This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa
File: dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa (raw, json)
Hash identifier: M2cQBApH+3mET+28roXB36HJcR7W2SatQpMI3H4gi/g=
Subject key identifier: 76:13:D1:A4:9B:B8:AD:40:BF:D6:E0:A8:D6:87:82:57:93:0C:74:B7
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 019B7EA6DD741E4A37FA126F1B2CB2596267
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa
Signing time: Fri 02 Jan 2026 12:20:23 +0000
ROA not before: Fri 02 Jan 2026 12:20:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39337
IP address blocks: 194.126.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:dd:74:1e:4a:37:fa:12:6f:1b:2c:b2:59:62:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Jan 2 12:20:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7613d1a49bb8ad40bfd6e0a8d6878257930c74b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:66:3e:96:5c:49:f1:3c:83:30:e9:32:55:90:
e0:46:2a:e8:99:2f:f5:3d:ab:97:c7:14:d3:72:20:
60:c3:42:d1:dd:cc:14:0f:90:c6:97:b7:0e:03:b1:
61:56:e3:11:2c:e7:1a:74:ce:28:86:2e:a6:7b:bf:
d8:cf:3a:40:cb:63:c2:b9:9d:11:ce:87:8f:4f:2e:
49:a2:d0:6c:da:13:8d:33:4f:f1:e9:61:0d:63:99:
cb:1e:12:7e:9b:dd:c6:f6:5d:4d:ff:a8:52:22:8b:
2a:03:49:8e:43:97:32:9f:a2:b6:c8:bf:b5:f4:83:
e1:42:38:b2:8b:e7:d2:33:b1:8b:e5:ab:42:f9:dc:
d3:52:a4:1a:64:d0:52:41:89:c3:ca:70:f2:34:aa:
dc:e8:63:cb:36:30:33:e0:6c:1a:64:40:b9:89:86:
c7:df:89:3d:1a:92:f6:67:f2:32:00:f1:60:0b:67:
f5:49:59:9d:80:fd:a8:6a:dd:5f:d6:59:22:c1:e6:
10:50:92:7d:7a:55:ae:9f:5f:33:2a:7e:31:6f:16:
e0:16:1e:77:50:73:43:0b:ef:2f:c5:af:da:fc:5b:
3e:30:04:2a:d0:f5:80:5e:17:19:6c:ea:a2:8a:44:
7a:51:da:45:98:be:b4:9a:3d:8d:c7:4d:da:9b:ff:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:D1:A4:9B:B8:AD:40:BF:D6:E0:A8:D6:87:82:57:93:0C:74:B7
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/dhPRpJu4rUC_1uCo1oeCV5MMdLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.160.0/22
Signature Algorithm: sha256WithRSAEncryption
93:91:1f:10:2b:d5:af:80:23:65:2e:6a:b9:1b:91:91:58:ce:
3f:33:a4:0b:09:f9:dc:d5:0a:b7:92:c6:c8:28:c6:78:ec:23:
b7:cf:32:1a:17:c8:2c:56:db:58:13:d3:19:c3:9b:00:4c:cd:
72:63:01:a4:49:60:89:c1:9a:47:7c:b9:a0:bf:12:10:a9:43:
53:89:38:35:3f:bd:ef:1e:d4:18:89:65:de:c0:54:ea:45:b6:
b1:0d:b5:47:a6:51:86:c9:82:12:72:03:53:ad:9a:14:45:11:
4f:68:e7:e4:35:42:27:1c:80:16:b1:0c:68:5c:f6:07:f2:fc:
c5:2b:3d:be:ed:b6:cc:33:ec:a7:66:c5:07:93:22:09:1f:f6:
25:ed:09:c7:69:6b:a5:11:eb:86:ec:d4:bd:d6:fb:6b:ed:4f:
89:17:99:e6:b6:7a:d4:d6:13:d0:6c:8e:43:bf:c3:3d:0e:f7:
21:c8:d2:7d:a5:e9:06:9d:b7:51:f2:30:10:b4:d3:31:2d:b2:
65:77:35:e4:8f:7a:8b:8c:25:70:45:67:04:6f:36:38:58:3e:
c2:b6:dd:c5:35:30:fd:be:fc:f9:72:2c:aa:e3:36:df:6f:83:
00:bb:df:76:0f:18:46:c7:ec:d8:1e:78:97:74:c3:be:aa:4c:
cc:7b:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:04:44 2026 by rpki-client