This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/cAg4nW6T1wQkJA5EumjHt5Qh-aw.roa
File: cAg4nW6T1wQkJA5EumjHt5Qh-aw.roa (raw, json)
Hash identifier: wNgufxAnRrwTTymUo0COT/O/AFvOeg2IfduBSOcAOZk=
Subject key identifier: 70:08:38:9D:6E:93:D7:04:24:24:0E:44:BA:68:C7:B7:94:21:F9:AC
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019B77C66BF9F98F52935EFE60F8648CDFFC
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/cAg4nW6T1wQkJA5EumjHt5Qh-aw.roa
Signing time: Thu 01 Jan 2026 04:17:31 +0000
ROA not before: Thu 01 Jan 2026 04:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 212.66.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:6b:f9:f9:8f:52:93:5e:fe:60:f8:64:8c:df:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jan 1 04:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7008389d6e93d70424240e44ba68c7b79421f9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:b3:da:2f:95:34:fb:6f:65:e1:45:dc:f7:
11:96:c8:a4:bb:cb:66:c8:47:0a:25:c3:d9:7c:c6:
82:b1:64:de:4e:66:b5:f2:82:8c:4d:d1:67:41:2d:
46:28:ec:ce:1f:45:a8:f1:72:89:b7:67:9a:6e:7e:
0b:63:4d:ed:9c:39:61:d6:a7:b6:6a:29:b8:91:50:
1e:4e:55:a4:99:58:a8:1e:8c:67:b7:41:6e:71:94:
c1:ba:79:7b:75:e7:07:a5:4b:53:2d:92:f5:7e:ce:
2f:37:8b:6f:fb:da:2e:31:2b:1e:ca:3a:58:dc:67:
21:5c:9e:f1:b6:6e:88:9b:27:8a:06:57:be:ff:c1:
37:c8:af:a2:1a:4f:8a:6a:62:b8:64:85:e6:b5:33:
5f:90:4d:b3:98:0c:e0:3c:87:72:d7:17:a1:99:38:
2a:f8:1d:0c:7b:5a:61:d0:85:ef:b6:83:64:99:8b:
02:62:62:95:99:c9:8b:79:a9:92:9e:10:03:11:ad:
01:35:a3:a0:da:e9:aa:71:6b:d0:69:0d:54:1e:24:
6c:1c:26:2b:4d:04:f7:39:19:c0:b5:79:03:73:10:
9e:70:4d:b7:46:a1:a2:54:37:53:a9:87:a6:e3:6c:
67:2b:ae:13:a7:94:56:fe:63:bc:d0:f8:31:85:15:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:38:9D:6E:93:D7:04:24:24:0E:44:BA:68:C7:B7:94:21:F9:AC
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/cAg4nW6T1wQkJA5EumjHt5Qh-aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b5:24:85:99:bd:a0:d2:a3:41:55:00:ee:89:cc:ac:12:d6:
4c:43:ec:12:ec:2c:ad:58:97:42:5b:af:7e:3e:39:78:d5:71:
e9:5e:83:f8:9a:e0:21:8e:a9:ce:a7:40:29:79:99:f0:70:77:
08:3b:fc:4a:2e:69:83:9b:a8:f6:37:7a:76:e5:d2:c6:4e:9b:
8d:3e:8c:9e:c9:25:75:3f:0f:fa:47:f6:4b:12:c5:8a:7f:97:
41:fe:54:f6:58:5d:5e:df:b4:d7:4e:07:ee:bb:14:6b:36:a0:
2e:7c:fa:29:c0:9a:11:9d:32:ad:4e:d8:f3:f5:b0:6e:0c:ba:
89:df:53:56:f5:a4:11:df:77:47:47:01:70:db:ef:98:1b:7c:
93:e7:b1:6b:ca:ad:63:32:55:cf:fb:0e:bf:58:1f:58:bb:19:
35:81:ae:1d:70:a6:72:02:da:77:4b:54:88:b4:6e:73:3f:68:
da:7d:20:de:b5:9f:87:e3:4c:f3:4f:4a:7f:99:9b:39:da:2b:
33:76:a3:e8:f3:ae:ca:de:18:4a:63:60:cb:d7:25:42:16:eb:
43:69:9d:bb:d4:45:3c:5d:49:ab:1b:97:c4:c9:08:24:ed:30:
27:1a:1a:f6:51:97:80:c6:e9:99:d7:50:9e:a1:5f:7e:dc:a4:
4a:37:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:17:52 2026 by rpki-client