This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ABisqKOWSDx_x9nsGDWuBer4JFk.roa
File: ABisqKOWSDx_x9nsGDWuBer4JFk.roa (raw, json)
Hash identifier: 0VrwWYNGrByRzHlb4tj+fBZu5yuhSkBrPuuGWNIBZy0=
Subject key identifier: 00:18:AC:A8:A3:96:48:3C:7F:C7:D9:EC:18:35:AE:05:EA:F8:24:59
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019B77C69089A59C9B38FBF5E7C269688039
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ABisqKOWSDx_x9nsGDWuBer4JFk.roa
Signing time: Thu 01 Jan 2026 04:17:40 +0000
ROA not before: Thu 01 Jan 2026 04:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200030
IP address blocks: 178.156.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:90:89:a5:9c:9b:38:fb:f5:e7:c2:69:68:80:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 04:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0018aca8a396483c7fc7d9ec1835ae05eaf82459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:8c:19:28:86:c2:b5:6b:f3:c3:dd:96:e0:
60:f8:46:02:9f:c5:19:26:e5:d5:a4:6f:24:93:f5:
1f:96:a9:71:9a:48:47:e5:a5:dc:e3:04:bc:e9:ab:
39:17:de:38:c6:4a:a7:9f:c8:84:bb:2d:b1:ec:5c:
cb:b0:34:ad:bb:e1:86:74:4c:f3:07:2f:f1:52:eb:
dc:84:8f:89:f8:00:d8:66:1d:e6:d0:d3:b1:34:6f:
f1:b5:04:8c:61:90:6c:d4:cc:41:d6:f9:22:0b:e5:
bd:17:91:bd:b5:08:cc:83:7f:bc:4b:29:6b:1f:29:
e5:c7:35:5f:77:12:72:8d:dc:33:03:39:66:70:64:
8d:34:fb:08:d6:ba:ae:37:59:be:34:8d:49:7a:f6:
b8:52:d0:f8:61:f0:d4:58:cc:69:30:0c:cb:7c:f7:
3f:b8:62:b2:6b:85:a3:c4:81:1a:88:df:db:95:10:
61:f0:e3:63:40:f0:fb:f7:00:2a:7f:db:75:34:77:
81:e6:26:e0:04:da:d0:70:87:72:46:83:47:26:97:
c5:b9:35:15:b9:56:d1:5f:38:3d:4b:fc:81:b5:75:
37:e7:88:d5:38:12:e1:85:15:e4:d5:73:3e:c7:33:
4a:17:f7:c1:26:d4:79:96:2c:1f:e4:a2:16:22:d3:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:AC:A8:A3:96:48:3C:7F:C7:D9:EC:18:35:AE:05:EA:F8:24:59
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ABisqKOWSDx_x9nsGDWuBer4JFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.156.38.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:68:68:ed:fa:e9:9a:1a:cd:fa:ed:69:04:f8:c3:7e:f5:62:
b2:3b:35:1c:b9:b1:24:ed:c2:59:0b:1c:d6:0c:37:d5:1a:a3:
a9:99:62:c8:27:14:bb:60:25:80:39:45:37:d0:95:8c:69:08:
d8:9e:bb:66:2c:94:93:78:0e:3e:c5:68:ab:1c:f9:00:9a:69:
88:4d:4a:5f:4d:2b:eb:57:d5:d4:f6:a5:9e:db:a1:7b:71:06:
59:47:2f:a6:0a:f0:ed:5c:27:a7:dc:02:b1:36:94:6c:9d:f9:
b5:87:32:96:ef:94:3a:e0:4e:70:73:a7:a6:8c:36:21:3f:46:
74:d8:90:63:ae:b5:ee:fd:dd:30:03:47:82:6d:f7:25:31:2a:
c1:33:ef:82:f2:a3:cb:8d:21:4d:38:42:b0:e4:ab:7a:1d:3c:
9d:4e:13:68:e4:5a:ad:83:21:41:da:df:7c:3f:4a:9f:9c:2d:
6f:1a:f4:5e:03:a9:bc:53:2b:b2:73:23:5d:cf:00:d1:3c:ad:
5b:95:ca:b3:7c:30:22:00:33:73:51:64:23:3c:44:81:92:62:
e3:bc:99:c7:50:c1:85:f9:bf:b9:9d:33:aa:30:d0:05:36:6b:
9c:a9:63:25:b3:53:02:28:f4:39:8b:a9:d8:eb:36:42:14:8a:
a0:61:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:43:07 2026 by rpki-client