This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/dypMPP_xvoxJHktjo8O416uma_g.roa
File: dypMPP_xvoxJHktjo8O416uma_g.roa (raw, json)
Hash identifier: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=
Subject key identifier: 77:2A:4C:3C:FF:F1:BE:8C:49:1E:4B:63:A3:C3:B8:D7:AB:A6:6B:F8
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 019B76EAB8DCC51438A4D3FFE2FE5249ABD0
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/dypMPP_xvoxJHktjo8O416uma_g.roa
Signing time: Thu 01 Jan 2026 00:17:32 +0000
ROA not before: Thu 01 Jan 2026 00:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199141
IP address blocks: 91.245.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:b8:dc:c5:14:38:a4:d3:ff:e2:fe:52:49:ab:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Jan 1 00:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=772a4c3cfff1be8c491e4b63a3c3b8d7aba66bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:8d:b9:73:31:39:df:d7:94:79:7c:a2:f9:
d1:e7:77:83:09:0e:ee:74:e4:ae:f0:ca:30:53:44:
10:f0:ef:3d:14:c3:49:0f:e5:d9:11:92:25:c0:d2:
bc:06:cb:62:95:aa:76:4d:7e:04:70:4b:61:ee:69:
29:75:45:44:fd:cc:90:89:fd:91:d6:44:3f:6d:3b:
01:97:ee:46:61:d7:ee:bf:3e:91:05:19:06:3f:d3:
96:b5:59:4a:19:dc:d2:fc:f6:db:15:5a:52:54:21:
73:57:32:8d:ff:3a:cd:f0:a4:bd:a2:89:6d:79:3b:
85:84:99:12:78:ef:be:c7:b7:f3:ab:bc:18:f4:8c:
a3:54:49:59:e0:2d:54:ee:8d:41:15:82:3c:6f:3d:
c1:97:25:8b:47:dc:ad:8e:8e:4c:17:a4:e4:20:22:
38:6f:a7:33:01:20:56:1f:37:35:47:38:9b:cb:07:
cf:ab:d2:85:18:0a:ac:d8:e5:b5:d2:c5:ac:81:4c:
f8:19:37:08:74:db:77:1d:86:40:48:49:96:c7:5a:
ef:11:06:b3:60:f2:92:f2:c9:dd:42:ad:c9:fd:d9:
e4:98:d9:f0:e6:80:74:99:30:34:99:4f:c7:4e:7b:
cd:42:be:8d:d9:55:67:01:b7:3e:6d:31:01:29:16:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2A:4C:3C:FF:F1:BE:8C:49:1E:4B:63:A3:C3:B8:D7:AB:A6:6B:F8
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/dypMPP_xvoxJHktjo8O416uma_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.195.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a9:98:15:10:c1:43:31:bf:58:71:02:81:4c:36:d2:2d:60:
d9:7d:57:d9:7f:7b:6a:f9:44:af:3f:0f:16:07:f0:16:d7:dd:
dd:23:f1:4d:ec:e2:b8:b6:24:05:c0:85:1f:80:c6:a8:d6:e3:
6d:e3:69:e2:52:03:c1:ef:34:0d:b1:e3:c5:2c:23:76:b8:a9:
4a:ec:7e:22:c0:d4:0e:ec:eb:7f:c1:a9:78:d6:5e:58:f7:4d:
82:b6:6a:d0:c5:ea:3e:f5:89:36:ac:c4:ed:db:66:8a:e0:36:
f5:1d:fb:e2:ac:aa:57:6f:33:7a:e7:8f:38:cd:a6:46:ce:f0:
e7:a7:0c:70:7c:7a:02:78:6f:d7:86:ad:12:d8:76:8f:5d:16:
14:d9:d0:1c:25:80:ad:02:b6:2d:b2:2f:13:b3:02:cd:04:3e:
ff:be:a0:d5:2e:6b:9a:0e:28:9a:c3:28:79:4b:03:4f:ef:49:
6b:ed:e2:c7:86:ed:d5:bb:53:68:ad:4c:b3:37:4e:e6:bb:8b:
a4:2b:90:88:42:0e:00:86:fe:5d:2f:8b:9d:2c:bd:ed:1a:1b:
47:87:47:a9:0b:8f:fb:d2:30:ab:7f:ce:02:4f:51:bb:d0:55:
b7:68:e0:eb:87:a7:d7:33:41:01:8a:b8:6d:cd:b7:ea:66:49:
55:b6:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:30 2026 by rpki-client