This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/71Ewp1n9Qo6F0iW_UrrQ0oIN3DU.roa
File: 71Ewp1n9Qo6F0iW_UrrQ0oIN3DU.roa (raw, json)
Hash identifier: R2PacJbb/HyRYwcfVm4XOQFUlae+hBB/iU+Z6f163zA=
Subject key identifier: EF:51:30:A7:59:FD:42:8E:85:D2:25:BF:52:BA:D0:D2:82:0D:DC:35
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 019B7C1250A7C95EE2E3FE79DFC4AB96E75A
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/71Ewp1n9Qo6F0iW_UrrQ0oIN3DU.roa
Signing time: Fri 02 Jan 2026 00:18:53 +0000
ROA not before: Fri 02 Jan 2026 00:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211010
IP address blocks: 193.35.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:50:a7:c9:5e:e2:e3:fe:79:df:c4:ab:96:e7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Jan 2 00:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef5130a759fd428e85d225bf52bad0d2820ddc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:ca:9d:64:7d:ac:34:de:13:d1:2d:fa:0c:
92:b6:f0:b7:c7:ae:c1:3b:ac:b9:22:90:6d:d1:88:
54:28:de:14:55:62:8e:97:4a:7c:b5:57:b1:40:6e:
b3:c2:6e:8c:2d:1b:74:c3:f2:54:2a:8d:9d:a7:bd:
d1:d0:52:98:52:61:c4:15:5f:14:09:96:51:e6:77:
20:1e:61:be:de:18:8f:a2:b9:90:24:a3:4c:8c:43:
e9:e8:72:cf:9f:84:6f:d1:e9:08:34:58:27:14:8f:
c1:89:64:7e:97:a8:8e:43:af:7e:8c:c2:cb:0e:39:
12:02:8f:49:fd:a5:ea:df:f6:e0:0f:6b:a1:f4:ff:
e7:06:ae:7e:50:93:03:68:4c:97:7c:f5:1a:92:2c:
c0:45:f0:f3:56:80:3e:f8:e1:d1:3d:3c:70:f2:78:
53:94:8a:0e:61:2b:03:c4:fe:bb:81:30:84:72:89:
8f:b8:e8:0e:38:60:a4:7e:7d:a4:af:52:ed:3e:a7:
94:7c:d2:b2:2a:6f:33:25:0b:d4:5c:e5:92:59:b8:
fd:28:f2:b5:9b:42:12:0f:96:da:d0:c6:8c:df:79:
42:76:91:72:ab:b3:dd:d1:95:3a:1c:af:22:22:a9:
f3:b3:a8:2b:57:47:e4:d0:9c:01:79:88:1d:cf:3f:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:30:A7:59:FD:42:8E:85:D2:25:BF:52:BA:D0:D2:82:0D:DC:35
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/71Ewp1n9Qo6F0iW_UrrQ0oIN3DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.63.0/24
Signature Algorithm: sha256WithRSAEncryption
54:35:89:7d:05:da:d4:84:ff:c0:b3:4e:dc:d9:66:66:c1:a6:
84:e9:9b:e8:98:9c:62:72:d5:ad:15:11:48:14:2c:00:67:c8:
25:98:db:8c:9e:08:72:b3:3e:15:fc:99:d7:bc:78:73:f0:e1:
de:f1:dd:47:62:d5:58:b7:37:7b:0e:f2:50:4a:74:be:3a:27:
e9:8b:6c:f1:5e:ba:cb:34:5d:78:90:9b:32:63:ef:51:aa:17:
0b:76:c0:5d:37:55:72:d7:3b:ba:bc:6d:43:2d:c4:ea:3a:c7:
0c:8b:1f:72:75:8e:00:71:a4:46:c6:76:94:62:83:6d:2c:e5:
8d:ca:36:66:13:ab:14:ce:1d:b9:72:e7:4d:f0:86:63:42:20:
b9:a9:f1:b4:5a:4b:31:4b:07:53:4f:13:43:ca:69:d9:54:0c:
26:60:c7:ee:5f:75:3f:89:05:f4:7e:f5:78:2a:95:67:82:03:
c3:07:88:3e:93:21:f2:a8:38:b3:97:d5:54:1f:18:aa:d1:0f:
ec:d6:cf:53:0b:d3:c4:6d:5c:dd:73:66:9f:8c:a1:ac:ed:82:
76:4a:84:18:71:c5:00:96:35:5c:2d:64:6d:ff:9d:19:8c:01:
03:b2:24:3a:b6:f2:c5:b4:b4:61:ae:78:25:25:c1:29:d9:f1:
4b:7d:3a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:43 2026 by rpki-client