c:01:11:2d:37:16:26:f5:
2d:91:69:df:01:90:b5:6b:18:7c:d8:56:37:81:5f:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F4:8B:37:A5:3E:98:F8:0C:C7:48:D8:8B:F3:91:65:90:F0:81:D4
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:af:3c:0f:37:2e:24:07:62:41:24:32:ee:49:f0:18:32:ca:
69:73:77:2f:70:6f:4b:02:10:55:fe:2f:a3:b3:54:79:25:e3:
c8:51:c4:59:34:77:80:1e:c3:e0:3d:44:cd:43:7e:d2:6d:3b:
b3:61:af:39:51:8c:c5:86:b1:85:aa:8e:dd:5d:a7:6a:f0:55:
dd:bf:c4:6b:98:60:a9:0c:62:84:e1:3f:71:dd:35:bc:07:6b:
26:8d:e6:9e:ef:ec:6e:e4:b4:71:8d:c1:86:0b:c3:ea:7f:db:
07:e4:d3:c4:1a:dd:e8:de:31:df:9f:b6:ba:50:59:63:9c:53:
e6:a9:a5:b3:27:3f:db:e7:c6:15:3a:14:28:04:9d:0d:a7:5b:
cd:48:20:f9:d2:76:e0:c0:d4:07:c9:43:56:8e:0e:11:08:00:
f2:7a:9c:44:d9:23:2e:60:d3:97:33:1e:6a:ca:d6:39:53:1d:
5b:81:2e:d2:54:ca:a3:4c:9c:6d:23:ee:0a:15:ff:c8:32:23:
8e:fc:a9:e7:78:46:e6:ed:9c:cd:25:ed:a4:19:9d:f1:66:7b:
ed:8c:fe:6a:d2:a6:99:51:2f:78:98:aa:18:02:5e:09:f7:17:
f0:24:75:65:99:3d:02:6c:a1:03:8e:e8:e0:3b:80:c9:49:39:
44:9c:17:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4o1n3XUi49mNlHCro/QZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDRmNmVhNzllNGUyYTNlMDJhOGIzOGVkMGNkM2E0MDU5
MTM4YWMwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGY0OGIzN2E1M2U5OGY4MGNjNzQ4ZDg4YmYzOTE2NTkwZjA4MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycsnmO2UpCmQzRxan2Y3UQjIMRSF
Wmbe0RweI5wUtIsXkyLZkdH9rlnx4SFVBpb/oE7RUDX41oQhn1pbaFTXe3YymVi5
fl4UIPw5FL6O2m4rSOBOvFNxQYFYyc8+A9lwBw8RpgW6lkkeCqi/MNaMgAv90sQW
9GfxgO/Lqhgjzu5a2WIf0RMhriQif48eQU90u/pBSamezNnT2sZK5PR9lTNnnh9M
wqA6MGmgPuLS9eex6El9qyH8phIONbjoSUAB81Z6OP5R6l6uXMlWf5OZ0+gnzz8O
j/uZ99JcR5EpDBazTHh6u8OFfAERLTcWJvUtkWnfAZC1axh82FY3gV+EzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCD0izelPpj4DMdI2IvzkWWQ8IHUMB8GA1UdIwQY
MBaAFGBE9up55OKj4CqLOO0M06QFkTisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVUMjZubms0cVBnS29zNDdRelRwQVdST0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82MTFhNDAtYjQ0NC00OTBjLTlkZWUt
MjdkNjA4ZDIwODczLzEvSVBTTE42VS1tUGdNeDBqWWlfT1JaWkR3Z2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82MTFhNDAtYjQ0NC00OTBjLTlkZWUtMjdkNjA4ZDIwODcz
LzEvWUVUMjZubms0cVBnS29zNDdRelRwQVdST0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjImMA0G
CSqGSIb3DQEBCwUAA4IBAQBfrzwPNy4kB2JBJDLuSfAYMsppc3cvcG9LAhBV/i+j
s1R5JePIUcRZNHeAHsPgPUTNQ37SbTuzYa85UYzFhrGFqo7dXadq8FXdv8RrmGCp
DGKE4T9x3TW8B2smjeae7+xu5LRxjcGGC8Pqf9sH5NPEGt3o3jHfn7a6UFljnFPm
qaWzJz/b58YVOhQoBJ0Np1vNSCD50nbgwNQHyUNWjg4RCADyepxE2SMuYNOXMx5q
ytY5Ux1bgS7SVMqjTJxtI+4KFf/IMiOO/KnneEbm7ZzNJe2kGZ3xZnvtjP5q0qaZ
US94mKoYAl4J9xfwJHVlmT0CbKEDjujgO4DJSTlEnBd2
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:21:54 2026 by rpki-client