This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/4otQnggN5_uQC9wKi00qa0eySrY.roa
File: 4otQnggN5_uQC9wKi00qa0eySrY.roa (raw, json)
Hash identifier: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=
Subject key identifier: E2:8B:50:9E:08:0D:E7:FB:90:0B:DC:0A:8B:4D:2A:6B:47:B2:4A:B6
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 019B7CEDC8A508068B0D4580125C7460DA2B
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/4otQnggN5_uQC9wKi00qa0eySrY.roa
Signing time: Fri 02 Jan 2026 04:18:36 +0000
ROA not before: Fri 02 Jan 2026 04:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 194.53.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:c8:a5:08:06:8b:0d:45:80:12:5c:74:60:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Jan 2 04:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e28b509e080de7fb900bdc0a8b4d2a6b47b24ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:79:f4:5f:94:fd:5f:16:ff:b0:66:1b:61:
2b:44:0c:06:c1:d1:ac:8c:a8:91:3e:20:84:69:20:
06:3e:bc:13:80:40:af:02:b6:28:9b:fd:52:b2:ae:
16:48:ca:b6:43:de:27:4d:04:fd:2e:1f:d3:6c:a7:
10:9a:61:9f:39:17:aa:5d:aa:4d:5f:00:d8:af:bb:
ae:07:f4:83:31:30:3a:58:39:4f:76:c4:f0:f0:69:
5b:1e:95:5c:35:c3:10:a0:1b:91:a0:e1:63:6e:67:
97:8a:49:3e:89:10:56:40:a5:47:16:49:b5:50:c3:
ae:84:68:9f:10:a3:47:35:5f:6a:f0:6d:cb:4d:7b:
62:5b:e2:7d:5d:b6:cb:53:6b:1a:01:fe:ca:a7:d7:
1f:11:76:26:97:14:b2:92:12:ff:58:7d:83:b4:a8:
ea:21:21:6a:0b:ba:cc:ef:fb:91:c2:7a:99:f7:85:
fe:10:e7:e1:9f:f8:40:d5:ac:4d:7a:24:8e:14:2b:
7b:8a:da:08:af:62:f2:d6:d2:a5:c9:87:48:e4:3d:
f8:e1:f9:63:4c:1f:da:8e:d2:7e:fc:34:cb:3b:e7:
c4:bf:71:b4:4c:19:57:ca:ee:b4:a7:67:6a:a7:67:
d1:f8:a8:c7:5d:c9:43:a5:fd:4d:f7:66:43:53:40:
7e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8B:50:9E:08:0D:E7:FB:90:0B:DC:0A:8B:4D:2A:6B:47:B2:4A:B6
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/4otQnggN5_uQC9wKi00qa0eySrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.10.0/24
Signature Algorithm: sha256WithRSAEncryption
00:19:10:bf:17:f9:96:d6:64:38:58:2e:10:3f:9b:7a:48:14:
bd:7b:f0:d5:50:2b:e7:11:29:18:57:45:27:45:eb:2a:ca:29:
14:a6:2e:97:50:fa:0f:f6:53:fc:ab:aa:67:64:b3:11:fc:50:
4e:ee:0b:9b:01:db:be:48:96:cd:0d:65:2e:4f:3e:18:77:32:
e8:d9:c8:ec:fc:0c:3d:d9:e5:0a:c6:b1:98:cd:d5:db:3c:9c:
59:36:56:6b:a9:5c:0f:93:2f:b1:8d:eb:f3:5a:54:df:af:64:
de:49:3f:4e:51:dd:54:98:00:96:35:dd:30:0f:d2:fb:42:82:
b3:79:75:90:fe:37:17:f1:2b:51:0e:99:22:8a:75:db:cf:70:
84:78:dc:87:a1:13:f0:42:b0:bf:02:bd:02:b9:40:50:89:93:
09:b5:2b:09:b3:52:b4:92:76:fe:10:fe:91:9f:65:35:66:fc:
f6:b8:c2:df:e0:6a:de:24:8d:ac:71:58:9b:33:40:2b:2b:c1:
7e:d1:34:ad:f7:88:8d:97:8e:97:6a:eb:c1:b8:b6:66:db:e0:
5f:81:3f:d6:b4:8f:4c:14:4f:a1:28:f0:0e:0c:37:30:c2:c1:
57:6e:8b:a2:2c:f7:82:75:00:77:0f:d4:ad:6b:fc:ee:28:cf:
37:45:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:36:37 2026 by rpki-client