This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/UeDl4wpZIqQ0I2mlhCHJggGUTGI.roa
File: UeDl4wpZIqQ0I2mlhCHJggGUTGI.roa (raw, json)
Hash identifier: jpEDe24rlUn3pxTT1qasWKlz+X8T9bS0HUXdOUhAmHA=
Subject key identifier: 51:E0:E5:E3:0A:59:22:A4:34:23:69:A5:84:21:C9:82:01:94:4C:62
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 019B7E3866F8F86EA0867D3039CB39E621B0
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/UeDl4wpZIqQ0I2mlhCHJggGUTGI.roa
Signing time: Fri 02 Jan 2026 10:19:44 +0000
ROA not before: Fri 02 Jan 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34877
IP address blocks: 194.169.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:66:f8:f8:6e:a0:86:7d:30:39:cb:39:e6:21:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Jan 2 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51e0e5e30a5922a4342369a58421c98201944c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:59:cf:e1:6e:31:79:05:23:9b:92:cb:95:
8a:1f:14:87:53:16:76:8b:0d:c5:ec:22:0e:b6:2c:
f2:f8:eb:8e:ef:b6:ba:ea:ed:9b:a4:9a:38:7d:ff:
2c:af:4b:cd:bc:7e:01:76:8e:a1:fb:60:f7:13:69:
43:cb:c1:58:06:73:ba:22:e4:d1:28:18:f2:3c:2f:
ed:3a:9c:32:b7:59:b0:89:3d:f8:08:92:87:87:9c:
91:16:86:f6:3a:ea:43:c7:89:0c:8b:71:0a:a4:97:
09:ae:b9:37:c1:c2:29:15:65:89:96:fc:c4:e4:b6:
d6:7e:df:a3:ff:16:e8:39:03:eb:0f:ea:a9:99:29:
4a:52:b7:bb:2f:8c:69:46:01:2f:21:14:a1:72:18:
89:8d:e1:bc:39:40:e3:9f:6c:09:04:da:d4:03:5b:
f1:b3:ea:d5:c5:8e:4a:4b:6f:84:7c:3e:cd:4c:be:
c1:c3:f7:ad:8c:31:18:c1:95:7b:50:a2:e9:17:46:
82:5b:b9:27:b2:7a:f4:2b:99:89:8c:3a:98:7b:54:
2d:16:3b:34:cb:37:3d:f8:ed:69:f2:28:44:5e:03:
67:3b:8e:5c:2b:dc:a2:59:11:3b:33:79:c7:70:4b:
e1:a9:b9:54:eb:2f:b2:1a:78:e3:84:c3:66:bb:e2:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:E5:E3:0A:59:22:A4:34:23:69:A5:84:21:C9:82:01:94:4C:62
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/UeDl4wpZIqQ0I2mlhCHJggGUTGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e9:d5:eb:27:d5:d6:de:58:2e:e3:34:60:56:ef:71:eb:c4:
ae:f2:8f:e6:46:94:e2:19:92:85:79:0c:59:61:9a:90:e9:48:
57:6b:7f:6a:68:30:bd:c8:bc:ac:7d:99:f0:b4:d9:a3:5b:4b:
39:62:ea:46:dd:e7:1e:ac:48:00:65:e5:bc:f6:24:6e:a8:37:
37:b2:02:75:eb:da:e1:db:9d:b9:a6:44:c3:ef:81:14:fb:84:
11:5f:ee:05:93:23:ce:8b:b1:d3:69:a0:58:19:0a:bb:25:68:
fa:7a:e2:18:ae:44:36:37:d7:90:c1:49:25:4d:57:89:1c:e1:
ae:18:5f:f1:a9:90:bc:ea:4f:d9:99:a2:4b:86:6c:15:d9:38:
8a:d1:18:2d:2e:30:54:ac:f9:2e:43:14:db:2a:dc:f8:08:1b:
fe:6b:6e:d4:98:f3:7e:5f:b5:32:11:bb:c4:81:65:7d:04:ce:
6b:bd:b1:1a:88:88:de:b6:87:3d:88:7f:f6:54:96:cb:4f:3b:
2c:9f:bb:c2:29:94:a5:b6:09:8f:96:c0:49:82:9d:a8:f2:be:
9d:d6:c7:98:a8:68:a6:62:be:4b:33:b6:17:0b:59:53:49:d8:
65:fb:5f:c8:a4:cb:64:68:d7:7b:1f:11:4f:9e:51:24:60:25:
c5:59:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:30 2026 by rpki-client