This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa
File: DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa (raw, json)
Hash identifier: gYw5oMexnS1c9Oco6dCQvq1ElaASC3rv7wtCZQiWRBY=
Subject key identifier: 0C:E4:55:E2:99:8D:B4:C3:5B:B7:B3:7E:D4:87:34:54:CB:B8:05:FD
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 019B783557A9F01913BA9C186462FF93CA15
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa
Signing time: Thu 01 Jan 2026 06:18:40 +0000
ROA not before: Thu 01 Jan 2026 06:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43756
IP address blocks: 194.37.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:57:a9:f0:19:13:ba:9c:18:64:62:ff:93:ca:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Jan 1 06:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ce455e2998db4c35bb7b37ed4873454cbb805fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:94:a9:94:84:53:41:73:38:5b:d6:74:47:
fd:55:77:f1:df:a1:3e:67:13:dc:69:07:a0:aa:e9:
b6:68:ca:08:e0:49:60:3c:ca:c7:9f:30:1e:23:18:
5e:8c:88:0b:52:e5:e3:48:52:9b:b1:b3:8b:28:34:
40:3b:5d:4f:2a:ff:89:45:94:52:ac:eb:a7:66:5d:
f3:ee:57:36:84:16:63:37:14:a0:19:84:6a:9a:61:
fe:38:49:32:ff:40:80:d4:c2:79:6f:f2:a3:33:cf:
1e:4b:09:ea:8b:74:f0:17:bb:c3:d6:d0:43:73:44:
6d:c5:2e:cf:b2:59:5f:d6:e4:d2:56:f7:e0:47:b1:
38:03:5c:3a:d0:56:5e:c7:4d:0c:5d:87:67:8d:3b:
30:c5:b6:07:a7:cb:c9:99:e3:90:29:cb:58:ff:ea:
84:5e:86:4d:96:93:3e:6b:36:8d:e7:e8:dc:06:de:
04:b3:b4:e2:ea:aa:49:ec:71:12:01:60:02:dc:5b:
1e:74:9c:b9:b8:b0:a1:50:e2:96:0e:62:9c:8e:8c:
ff:2c:86:65:cd:61:ad:b4:19:e6:6d:3b:c8:cc:2f:
7b:52:bb:c0:fb:59:7f:dd:fc:47:73:8a:02:36:86:
38:5c:c5:75:39:09:62:37:f3:25:f4:86:ac:aa:ff:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:55:E2:99:8D:B4:C3:5B:B7:B3:7E:D4:87:34:54:CB:B8:05:FD
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.252.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e0:ea:84:09:39:f8:19:51:d7:82:28:c5:df:ed:b5:dc:b9:
ae:cc:ef:20:6e:55:2a:95:8b:d7:b7:6f:ec:4a:11:79:55:09:
90:c4:5b:39:92:ee:43:84:91:fb:d2:76:6a:c3:6c:5c:8b:a7:
60:ca:a1:ca:6b:1d:9b:dd:42:7c:bc:cb:ec:bd:08:5a:60:47:
20:1a:c9:32:e2:8d:0d:9f:dd:b2:96:9f:23:a0:30:a6:4c:8c:
cd:d0:67:13:ad:7c:1b:89:05:d1:14:9e:a4:71:23:bc:7d:05:
5b:59:37:c0:62:19:54:51:be:f6:75:87:7a:84:42:64:e8:5d:
0f:8a:24:16:cf:57:0c:bd:11:84:93:1e:7c:68:91:8c:7f:e3:
8f:b9:1b:03:f3:78:2b:95:94:fb:46:bf:31:cc:0e:d1:cd:36:
cd:a3:6c:43:8b:6b:1d:0a:87:03:1e:6f:80:8a:3e:95:20:cd:
01:00:41:ac:62:3a:23:86:28:64:40:c0:10:b3:de:ee:84:ef:
64:8c:b0:35:43:8c:5e:23:e5:04:6d:b0:32:e3:66:e2:d5:fa:
80:66:38:94:f1:1b:1a:54:3d:b0:47:e0:c2:b0:66:fe:1b:43:
e4:e0:62:01:40:99:1f:24:31:b8:5e:33:35:13:46:f0:76:b3:
4c:83:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:02 2026 by rpki-client