This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/IigNMRixnMPVS75SrzKehSBBVDM.roa
File: IigNMRixnMPVS75SrzKehSBBVDM.roa (raw, json)
Hash identifier: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=
Subject key identifier: 22:28:0D:31:18:B1:9C:C3:D5:4B:BE:52:AF:32:9E:85:20:41:54:33
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019B7BA4B9E567100AA0CEE5C1E9D47DA4A3
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/IigNMRixnMPVS75SrzKehSBBVDM.roa
Signing time: Thu 01 Jan 2026 22:19:11 +0000
ROA not before: Thu 01 Jan 2026 22:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39637
IP address blocks: 195.130.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:b9:e5:67:10:0a:a0:ce:e5:c1:e9:d4:7d:a4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Jan 1 22:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22280d3118b19cc3d54bbe52af329e8520415433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:77:db:2a:f4:91:60:d8:d1:45:1f:79:93:
80:74:bc:3e:22:c9:ba:12:0e:28:c0:98:ef:ed:e1:
64:54:a0:13:8c:aa:08:9a:f8:c2:8c:37:8a:1f:70:
54:17:36:21:d5:db:d9:c8:78:0b:74:53:83:ed:bb:
2d:22:5c:6f:b3:aa:00:fc:3e:03:8d:9f:bc:08:68:
f7:00:9d:5e:96:14:d2:d1:0d:d0:4f:4b:16:53:ea:
8e:e2:1b:0f:2f:f2:03:d6:94:e4:8c:ab:cc:83:6a:
3c:88:94:c8:39:40:dc:f1:bb:da:2f:08:b2:aa:06:
53:c1:17:e3:5f:ca:f8:a3:35:1e:e2:81:04:57:e7:
20:c1:e4:b0:8b:41:4e:fa:ff:ac:6d:70:37:99:4c:
94:28:13:be:fd:d0:3e:3c:01:82:47:c8:2b:8c:bd:
b8:ca:c1:00:fc:82:62:f7:ff:41:4f:4d:b3:17:4f:
5b:13:0b:8c:cc:fa:f7:87:f4:36:d6:0d:9e:45:1c:
82:0f:85:88:89:14:14:92:9a:6b:71:28:5e:4e:30:
af:11:52:76:f2:22:75:9d:5a:c7:9e:62:76:d1:34:
a1:ad:1b:0e:5c:25:97:d9:60:9e:63:7f:5d:6b:ad:
2d:f3:f1:21:ec:72:af:74:55:7a:52:0b:7f:00:2a:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:0D:31:18:B1:9C:C3:D5:4B:BE:52:AF:32:9E:85:20:41:54:33
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/IigNMRixnMPVS75SrzKehSBBVDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:19:72:90:ef:fb:33:81:44:f0:1b:b6:df:4e:6c:d5:0d:1a:
db:0f:40:c1:c6:74:d5:fa:76:18:d5:72:f9:f2:66:be:7b:c0:
9d:2c:1f:2d:b8:a2:5e:47:88:34:ce:d3:5a:38:29:5d:23:8c:
57:e4:37:f9:ba:ca:a7:1a:16:3a:e1:58:f6:ef:1c:05:37:81:
0e:72:6c:0e:ba:3d:85:42:7d:43:a9:0c:78:9f:04:6e:68:cc:
de:5c:5a:07:69:a3:48:cd:80:93:dc:7f:79:6f:9e:77:86:7a:
10:e0:ef:2f:09:3a:cf:6a:1f:b1:5d:96:a7:63:5a:ed:80:9e:
73:55:f8:2c:6d:d6:97:91:2f:2a:22:66:91:60:93:b2:00:01:
5d:68:2a:af:a5:b2:44:ba:23:60:e4:93:96:41:11:f7:40:c8:
13:04:13:8b:71:03:b5:df:c4:0a:35:12:e4:40:8e:77:5b:cf:
7a:d6:93:4a:48:e8:f1:2a:67:35:05:8d:bd:76:ea:77:4a:7a:
4c:c3:0a:4e:f9:2f:60:80:f5:c7:58:5a:2a:b9:68:a3:90:06:
9f:06:a7:a7:05:f3:37:1e:65:d5:84:90:54:27:4b:2f:9a:61:
be:90:fd:a0:35:22:14:7d:32:6d:77:90:bb:7e:58:30:e7:a5:
f5:04:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:38 2026 by rpki-client