This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/pEi1sXolFr3_KzzGy9GgxCb35YI.roa
File: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (raw, json)
Hash identifier: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=
Subject key identifier: A4:48:B5:B1:7A:25:16:BD:FF:2B:3C:C6:CB:D1:A0:C4:26:F7:E5:82
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019B7759717E2E72F33590EA5E6CCF5D1143
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/pEi1sXolFr3_KzzGy9GgxCb35YI.roa
Signing time: Thu 01 Jan 2026 02:18:28 +0000
ROA not before: Thu 01 Jan 2026 02:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58175
IP address blocks: 193.200.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:71:7e:2e:72:f3:35:90:ea:5e:6c:cf:5d:11:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Jan 1 02:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a448b5b17a2516bdff2b3cc6cbd1a0c426f7e582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:68:c2:b8:fa:25:6b:49:bb:b5:58:49:24:
0e:53:fe:15:8e:ec:bf:0a:d1:d0:70:99:ad:8f:75:
1b:96:71:82:56:c7:cf:17:13:a8:7d:62:14:10:e5:
5c:55:cc:5a:b4:1f:54:04:c6:07:fe:0f:9a:92:e4:
62:cb:a9:f0:31:54:11:10:83:ba:31:23:46:1c:97:
33:d0:f1:c5:10:e0:b4:79:bd:ae:13:52:6c:a9:1b:
8d:84:24:7f:8e:92:19:bf:6e:13:3b:9c:19:c5:3e:
53:8e:a6:fa:a0:7a:9b:e8:41:30:22:5a:29:d6:1c:
31:8b:22:80:4e:f3:5c:93:f5:29:37:47:35:04:39:
44:b5:66:90:8d:fe:98:03:06:e4:41:2a:d6:95:1b:
c3:c0:5f:3a:c8:55:af:a1:2a:a9:4d:58:f8:c6:91:
e5:a5:2b:1c:55:ac:ff:75:37:cf:90:9e:7e:12:f2:
ca:9b:52:c5:b5:2e:9d:f8:d5:8f:eb:1d:ab:03:d1:
6f:08:92:47:52:ec:de:17:45:1a:33:73:8b:d6:72:
2b:92:12:a2:09:f1:f1:6e:4e:84:1f:90:b8:8f:da:
06:62:c9:e3:b4:65:88:97:ac:a8:2e:43:78:1c:f9:
a6:0b:56:7e:87:26:d7:92:9f:a0:fc:55:fa:47:37:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:B5:B1:7A:25:16:BD:FF:2B:3C:C6:CB:D1:A0:C4:26:F7:E5:82
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/pEi1sXolFr3_KzzGy9GgxCb35YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.254.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1b:22:9d:53:33:5d:85:2f:14:e9:d8:f2:52:e2:5c:b5:d9:
bd:09:7c:8f:49:ab:a3:ce:c4:81:c9:ca:42:c0:81:9d:11:8e:
d2:ca:67:e3:19:41:2b:11:a3:16:db:74:37:8c:6f:44:ea:6d:
80:a5:43:70:87:0b:1a:61:45:f1:e4:85:f8:d4:64:22:32:c6:
c3:ca:e3:8b:90:d4:fd:7a:de:f4:46:7e:78:7c:d8:36:20:ee:
0e:2c:39:12:9c:e6:50:84:70:44:98:49:eb:47:29:bf:bc:a0:
aa:42:a9:15:d0:8f:13:15:f2:e7:25:73:a6:23:d8:0d:f4:7b:
db:99:58:0a:16:f8:b5:68:20:fe:93:af:8e:4e:1b:78:9a:ab:
ca:b8:10:1d:ea:94:d0:b8:7e:d7:a0:e9:8e:20:0d:97:79:27:
22:d4:e7:db:9f:84:e0:a6:8d:51:e1:f9:ae:56:12:44:ca:55:
63:83:5f:dd:0b:c0:9d:af:70:a5:52:3f:7a:72:c9:fc:92:6a:
05:cd:e9:8b:c5:87:14:84:0c:35:e8:02:0b:fd:75:45:f9:57:
bd:f3:d8:b9:06:03:d4:4e:87:93:2a:97:dc:18:48:cd:a1:1a:
2e:73:de:eb:62:3c:c1:e7:8e:08:7e:39:65:8d:60:89:fd:42:
82:6c:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:45:12 2026 by rpki-client