This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/aVFkjMqYn2rDvWK_4Er7veowmzc.roa
File: aVFkjMqYn2rDvWK_4Er7veowmzc.roa (raw, json)
Hash identifier: a0eU89LPDvn15SbN8UifKQ8En1lFGp7ZEcjuxOeXD3w=
Subject key identifier: 69:51:64:8C:CA:98:9F:6A:C3:BD:62:BF:E0:4A:FB:BD:EA:30:9B:37
Certificate issuer: /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial: 019B7EA5463C46F29324AB9FD8CFA01F53D8
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/aVFkjMqYn2rDvWK_4Er7veowmzc.roa
Signing time: Fri 02 Jan 2026 12:18:39 +0000
ROA not before: Fri 02 Jan 2026 12:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211144
IP address blocks: 193.18.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:46:3c:46:f2:93:24:ab:9f:d8:cf:a0:1f:53:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Validity
Not Before: Jan 2 12:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6951648cca989f6ac3bd62bfe04afbbdea309b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:3f:49:1f:1d:3a:d3:5a:a8:47:9e:90:fb:
51:b9:b8:ef:f9:15:48:33:2c:a4:c8:75:f9:d0:64:
a1:e3:01:27:74:e0:fd:c9:55:8b:42:a1:37:5a:d2:
1d:a6:80:bc:14:e3:ec:11:9f:09:db:f2:e5:07:38:
75:ec:89:52:ea:3b:c2:5e:48:6c:8f:75:98:b3:0e:
16:dd:52:52:88:e6:de:7d:17:ab:c4:64:77:a5:e6:
66:1c:b4:0f:ab:36:52:54:f0:08:6a:c6:69:6d:67:
0d:d1:14:17:6c:d0:86:10:21:e2:4d:d5:22:66:16:
da:c6:92:b9:02:e2:77:73:98:58:31:78:47:46:9f:
4f:c8:8a:98:46:13:1f:45:9f:9a:1c:1e:f4:fe:4f:
31:3e:86:b6:d7:09:fb:99:09:31:24:e0:dd:f9:93:
a3:27:92:8b:fd:79:1f:0f:fb:81:c0:2c:0f:a2:e4:
d8:f1:dc:05:f2:1a:a5:f1:48:0f:65:f8:bc:ae:f3:
0b:1a:16:e0:a6:79:4a:21:ba:a5:79:a3:dc:cb:95:
21:ff:bc:7d:ca:2e:1b:8c:fc:83:7e:7c:67:61:0f:
16:3f:b5:18:68:30:f4:d0:3d:b7:31:92:ad:96:39:
3f:d0:81:9e:17:a3:21:9d:7d:eb:75:ac:86:4d:43:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:51:64:8C:CA:98:9F:6A:C3:BD:62:BF:E0:4A:FB:BD:EA:30:9B:37
X509v3 Authority Key Identifier:
keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/aVFkjMqYn2rDvWK_4Er7veowmzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.18.239.0/24
Signature Algorithm: sha256WithRSAEncryption
86:90:97:d8:c3:21:45:86:d5:0b:53:3b:9c:f0:bb:57:62:f6:
6c:61:fd:2f:37:86:7d:64:42:d2:00:e7:cd:7d:98:f7:03:dc:
7a:df:70:83:8c:6b:00:d5:62:16:56:6c:74:81:ef:56:fd:4e:
aa:c2:60:6f:d2:b3:3c:68:c1:0e:55:50:f8:4d:28:71:ae:0e:
9e:db:6e:13:52:3b:d5:9a:48:f3:55:64:a0:08:e9:38:51:a4:
21:d2:09:eb:2a:58:e2:90:34:b6:72:57:1b:ab:da:b3:dc:e7:
ac:9d:79:0c:d9:dc:3d:ee:c5:3e:bb:fb:9d:7d:00:10:8e:24:
8f:06:4a:29:ab:cb:1c:87:68:ac:fe:f1:13:4c:fa:c6:37:43:
28:5c:cb:56:aa:c3:7c:9b:c9:6c:d0:5e:a2:83:65:6d:ce:d5:
96:7c:e8:22:23:e3:18:c4:06:2e:2d:13:d4:3a:f8:b1:a1:10:
aa:25:fc:53:f1:ac:6f:66:61:20:36:89:48:82:be:d9:3d:29:
01:4d:75:4a:2f:ce:b1:b1:0f:57:14:2b:24:dd:1f:20:7c:7c:
83:4d:8a:4b:15:23:18:92:c0:0a:04:74:eb:0d:af:02:48:00:
1f:fc:4b:ec:6d:d9:94:1b:c5:df:ec:90:d5:32:48:d5:74:68:
5e:ef:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:02:22 2026 by rpki-client