This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/kuvm2P6tJF9o1AFrBjILYzqY_f4.roa
File: kuvm2P6tJF9o1AFrBjILYzqY_f4.roa (raw, json)
Hash identifier: clvqCPYP3GWwmIbbUCXE6of/slJaG/JyX/2aZgFmOCI=
Subject key identifier: 92:EB:E6:D8:FE:AD:24:5F:68:D4:01:6B:06:32:0B:63:3A:98:FD:FE
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019B7834A1FF214FB864360A0579F61F89D8
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/kuvm2P6tJF9o1AFrBjILYzqY_f4.roa
Signing time: Thu 01 Jan 2026 06:17:53 +0000
ROA not before: Thu 01 Jan 2026 06:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 93.127.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:a1:ff:21:4f:b8:64:36:0a:05:79:f6:1f:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 06:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92ebe6d8fead245f68d4016b06320b633a98fdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:71:fe:cd:ec:86:23:bb:de:6f:03:2e:95:
2f:3d:1c:b1:62:94:f3:f2:ed:9a:59:8f:75:b2:c9:
b1:43:38:d4:b9:79:56:d2:b6:ac:55:fa:33:b4:3f:
90:bc:70:8b:9c:eb:29:88:fa:b6:cf:80:d9:58:e6:
a7:18:ef:e2:c6:7e:1e:87:b5:1e:e4:84:78:60:6b:
18:9b:3f:2a:8d:6a:7b:f4:79:1b:d3:47:61:db:a6:
c3:75:6b:0b:3b:36:d9:e2:b8:99:f9:ea:85:82:fc:
44:c0:64:ea:e7:e3:77:bd:51:07:7e:a5:04:b7:db:
39:12:38:8a:fa:be:1f:ed:49:2d:58:da:bd:10:36:
6a:01:0e:42:2f:3e:ca:94:04:4a:5a:cf:7c:31:76:
9e:0a:0b:1d:41:98:8f:70:01:57:ad:dd:41:5f:f7:
53:09:61:bc:d8:31:f2:9e:15:0d:6e:78:bc:9c:23:
bf:e9:21:6f:12:81:5a:ea:a9:9f:b8:46:67:3b:56:
a3:0d:7a:36:33:a2:e5:ae:a5:96:1a:59:8e:33:43:
0d:3f:b8:c8:4f:d4:97:de:20:6f:55:b8:f8:bb:04:
9c:89:6b:63:92:d8:81:41:e9:71:5c:a2:e8:7a:a5:
32:31:4e:06:c4:88:47:24:5f:8e:3c:f1:a0:ad:87:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:E6:D8:FE:AD:24:5F:68:D4:01:6B:06:32:0B:63:3A:98:FD:FE
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/kuvm2P6tJF9o1AFrBjILYzqY_f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.144.0/22
Signature Algorithm: sha256WithRSAEncryption
20:c8:86:2b:23:93:72:26:6d:10:50:5a:8b:c6:8c:ce:bb:43:
c5:ae:04:f5:bc:52:78:d9:6f:38:56:fc:01:cf:f7:96:ee:91:
8f:2b:58:85:85:ff:7d:9c:1b:e5:96:de:7c:d6:a5:4f:6a:0f:
74:b5:40:fb:a8:d2:bd:72:7f:ca:04:3e:10:1c:48:f9:1e:68:
d2:b6:a1:ab:ad:5b:c8:9c:7d:f0:58:2d:d0:53:97:ed:77:f2:
f9:41:eb:dd:88:6d:1c:7a:a4:10:df:db:e8:25:6b:c1:f3:12:
84:b9:1d:cd:8c:d5:f2:cd:5b:1a:42:85:2a:28:f7:ab:10:4a:
5e:3a:6f:a5:39:b0:dc:b9:00:07:26:a7:89:7a:ab:4a:07:0d:
f2:18:68:ff:9a:fc:5d:70:6d:81:37:cd:8e:82:98:6e:d7:97:
a4:5d:08:a8:1c:0b:f4:0c:67:a7:a8:88:74:e6:81:e9:61:f0:
14:34:13:fe:c8:d7:78:8f:16:64:7b:bc:cd:6e:18:fb:b5:56:
71:2f:d2:76:dc:a4:68:49:7d:65:46:eb:fb:a7:10:ea:99:8d:
ed:af:f1:35:03:b5:e5:2e:e2:e1:16:c7:ed:7b:a7:f9:a6:15:
6d:82:5d:50:16:d6:0c:3a:6a:ba:3f:26:1a:c9:b5:55:d4:8b:
46:1d:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:00 2026 by rpki-client