This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/3eljxNVJVZAst96YnbvE652QheI.roa
File: 3eljxNVJVZAst96YnbvE652QheI.roa (raw, json)
Hash identifier: 945B3Tb82Y1r4mEfNvlyjYkVtkNkGVILFWSmWev6li0=
Subject key identifier: DD:E9:63:C4:D5:49:55:90:2C:B7:DE:98:9D:BB:C4:EB:9D:90:85:E2
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 019B329870FB537588C594D2A881BE066114
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/3eljxNVJVZAst96YnbvE652QheI.roa
Signing time: Thu 18 Dec 2025 17:53:29 +0000
ROA not before: Thu 18 Dec 2025 17:53:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50557
IP address blocks: 193.105.110.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:32:98:70:fb:53:75:88:c5:94:d2:a8:81:be:06:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Dec 18 17:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dde963c4d54955902cb7de989dbbc4eb9d9085e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:0f:9c:d2:09:08:c8:6e:6e:a5:b9:6a:3d:
07:88:11:7c:55:d1:cf:5e:79:94:56:df:a4:13:1c:
92:1b:4f:fd:47:ac:cf:2b:97:82:04:5b:0e:37:33:
e3:2f:2c:68:ac:57:3b:44:6e:26:91:5b:64:18:3c:
7e:4c:a5:be:b3:13:b3:4e:b2:2e:5a:70:00:04:af:
b2:1a:fd:93:f5:53:b4:17:7a:01:51:79:b5:47:66:
f7:13:3b:9f:bb:ce:cd:d5:2e:d6:16:89:a7:38:d6:
33:60:f9:e1:9b:1e:29:6f:a1:fd:7f:db:91:25:23:
df:cc:32:bf:6e:58:19:6b:53:d8:b3:77:d5:f4:a2:
9e:c4:ad:5a:ed:69:e4:8b:d5:1b:2f:82:af:71:b6:
ed:75:28:fb:70:a6:5f:76:42:e3:37:33:ef:cc:6b:
89:b3:a9:a2:47:c6:a2:2a:d0:8a:8e:83:da:78:02:
f5:0a:0c:26:60:af:1b:90:c9:39:c3:15:8c:52:11:
d9:f9:16:2c:2e:6a:00:25:87:5f:34:10:3f:f3:fb:
6f:c5:cb:cb:52:c9:9d:7c:b5:f1:b3:f7:ce:7e:dd:
f7:6a:c4:6c:84:fd:7c:c8:de:04:e1:8e:f9:df:07:
c5:eb:1a:e7:55:6d:54:49:71:14:25:e2:3a:e9:5a:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E9:63:C4:D5:49:55:90:2C:B7:DE:98:9D:BB:C4:EB:9D:90:85:E2
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/3eljxNVJVZAst96YnbvE652QheI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
72:68:9d:14:9e:65:70:9f:5e:0a:6c:09:55:7d:e4:43:57:ca:
a0:9d:7a:6c:15:b4:db:a3:38:14:88:97:54:27:42:c0:bc:b6:
06:ff:fe:4d:41:a5:61:47:95:b7:1c:93:b3:ae:e5:55:35:44:
58:95:3b:37:77:63:87:51:47:4c:dc:b9:5b:42:7d:e5:ef:8a:
ce:ca:fb:8f:84:6d:44:9a:40:39:5f:63:4a:1a:11:53:fd:cb:
52:d2:83:fb:98:64:9a:7b:e1:1d:fb:94:4f:66:d6:cf:06:5d:
98:b6:f1:43:bb:f6:f9:1e:fc:49:94:82:c4:b1:12:53:ea:88:
7e:4c:dc:97:5a:2f:c7:9d:44:a9:44:70:a6:ee:bc:49:69:5c:
d7:21:2f:a6:a1:42:38:6a:be:7f:ab:f1:22:f9:0d:9f:e4:21:
3e:f4:03:1e:ac:eb:45:67:bb:77:b8:17:76:35:26:80:06:2e:
36:06:25:b8:61:33:6c:18:5e:a1:9f:13:e6:c8:82:a6:a6:d6:
00:f6:a3:70:1b:bd:90:cd:36:c0:c2:f2:89:0f:dd:94:6d:e0:
1b:c9:2c:4d:83:0d:c1:0b:3e:a0:d3:7f:3f:86:34:16:7d:ad:
1b:7b:ea:4c:6c:d1:a7:47:a2:80:2b:d3:2d:5f:82:82:87:f5:
bf:06:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:16:16 2025 by rpki-client