This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/YddULzzqlHaijBKc45wV-2A9NRg.roa
File: YddULzzqlHaijBKc45wV-2A9NRg.roa (raw, json)
Hash identifier: DJJK0mLKzBAwLMCbEIMtOEBhlQs/ecomUOMz09kFmzw=
Subject key identifier: 61:D7:54:2F:3C:EA:94:76:A2:8C:12:9C:E3:9C:15:FB:60:3D:35:18
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 019B7BA3EDA942430C7ADD2E1D8412B6AEC5
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/YddULzzqlHaijBKc45wV-2A9NRg.roa
Signing time: Thu 01 Jan 2026 22:18:19 +0000
ROA not before: Thu 01 Jan 2026 22:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 82.192.96.0/24 maxlen: 24
82.192.97.0/24 maxlen: 24
82.192.100.0/24 maxlen: 24
82.192.101.0/24 maxlen: 24
82.192.102.0/24 maxlen: 24
82.192.103.0/24 maxlen: 24
82.192.108.0/24 maxlen: 24
82.192.109.0/24 maxlen: 24
82.192.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:ed:a9:42:43:0c:7a:dd:2e:1d:84:12:b6:ae:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Jan 1 22:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61d7542f3cea9476a28c129ce39c15fb603d3518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:b3:72:d1:63:51:4e:8d:31:73:69:53:c7:
64:f6:a4:d0:cf:27:11:da:25:87:c8:a6:6d:57:30:
00:2d:46:8e:1a:a1:c3:40:2a:17:a4:81:c3:a2:51:
f2:cc:83:bd:9f:a9:39:4e:c7:68:77:ed:0e:a7:7f:
da:08:19:bc:97:03:0b:61:d9:b4:c5:9f:3b:15:3b:
45:74:e1:bc:83:ef:0f:00:8f:27:57:f0:75:e2:2d:
78:53:f4:82:c3:24:69:03:05:c4:4b:7b:58:da:d5:
13:db:df:35:b0:35:e6:6a:8d:29:70:50:3c:5c:fb:
e7:27:2d:64:c9:e7:a4:1e:4f:f9:2b:98:13:4e:fe:
3d:37:dd:f0:5a:f4:50:75:33:73:f5:6a:a2:4f:35:
dd:c9:82:d1:7c:a1:65:e5:af:ac:ff:5f:c7:85:ae:
a6:ca:a7:08:a7:a6:2b:bd:2c:0a:a2:80:a8:8b:80:
9c:cc:fd:a5:4c:02:4b:79:56:e8:7d:77:f8:48:74:
08:75:22:49:af:ff:f0:f3:97:b9:f1:dd:50:6e:3c:
89:04:08:1f:cf:14:fd:68:56:47:8b:e6:5f:b6:9f:
a7:f0:f3:33:5d:4b:9d:48:c1:db:72:30:7f:fc:fa:
7a:3f:86:a6:57:66:b3:bd:f5:f0:e6:17:8f:2d:3b:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D7:54:2F:3C:EA:94:76:A2:8C:12:9C:E3:9C:15:FB:60:3D:35:18
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/YddULzzqlHaijBKc45wV-2A9NRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.96.0/23
82.192.100.0/22
82.192.108.0-82.192.110.255
Signature Algorithm: sha256WithRSAEncryption
37:20:62:e9:58:de:c3:d2:5d:fe:ee:22:f0:55:3d:19:14:ef:
20:09:ca:3e:2f:f0:3a:5d:95:54:29:d7:8a:78:0c:da:0b:f3:
ab:24:94:85:8b:87:f6:5c:00:bf:7b:ab:06:3a:9c:63:70:38:
a0:92:dd:d4:7c:e9:eb:e7:62:a8:40:d9:86:e7:6d:3f:2a:cb:
21:5f:3a:0e:c5:db:d5:6f:09:ed:f2:40:75:15:7f:5f:be:46:
78:cf:59:70:96:ef:16:e6:cb:aa:7a:a3:25:01:ea:33:c3:eb:
ea:87:da:ba:01:2e:38:16:54:6f:ec:02:7f:d5:0a:e3:1c:43:
c4:b9:03:04:40:d0:8d:ec:93:fd:04:92:d2:0b:fd:61:ed:59:
62:95:06:2e:b7:5d:05:97:75:2d:4d:55:5f:95:70:65:51:57:
5c:43:34:73:e6:39:4e:fc:5c:71:7b:40:03:c4:c6:35:6e:da:
60:ea:e1:9b:8d:90:47:da:39:c2:90:e7:7a:b3:20:12:ec:63:
66:2f:21:e8:76:77:ea:2a:a9:4e:40:ff:d8:8b:84:4d:88:0b:
b7:2d:d9:18:40:c3:7f:9c:5e:81:21:b9:6a:97:01:ac:56:1c:
c3:f0:dd:9b:fd:f7:e3:00:e6:5e:4b:0c:3c:e3:7d:aa:f2:a3:
a3:d9:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:18 2026 by rpki-client