This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/zkS0MtUwrQ_h652IdJT_LVppRJ4.roa
File: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (raw, json)
Hash identifier: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=
Subject key identifier: CE:44:B4:32:D5:30:AD:0F:E1:EB:9D:88:74:94:FF:2D:5A:69:44:9E
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019B7F857C4ADEBE1F0B230C622B386F2527
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/zkS0MtUwrQ_h652IdJT_LVppRJ4.roa
Signing time: Fri 02 Jan 2026 16:23:33 +0000
ROA not before: Fri 02 Jan 2026 16:23:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12350
IP address blocks: 193.247.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:7c:4a:de:be:1f:0b:23:0c:62:2b:38:6f:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jan 2 16:23:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce44b432d530ad0fe1eb9d887494ff2d5a69449e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:93:c3:bf:b3:70:7e:45:31:b2:83:f7:9b:80:
90:49:c7:07:f9:de:a2:c3:c8:73:ec:cc:6c:c6:df:
31:40:37:76:c1:ab:66:d6:d6:06:1a:62:fa:52:52:
c9:28:92:8f:b7:d8:70:01:1b:fc:00:7f:19:d4:9c:
a6:ab:a3:a0:17:dd:35:f7:52:da:f7:18:a3:e4:0c:
8e:f3:ae:b0:43:99:2b:d6:ca:49:0c:e5:9f:4a:c7:
3c:5b:96:5c:17:71:6a:e1:a4:f5:c0:b2:b6:10:ea:
de:9e:34:05:40:81:97:d5:63:aa:8d:fd:3e:a2:68:
70:59:d4:e8:5c:46:8c:6f:24:12:42:19:79:be:ec:
b6:c4:bc:40:ea:49:3d:dd:cd:ea:3e:06:4d:f3:48:
a3:a6:d4:f4:23:cc:72:9e:44:71:4c:d2:e1:bc:d1:
fc:3f:ad:84:2f:02:44:aa:6f:82:66:7e:48:03:3f:
06:ac:21:8c:37:d6:59:bb:ef:00:82:d5:e8:da:bf:
64:44:99:75:4d:97:51:3b:87:5e:10:88:ec:eb:46:
9e:6b:4c:1a:57:62:54:6a:ab:07:41:dc:20:de:bf:
09:01:17:c3:d2:8b:fc:d2:17:25:9c:0c:c6:73:61:
66:f9:8a:ed:46:ca:ea:bd:35:15:2b:4e:87:84:47:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:B4:32:D5:30:AD:0F:E1:EB:9D:88:74:94:FF:2D:5A:69:44:9E
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/zkS0MtUwrQ_h652IdJT_LVppRJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.66.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b8:aa:73:78:15:22:0d:d9:cd:ad:ed:f8:9f:65:e8:7f:73:
84:87:d1:b8:b9:ce:28:2a:a2:f7:aa:e0:de:3f:78:c9:46:aa:
88:1c:dc:23:23:0d:72:06:c0:69:29:54:05:9d:a2:3c:b0:ae:
8d:2d:22:a2:27:fc:7e:7d:2f:6b:ae:9e:bc:2c:24:36:fe:a4:
78:5c:c9:c4:85:21:67:8e:7f:40:ae:b2:4b:88:43:33:fb:8c:
55:56:ee:40:5c:ca:37:d4:20:48:eb:51:71:f2:63:3e:8f:ba:
dd:2b:c4:ae:4c:2f:c8:65:1a:64:89:bf:63:75:b0:24:e4:6b:
f8:d4:ea:d9:75:67:20:eb:7a:02:10:7a:12:7a:c4:63:98:4c:
06:5a:cc:75:b8:e4:56:15:d3:a4:46:aa:8d:a0:5e:1e:84:7d:
51:c5:27:af:57:57:5d:9b:c5:c3:c2:20:19:ff:25:e8:ef:5f:
33:f4:4f:ad:d1:0c:69:26:d3:11:59:c7:3a:a7:24:6f:58:75:
7a:3a:52:ad:c0:72:48:18:27:e0:3d:c3:4a:54:34:f1:f0:e7:
6b:70:28:4f:be:67:7f:08:23:32:d8:7d:16:37:71:f3:53:81:
ff:e9:5a:49:d7:8d:b7:3f:20:29:ff:57:9a:2b:e4:53:42:bf:
be:67:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:41:00 2026 by rpki-client