This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/PtYo6MwEWy1vpndhzACUN02erEo.roa
File: PtYo6MwEWy1vpndhzACUN02erEo.roa (raw, json)
Hash identifier: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=
Subject key identifier: 3E:D6:28:E8:CC:04:5B:2D:6F:A6:77:61:CC:00:94:37:4D:9E:AC:4A
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 019B7EA679EF887954C1FC8B07507902E414
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/PtYo6MwEWy1vpndhzACUN02erEo.roa
Signing time: Fri 02 Jan 2026 12:19:57 +0000
ROA not before: Fri 02 Jan 2026 12:19:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8455
IP address blocks: 195.248.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:79:ef:88:79:54:c1:fc:8b:07:50:79:02:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Jan 2 12:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ed628e8cc045b2d6fa67761cc0094374d9eac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:ef:e1:6e:17:ae:fb:fa:6a:ca:61:ef:21:
70:3e:9f:32:ab:5e:5e:96:3a:53:80:ad:56:92:99:
54:87:d2:f2:ef:80:71:d1:ff:c0:08:3f:f2:89:01:
66:61:42:86:86:36:90:73:74:95:c4:50:c0:80:f2:
3f:e0:1e:19:57:fb:2b:b6:a4:ae:bb:0a:d4:81:3b:
1c:87:93:0d:73:37:e7:2a:de:91:da:ee:62:8f:d2:
7c:e4:37:e4:d9:12:ff:f9:67:4b:cf:50:8e:9d:e1:
1a:dc:98:c6:2c:dc:d5:2d:76:4b:f8:83:d7:6c:70:
15:7c:64:50:2c:3a:4c:0b:f0:b7:9e:d5:87:4f:3c:
09:c1:f9:84:da:ce:17:ba:2f:61:0b:54:2c:71:95:
46:b0:8b:af:0e:a4:88:15:7c:21:56:86:26:10:61:
4d:dc:47:11:33:cd:ab:39:5e:c3:64:42:ba:9e:0d:
7a:61:86:99:a9:38:5b:31:ee:0e:2a:c6:79:ff:02:
50:b1:32:8c:66:0e:32:c8:04:61:4d:c3:48:ef:45:
13:68:20:5c:9c:89:91:4b:2c:de:36:60:12:07:5d:
63:76:39:ce:19:8b:1a:e4:ba:7b:0b:55:b4:b0:6f:
df:1e:37:69:08:03:fc:db:1c:8a:60:9a:13:fa:d7:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D6:28:E8:CC:04:5B:2D:6F:A6:77:61:CC:00:94:37:4D:9E:AC:4A
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/PtYo6MwEWy1vpndhzACUN02erEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.87.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b4:85:23:3a:6a:a0:07:13:d7:e0:fd:98:84:6b:78:9a:b9:
73:0e:1f:3a:87:36:45:45:8d:82:55:de:cc:19:d1:c7:c5:83:
d4:18:88:e4:9d:70:3f:c7:5f:fd:c3:19:5d:93:81:82:33:87:
25:e8:33:a4:df:6a:54:9e:36:be:6a:fb:21:66:ac:df:f4:48:
69:bb:21:24:4a:d4:6c:eb:de:70:de:97:51:e3:1e:a7:08:88:
ec:0f:a1:f2:ce:d1:2e:7f:82:12:b5:97:2c:03:89:df:43:c9:
6d:ac:9c:f0:27:91:8c:fc:34:d1:2e:ad:fb:56:81:cd:10:33:
d0:49:20:5a:46:db:66:56:90:19:4d:96:a0:5c:ed:d4:8f:48:
1c:90:e1:8b:7f:47:b2:e5:53:46:d1:e7:f6:db:1e:2d:fb:63:
67:fa:42:4a:2b:81:31:be:78:8f:53:45:cb:2b:a5:4c:9d:75:
54:6d:45:b6:62:6e:fe:70:d2:10:65:49:7e:8a:4f:4c:7a:63:
9d:30:2c:a0:79:80:2b:d3:85:a6:78:23:de:20:24:1c:23:5e:
af:7d:b7:d0:56:f5:71:d8:e5:c4:ca:ad:f1:8a:7b:bc:7d:e8:
87:64:09:6a:da:b4:32:e8:1d:e4:df:8f:12:f8:61:10:16:95:
40:8b:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:54:23 2026 by rpki-client