This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mGPgYFI0a87W2xPkMo1Inw-FNM8.roa
File: mGPgYFI0a87W2xPkMo1Inw-FNM8.roa (raw, json)
Hash identifier: dR0boNIbJAGAYCT8YMYIsJDWFR4gMtz1D9GMelmMhUE=
Subject key identifier: 98:63:E0:60:52:34:6B:CE:D6:DB:13:E4:32:8D:48:9F:0F:85:34:CF
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019B7D5B9236E978EE2FFCD4162F1166EAAA
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mGPgYFI0a87W2xPkMo1Inw-FNM8.roa
Signing time: Fri 02 Jan 2026 06:18:31 +0000
ROA not before: Fri 02 Jan 2026 06:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 193.8.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:92:36:e9:78:ee:2f:fc:d4:16:2f:11:66:ea:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Jan 2 06:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9863e06052346bced6db13e4328d489f0f8534cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:53:fc:9e:c5:25:7d:a3:37:3f:b7:a7:7a:
cf:8c:db:8c:12:b4:27:1a:cf:59:94:10:cf:68:67:
7f:5c:68:f7:00:66:ed:29:1b:fb:87:a6:09:97:b7:
ae:43:8e:79:0f:f7:4b:27:bd:07:4e:59:e0:80:08:
f5:1c:05:4a:4d:30:41:a3:32:ce:59:9f:fe:6c:77:
cb:e1:9a:b4:11:ad:3c:8a:20:02:40:5b:d9:4e:9f:
c2:d8:ed:9f:1a:d4:27:b9:7f:56:17:f6:eb:c2:f5:
45:b4:a6:35:64:90:b9:37:51:e3:47:02:2c:32:ed:
d3:62:10:2d:5b:1c:0b:89:30:49:ea:68:9d:c3:2e:
db:8a:30:0f:0b:d2:c1:37:77:16:ad:de:f4:94:2d:
01:dc:4a:d2:16:ba:5a:b2:9c:00:ea:6a:dc:87:8d:
9d:76:ee:15:65:9b:7f:bb:1f:7b:a2:6f:ec:f0:45:
b7:d2:39:a5:90:31:91:31:f5:20:45:34:45:64:0d:
5b:63:eb:96:d5:1d:43:1a:9e:d0:10:8a:b2:dc:b9:
fe:c0:b2:d7:33:00:4c:e0:2b:52:9a:b8:a9:c3:85:
d7:7f:de:db:df:be:c4:c2:ad:c2:7f:f4:25:46:86:
1b:19:d5:96:06:f9:0e:8b:2b:7e:ea:91:22:29:76:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:63:E0:60:52:34:6B:CE:D6:DB:13:E4:32:8D:48:9F:0F:85:34:CF
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mGPgYFI0a87W2xPkMo1Inw-FNM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8e:41:a4:d3:b7:21:b5:2f:12:d9:42:04:ce:7e:41:b4:50:
ed:55:96:c1:f8:b9:b9:aa:0b:af:af:79:e7:d0:c3:14:dc:2b:
5c:f1:d4:2d:93:84:56:59:96:82:54:3b:fc:3f:26:ea:96:e5:
34:a5:55:b8:8e:4f:fa:99:76:84:dc:46:4f:a2:86:3c:03:05:
50:0c:ca:e5:9f:98:7b:ee:4b:9c:fa:76:cc:42:b8:39:b9:2a:
d6:35:5e:77:71:fc:f8:a0:0f:51:7e:24:77:a4:ca:ce:8e:62:
4d:e2:6b:93:f3:bb:6e:e9:0f:a1:37:c6:da:bd:79:ff:06:ba:
d0:23:dc:c0:6e:26:e0:a6:70:6f:35:0c:61:fb:f2:3a:48:19:
8e:45:c8:72:34:c1:35:f7:48:cb:75:27:fa:c4:01:f2:f6:cb:
ef:ea:4e:0e:c7:3a:7e:22:0f:fb:7c:4d:83:18:00:f7:8a:46:
30:b9:0a:83:ce:94:f4:3d:b8:ba:4a:dd:8a:6f:8f:4b:eb:16:
7d:01:d3:c4:e4:99:24:80:b4:89:53:e3:04:06:a4:c7:bc:87:
6d:04:dc:54:56:e4:6e:fe:77:a6:78:48:e5:f6:73:d4:76:32:
94:90:19:46:3f:7b:b2:38:27:05:20:87:ab:5b:5f:9a:24:a3:
72:e5:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:19:21 2026 by rpki-client