This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/DMGubU8hxCTGRODvSctDVfieplo.roa
File: DMGubU8hxCTGRODvSctDVfieplo.roa (raw, json)
Hash identifier: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=
Subject key identifier: 0C:C1:AE:6D:4F:21:C4:24:C6:44:E0:EF:49:CB:43:55:F8:9E:A6:5A
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019B7C7F15FC2EA5BE075119B6B349713758
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/DMGubU8hxCTGRODvSctDVfieplo.roa
Signing time: Fri 02 Jan 2026 02:17:42 +0000
ROA not before: Fri 02 Jan 2026 02:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8708
IP address blocks: 194.176.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:15:fc:2e:a5:be:07:51:19:b6:b3:49:71:37:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Jan 2 02:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cc1ae6d4f21c424c644e0ef49cb4355f89ea65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:f8:bc:f4:80:41:86:42:61:be:e2:db:32:
16:f7:cd:0e:12:9c:d6:43:8b:49:de:74:97:98:1d:
ab:ba:05:ab:38:56:0d:ce:06:9b:e9:25:dc:ed:d1:
11:38:a5:d8:76:a2:69:5f:b5:92:aa:9d:d9:91:62:
30:42:2a:a4:73:f4:61:5e:62:1f:eb:b0:a4:a4:9a:
b8:bc:27:a3:9c:4a:a8:28:1a:a6:a4:a9:c5:fe:34:
c3:67:35:55:7c:cb:2a:6d:83:26:d1:0f:2e:8a:b1:
6e:01:cd:24:15:39:9d:c0:54:06:57:cc:36:8e:64:
09:3c:5c:8d:8e:b4:8d:99:59:4d:56:69:ae:f0:58:
a3:28:a3:55:4b:97:4c:07:36:03:2b:8d:98:b0:c1:
22:c4:7b:b8:c0:9d:32:7b:1b:29:66:7f:c9:6b:d4:
2f:e6:ed:95:d4:92:6b:17:6b:2b:08:e7:be:f6:2c:
4f:ed:d5:24:f4:81:7b:38:48:1c:e6:3b:e5:25:02:
88:a1:f0:ac:99:45:50:76:98:e9:9d:ce:52:5e:1b:
d9:23:72:44:56:67:e6:96:5d:37:dd:cb:0c:f1:3b:
1a:da:d8:a1:87:1d:ff:67:d8:1a:2e:f7:8a:3a:75:
21:20:27:df:e7:75:ff:6d:bb:cb:8a:0f:77:05:59:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:AE:6D:4F:21:C4:24:C6:44:E0:EF:49:CB:43:55:F8:9E:A6:5A
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/DMGubU8hxCTGRODvSctDVfieplo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f3:1f:2c:96:e0:55:93:b5:47:ae:47:9b:54:5e:0a:30:6b:
02:e6:be:1e:3c:df:1a:2b:af:ab:f1:73:bb:d1:c8:04:34:36:
f9:6f:06:6c:2b:3e:6b:27:1f:4b:04:6b:5c:0f:79:07:81:8c:
59:4a:50:41:4d:c4:21:de:ba:2b:bb:83:b8:66:31:82:97:16:
9e:a7:15:59:1d:69:d6:8c:cd:c5:1f:d9:32:98:ec:84:7f:aa:
10:ea:2e:ab:30:42:d1:5c:4f:24:d4:fd:0e:a8:67:6d:3c:f0:
e8:60:bb:e2:69:ce:72:97:53:07:d7:1f:e4:85:bc:3d:a6:ac:
dc:3c:24:61:fe:a6:12:46:8c:a2:5e:1f:b8:d2:e4:9d:bd:bf:
25:fa:57:e1:84:bf:cf:9e:80:93:9e:22:12:b9:7f:36:c9:79:
8b:94:40:1a:bc:02:5f:f0:83:73:92:42:17:32:b8:04:0a:47:
72:88:3b:1b:41:f5:b4:46:a9:b6:0e:5d:67:2b:a5:e7:9d:f5:
7a:f3:7a:aa:cc:d6:a2:83:ac:2a:98:21:97:42:1e:1f:07:61:
3a:a9:cd:22:17:a3:3c:27:6e:2a:7f:5d:a6:c8:5f:d1:61:15:
08:6e:0e:96:a0:07:04:6e:5a:80:81:2b:ac:99:99:b7:a1:d4:
22:4d:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:13:01 2026 by rpki-client