This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/mll1SRovdo31OBRdryURRKoqhS0.roa
File: mll1SRovdo31OBRdryURRKoqhS0.roa (raw, json)
Hash identifier: E2fN70ZXCBG4Pxkt/Db61lJqFT+J1KtD22Y5zBdjBcw=
Subject key identifier: 9A:59:75:49:1A:2F:76:8D:F5:38:14:5D:AF:25:11:44:AA:2A:85:2D
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 019A5BB8EE4E8E070C6A3ECA87B437CC704C
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/mll1SRovdo31OBRdryURRKoqhS0.roa
Signing time: Fri 07 Nov 2025 00:30:37 +0000
ROA not before: Fri 07 Nov 2025 00:30:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 193.203.196.0/23 maxlen: 24
193.203.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5b:b8:ee:4e:8e:07:0c:6a:3e:ca:87:b4:37:cc:70:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Nov 7 00:30:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a5975491a2f768df538145daf251144aa2a852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:fc:f9:c3:23:8e:f7:5d:5c:2a:bc:e3:66:
39:10:59:81:7d:40:bb:a4:f0:d7:e6:c4:02:4b:00:
44:49:85:05:ba:f1:a4:6c:e8:cd:68:dc:39:55:5c:
df:09:37:e9:4f:09:00:45:21:aa:0b:64:25:ed:10:
02:11:d9:b5:0a:65:48:58:00:20:ef:32:c3:f5:d0:
a1:86:11:44:4e:94:b3:d2:d6:6c:2d:87:36:aa:59:
65:fe:7d:7c:a1:7d:da:b6:ab:be:1b:24:41:8a:44:
9d:99:68:b9:ae:94:18:91:0f:7c:79:d2:b5:9e:4f:
de:4b:32:e5:93:eb:35:3a:10:31:41:29:47:b2:32:
77:3a:59:17:9b:1e:72:ac:b7:2e:18:69:ec:78:7b:
66:77:5e:a3:35:66:aa:23:4e:91:cb:0e:62:e0:ed:
d5:64:f8:27:05:99:ed:c3:a3:cd:77:5b:d5:31:64:
e0:12:f7:2a:94:ac:45:fe:e3:a7:eb:0d:cf:a6:22:
95:2e:cd:81:e9:7a:dd:39:43:2b:f1:44:e8:f9:bc:
d7:02:29:89:9d:60:72:64:99:8c:08:25:b2:aa:88:
c5:d4:78:97:a0:95:b0:3c:f3:3a:bd:15:fb:75:5d:
b0:e6:30:2d:dd:0b:09:23:aa:40:26:65:03:5d:41:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:75:49:1A:2F:76:8D:F5:38:14:5D:AF:25:11:44:AA:2A:85:2D
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/mll1SRovdo31OBRdryURRKoqhS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.196.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:39:9e:22:d5:22:8f:f0:31:31:93:45:06:f6:c0:e5:29:f7:
a1:21:1b:5c:d9:e1:57:12:8e:49:b5:57:41:c2:dd:1e:b2:ea:
61:41:2f:79:13:37:b4:05:76:f5:a0:e0:19:8b:50:04:ea:7e:
60:78:12:52:9c:4e:27:13:e6:ba:48:cd:92:f1:aa:36:72:84:
ca:7b:a7:c0:72:29:28:1f:e1:1c:85:19:a1:52:68:cf:13:ed:
d0:57:a6:12:8a:c6:78:15:3d:cb:ea:17:03:bd:2b:61:c0:25:
53:e8:da:be:59:24:fa:28:ad:79:2b:10:7c:e7:ca:09:8d:d8:
d3:de:2a:46:9e:49:c1:b4:04:31:fe:23:be:c8:33:1e:40:7d:
93:6a:f0:8a:71:bc:f4:77:61:7a:2b:21:f1:38:a3:a3:f3:fd:
59:03:ea:9e:97:f6:79:5e:e6:d4:2a:79:d1:61:d1:65:75:cd:
1f:7b:2b:a4:b7:a7:b6:70:75:b1:e3:96:84:40:bf:54:46:b5:
d3:35:44:0f:e3:5b:ea:33:d1:e3:90:40:fa:98:bc:48:a2:3d:
72:6f:63:41:3c:ee:e7:ce:b5:74:68:96:a2:47:fa:59:1c:44:
4b:84:c5:72:44:e1:78:22:7e:7e:98:a9:87:fd:76:64:c5:58:
52:fa:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 22:10:25 2025 by rpki-client