This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/fUrxkEYdW5OmE14vGOgK34p9RZ0.roa
File: fUrxkEYdW5OmE14vGOgK34p9RZ0.roa (raw, json)
Hash identifier: LUt5gqaNctIf4jrEzo5ZDvVU398Bu9RtzObWbJM2fog=
Subject key identifier: 7D:4A:F1:90:46:1D:5B:93:A6:13:5E:2F:18:E8:0A:DF:8A:7D:45:9D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 019B7CEE2CA4CA8BB5CFBBA8061F4B5C2627
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/fUrxkEYdW5OmE14vGOgK34p9RZ0.roa
Signing time: Fri 02 Jan 2026 04:19:02 +0000
ROA not before: Fri 02 Jan 2026 04:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3303
IP address blocks: 193.200.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:2c:a4:ca:8b:b5:cf:bb:a8:06:1f:4b:5c:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Jan 2 04:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d4af190461d5b93a6135e2f18e80adf8a7d459d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:62:78:a9:2a:37:3b:e9:1e:ff:86:80:1f:
c9:53:d6:06:98:27:44:a4:5e:cc:cf:e2:b2:22:64:
a6:0b:29:f5:bb:5c:58:8d:d7:5c:a9:14:1a:ef:83:
5e:bb:1c:12:bc:89:04:3d:e4:c9:de:a4:d2:7c:a9:
24:6c:e5:39:32:48:48:50:cf:61:2a:c8:e6:52:33:
ae:8f:b0:6a:c3:50:56:78:2b:d9:e9:46:97:6f:48:
3a:69:20:05:33:c6:17:d4:17:20:91:3b:66:8f:e7:
a1:8b:5c:7e:c2:8d:ff:53:5d:f5:89:8b:94:18:1f:
05:b0:d0:06:da:d3:88:25:5f:a6:13:9b:99:e6:2c:
94:c3:62:6b:38:a3:c7:3e:2a:96:ed:96:d2:37:c8:
13:81:8f:77:f3:6b:17:74:3f:16:b0:91:be:eb:fe:
8d:f9:0f:87:ab:98:72:3d:cc:ff:7b:57:20:39:61:
f6:fe:0f:ba:b6:66:4f:eb:eb:17:3b:f6:36:90:ca:
83:95:a5:22:b6:fb:24:26:76:a1:47:a3:45:cf:33:
d6:e6:cc:da:bc:f6:23:0b:d2:e5:d5:25:d6:1d:14:
20:47:35:f8:35:ba:fc:9d:e2:7b:13:2e:9e:81:e4:
78:33:59:c7:dd:dd:ef:b1:77:ca:2c:42:af:e1:d5:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4A:F1:90:46:1D:5B:93:A6:13:5E:2F:18:E8:0A:DF:8A:7D:45:9D
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/fUrxkEYdW5OmE14vGOgK34p9RZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.5.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6b:32:c3:ff:75:15:f5:e6:85:a3:e3:78:17:9d:62:86:1d:
25:66:12:0b:8a:e3:a8:d7:25:e9:76:4f:b7:84:15:53:0c:01:
5c:a6:96:75:44:09:31:98:6f:55:d7:37:28:33:c5:4d:3c:69:
4d:78:fe:e0:32:77:44:0c:13:c6:f2:73:e3:c3:49:a2:a0:e7:
71:6f:20:8e:8a:ce:6f:28:27:e4:c9:63:e7:46:8c:19:5d:eb:
b2:5f:a7:fa:c2:a1:d5:6e:03:04:89:7f:7f:c6:f7:e5:f6:81:
7f:9e:49:39:bf:2b:cd:69:d9:52:ef:36:2c:6b:c7:64:0c:a9:
e3:75:1a:ee:c8:56:af:b6:cc:b1:17:b6:10:60:48:97:62:a6:
20:66:41:72:43:2f:c3:16:41:c1:35:da:ea:f9:65:e6:65:a5:
92:83:78:83:83:ef:5a:87:02:77:6d:1a:b5:96:3b:b9:d4:22:
0b:2c:57:52:14:93:ac:20:1e:83:fa:bf:7f:2d:9d:3f:06:1a:
ff:8b:c3:3f:5b:9a:3a:10:e8:51:79:ca:4d:38:f3:0a:0c:e0:
31:6c:91:df:5c:e3:e3:56:c3:e2:44:5c:ae:2d:84:80:34:4f:
be:12:3e:db:6e:ff:db:0d:1e:46:f0:ac:89:22:b5:72:6b:88:
d6:da:95:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:12 2026 by rpki-client