This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UpjGE674s_k9Iv1gBCVazhi7CUc.roa
File: UpjGE674s_k9Iv1gBCVazhi7CUc.roa (raw, json)
Hash identifier: 87ue4C4cllbiUGBoWnQPxG8trSEi9IkhaFFPVs+XbBs=
Subject key identifier: 52:98:C6:13:AE:F8:B3:F9:3D:22:FD:60:04:25:5A:CE:18:BB:09:47
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019B7A5A9BBEF949CC3E256792F530D820BE
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UpjGE674s_k9Iv1gBCVazhi7CUc.roa
Signing time: Thu 01 Jan 2026 16:18:37 +0000
ROA not before: Thu 01 Jan 2026 16:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5089
IP address blocks: 83.147.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:9b:be:f9:49:cc:3e:25:67:92:f5:30:d8:20:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 1 16:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5298c613aef8b3f93d22fd6004255ace18bb0947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:92:2f:84:63:55:80:9f:da:45:82:46:a0:
c0:a6:89:32:21:15:63:54:1c:93:08:f1:9f:02:50:
da:18:36:c5:07:ac:4e:3c:71:3f:67:bf:64:d0:1d:
fa:4e:46:04:ef:e7:1a:ec:d1:6e:19:ad:c8:55:d9:
78:3e:0e:4e:17:1a:e4:2c:ed:72:13:7b:db:9e:26:
6c:43:3e:bd:14:42:33:ca:14:61:7b:d1:06:1a:5c:
b0:0a:2a:b2:a2:d3:73:fa:d6:a5:c8:18:6f:9d:84:
5f:45:3d:8f:43:71:9d:8a:81:e5:63:8c:0f:0d:c6:
dd:cb:c2:5a:a5:94:a8:67:2f:9f:53:2b:61:4d:75:
33:58:66:78:19:05:60:d5:a0:93:a3:7b:49:28:20:
e1:fb:d4:2e:62:a0:ca:3f:71:a3:55:e4:ad:21:55:
5e:36:ba:f9:48:24:7a:3d:ed:6f:74:7e:c4:5f:d6:
32:aa:18:75:71:c3:0c:cf:8d:b2:46:0a:fb:27:66:
cb:41:c0:f8:02:7f:28:44:63:7d:a9:44:6a:8c:3d:
59:23:0f:4f:5e:13:3e:c4:3c:a2:83:95:dd:a8:d3:
c6:8b:10:f1:e7:bf:c9:82:f6:b9:ba:bd:01:94:23:
11:75:d4:5a:f2:b7:87:db:14:11:7b:86:d4:d9:cb:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:C6:13:AE:F8:B3:F9:3D:22:FD:60:04:25:5A:CE:18:BB:09:47
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/UpjGE674s_k9Iv1gBCVazhi7CUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.56.0/22
Signature Algorithm: sha256WithRSAEncryption
27:0c:84:e7:49:31:94:c6:75:eb:51:6d:25:2a:ba:d7:db:69:
b6:36:f9:ca:28:86:81:fb:a8:bc:51:7f:1b:c4:b1:c5:1b:15:
2a:48:37:ca:59:25:8d:51:bb:aa:5f:96:dd:11:39:be:39:bd:
a5:65:1f:6f:db:c3:b5:e8:8e:95:63:e7:5c:2c:8e:4d:b0:73:
c7:79:00:53:be:8b:fb:9c:d6:55:64:3e:ec:05:03:7f:28:a8:
90:be:7d:7b:a2:cd:d0:63:db:91:9f:d1:25:30:6d:1e:66:97:
f2:5b:e6:e0:91:af:aa:76:63:7e:ac:51:0c:ca:76:c6:3c:cd:
a5:60:33:9f:4e:f9:b2:5c:68:23:83:cc:c7:c2:67:3a:ba:20:
ae:c6:1d:65:94:4c:1b:56:a3:2d:8f:e2:42:aa:bd:0c:a0:0b:
35:fb:08:27:5c:75:18:e9:df:1f:51:90:75:a6:f2:4a:04:f9:
c1:1b:c6:29:4d:9e:a3:85:b1:75:ca:fd:a5:5c:97:ed:20:9e:
77:9e:33:53:c4:df:78:78:66:67:8a:fa:83:82:d1:8f:21:2f:
34:28:dd:87:f9:f0:4b:bc:06:09:38:53:09:86:3d:43:1d:a3:
2b:dd:79:eb:8a:53:0f:9f:b2:24:1b:74:0a:e2:af:09:93:ff:
89:10:0e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:20:42 2026 by rpki-client