This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/p93Yo32LiS86tKNIIJTFqRsTAc4.roa
File: p93Yo32LiS86tKNIIJTFqRsTAc4.roa (raw, json)
Hash identifier: rKHZxZkQ1DlZz92HShvQ6VMO1LR9WfPRGqIp6geZ5io=
Subject key identifier: A7:DD:D8:A3:7D:8B:89:2F:3A:B4:A3:48:20:94:C5:A9:1B:13:01:CE
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 019B7AC81EE2293C3B231825F8880741FCCE
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/p93Yo32LiS86tKNIIJTFqRsTAc4.roa
Signing time: Thu 01 Jan 2026 18:18:14 +0000
ROA not before: Thu 01 Jan 2026 18:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15935
IP address blocks: 31.130.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:1e:e2:29:3c:3b:23:18:25:f8:88:07:41:fc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Jan 1 18:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7ddd8a37d8b892f3ab4a3482094c5a91b1301ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:a9:39:15:be:b2:43:5b:ad:ae:dc:1d:db:
a6:e0:75:d5:c6:81:e5:ee:77:5f:36:01:cd:36:fe:
54:25:d5:83:28:be:a5:a9:8a:be:9f:57:75:44:a5:
e3:8e:95:d9:67:ac:a6:33:84:b2:7e:76:2e:9e:98:
02:67:be:eb:29:ff:40:22:d7:3b:9a:4e:e6:23:00:
e4:c8:15:8c:b9:ce:8e:85:9e:61:92:5a:27:e9:4a:
77:7e:a7:b9:e4:75:88:04:ea:00:fc:c8:75:8b:4d:
db:6b:f2:21:69:05:86:17:5d:bb:4e:f6:06:4b:d7:
52:70:8f:ec:23:1b:dc:b1:99:cb:3c:4d:f7:dd:d1:
26:6b:e9:41:48:6f:38:eb:4d:2b:e6:66:5b:29:42:
29:e7:e1:ad:23:d7:f7:89:bb:2a:eb:ab:3e:d6:47:
da:fd:d2:4a:0c:95:ac:0e:49:2e:85:a8:13:d3:63:
6f:52:4f:be:28:a7:e8:2f:00:f5:87:ce:64:59:56:
6f:85:a7:05:ee:ff:c4:7a:8b:d4:81:29:b0:5b:ce:
16:f3:42:8c:f8:c0:84:b7:f2:b3:82:41:bc:67:27:
42:db:af:35:3c:8f:aa:46:27:08:b7:aa:28:71:c6:
46:fd:b4:26:18:ba:6f:25:ac:b0:8d:27:09:2c:cc:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:D8:A3:7D:8B:89:2F:3A:B4:A3:48:20:94:C5:A9:1B:13:01:CE
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/p93Yo32LiS86tKNIIJTFqRsTAc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:30:be:c1:cc:c3:80:38:10:cb:31:d7:57:88:aa:9f:f8:28:
cd:c1:2e:94:a1:ee:65:6d:df:4c:8a:4b:03:db:cb:b0:0f:7c:
81:af:ea:fc:ba:12:47:ed:1d:17:dc:59:77:d1:37:06:24:d3:
67:db:14:65:1e:e2:00:dc:c5:ce:01:31:bc:ea:c6:95:51:19:
19:9d:1c:00:0c:9d:d7:18:c5:67:37:cb:77:82:1a:b7:df:27:
43:a5:b4:2e:62:af:50:a2:67:ed:e7:d8:e6:ff:c4:66:ba:0a:
67:fd:b5:a3:54:a5:ad:3f:0f:cb:a4:31:4e:a6:40:bc:e7:82:
5d:1f:09:f9:c0:fd:fd:c2:28:37:0c:85:92:c7:01:bd:69:14:
80:23:b4:5e:91:cf:67:2d:63:90:69:9f:0e:4b:33:a8:a3:c2:
46:6e:35:1f:e0:4e:ea:df:1d:a0:7c:4c:a6:26:1a:eb:5a:bc:
9f:ce:c7:81:92:95:03:d0:6e:51:c5:c3:ed:8d:2a:af:34:de:
43:a6:04:ff:9e:c6:9c:96:2b:a1:47:7a:98:2b:23:b0:82:cd:
0b:54:c7:9f:bf:2f:a5:43:ef:bb:04:88:09:f8:ee:7b:25:4b:
87:96:8a:5f:1d:95:37:26:1e:f7:7e:9f:1c:46:c7:51:02:71:
db:8b:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:32:52 2026 by rpki-client