This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/S83M800fbELdZQf9hRfrhc7ekM0.roa
File: S83M800fbELdZQf9hRfrhc7ekM0.roa (raw, json)
Hash identifier: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=
Subject key identifier: 4B:CD:CC:F3:4D:1F:6C:42:DD:65:07:FD:85:17:EB:85:CE:DE:90:CD
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019B7CEDFFF1593E3E435FA4E24E2348C43D
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/S83M800fbELdZQf9hRfrhc7ekM0.roa
Signing time: Fri 02 Jan 2026 04:18:50 +0000
ROA not before: Fri 02 Jan 2026 04:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41183
IP address blocks: 194.140.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:ff:f1:59:3e:3e:43:5f:a4:e2:4e:23:48:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Jan 2 04:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bcdccf34d1f6c42dd6507fd8517eb85cede90cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:36:7c:a8:5b:c7:59:b0:78:3d:06:56:a4:
43:e9:48:a2:c7:9d:c7:9d:c1:b4:6b:e8:93:aa:a8:
11:54:c4:a7:b7:da:61:ff:41:d5:b3:2e:84:cb:f1:
4d:f8:fb:2a:d0:ad:75:bc:41:3a:89:79:7a:b6:7d:
d2:4c:17:fd:2b:11:26:18:f7:9d:99:01:a2:80:a8:
9e:b9:be:6a:b4:e0:63:6b:58:28:03:9b:fa:bc:bf:
16:dc:47:8b:c6:59:86:bf:b0:62:f6:06:4e:60:20:
99:05:f6:04:b2:e7:ad:95:c6:05:9c:13:2e:9e:58:
4c:63:0e:58:d0:c5:a2:aa:f9:73:7f:f9:01:00:8e:
23:d3:d3:0f:b3:3c:63:e8:39:f2:fe:3b:d7:d2:bf:
64:c0:56:2f:7c:fa:da:3a:63:9f:42:19:70:40:95:
ee:2a:b5:0d:a1:cd:20:dc:6d:08:53:4f:48:a3:21:
a1:da:cd:dc:1a:b3:67:47:bd:c4:ee:48:9a:73:a9:
76:78:58:4f:37:a4:39:4a:e7:52:d1:38:c0:da:cf:
fa:20:d2:cf:b1:e9:7d:f3:d0:b1:b8:67:bf:57:13:
d8:00:eb:7c:cf:38:ea:0d:70:ea:91:dd:7e:09:bc:
46:17:79:34:b4:dd:c4:0b:06:5c:18:2a:c0:4f:ad:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:CC:F3:4D:1F:6C:42:DD:65:07:FD:85:17:EB:85:CE:DE:90:CD
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/S83M800fbELdZQf9hRfrhc7ekM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:79:c5:92:de:18:d5:53:83:8c:ad:90:a1:db:dd:5f:b9:89:
17:b3:87:0c:98:df:95:97:ae:9d:38:2d:ca:04:3e:e3:a9:94:
27:bf:0f:8e:a5:7a:e9:35:76:3e:7c:b6:64:85:2e:31:b1:8c:
01:6a:d7:0b:27:5b:2e:bb:61:b8:87:d7:8f:2a:96:c9:82:26:
f9:d4:c1:40:04:a6:0b:7a:c9:d7:3f:e9:12:ee:66:ea:33:1d:
9d:e6:51:df:ac:a1:6a:1b:91:ce:6c:5f:1b:bb:9e:f6:2a:01:
93:7c:7c:19:1c:ca:e0:a5:5e:cf:ee:f8:a8:51:2c:f9:d6:b3:
70:f0:b9:11:90:0a:41:18:77:d7:e7:59:34:49:5c:37:73:37:
0a:2e:be:cb:37:6e:55:f2:91:81:f4:3d:94:b1:3b:03:02:cb:
96:b1:b7:b0:c5:b6:9e:d0:34:95:0b:b0:46:e2:4b:21:88:25:
a9:79:be:5d:7b:8c:f9:85:15:53:34:1b:d4:ed:58:2c:4a:70:
03:fc:46:e2:34:6c:05:f3:12:f9:6e:63:13:50:9e:96:84:60:
87:f2:90:94:6c:e5:6e:29:a6:f6:29:e3:b3:2a:0a:b2:7e:4e:
1a:7a:ed:17:96:34:21:af:4a:20:dd:1d:5a:8e:57:56:19:f6:
4c:ac:0c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:14:56 2026 by rpki-client