This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1sazUxLw95PThCuKe84tPBcPmd4.roa
File: 1sazUxLw95PThCuKe84tPBcPmd4.roa (raw, json)
Hash identifier: 59M+Gd6dzHOidzrwWYQvUfKASR/vHfSdAMHpEHrUuVU=
Subject key identifier: D6:C6:B3:53:12:F0:F7:93:D3:84:2B:8A:7B:CE:2D:3C:17:0F:99:DE
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B77591074F9D56B7B71850A5594EEBF66
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1sazUxLw95PThCuKe84tPBcPmd4.roa
Signing time: Thu 01 Jan 2026 02:18:04 +0000
ROA not before: Thu 01 Jan 2026 02:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208750
IP address blocks: 178.16.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:10:74:f9:d5:6b:7b:71:85:0a:55:94:ee:bf:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6c6b35312f0f793d3842b8a7bce2d3c170f99de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:9f:fb:38:dc:4a:07:10:97:79:34:e6:1c:
1a:68:f0:90:35:9f:0d:d7:d1:5d:49:d5:48:67:a2:
fd:54:6a:95:71:92:4d:de:41:06:40:c0:61:8b:49:
a1:e0:f2:c3:ca:a2:5f:7d:46:7c:37:cb:d0:0a:6b:
31:f9:e1:82:49:51:18:92:a5:c9:df:d8:d7:43:e9:
41:86:8d:f6:ba:3a:d3:e9:5d:5e:b9:86:4f:24:d3:
3b:4a:44:c6:f0:f6:a4:1b:71:7b:52:d0:ee:48:5f:
fb:83:f2:e8:93:ab:da:8c:9a:db:97:ea:37:59:b8:
6e:c3:82:be:03:01:33:80:44:b7:8f:a9:cb:3b:53:
84:a1:12:01:31:49:d1:83:d2:bf:53:8f:5f:8b:b1:
5a:2f:3d:c3:7b:24:4a:e6:e1:73:56:b4:23:a7:77:
7a:6e:d9:31:33:6d:2b:b0:bb:25:a3:b2:37:6c:e6:
ea:e6:53:c2:1e:22:aa:e3:da:32:08:f0:24:46:60:
3e:26:fd:c1:7c:54:76:f0:db:29:37:23:8a:5e:7e:
f5:7d:4c:7c:9e:4d:e7:d9:e8:23:31:96:7e:f4:9b:
5f:73:62:28:24:9e:cc:c0:3f:3c:b0:fb:9e:91:2c:
0d:d8:ca:5f:ae:5c:70:65:6b:f0:7a:5c:2e:44:ea:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:B3:53:12:F0:F7:93:D3:84:2B:8A:7B:CE:2D:3C:17:0F:99:DE
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1sazUxLw95PThCuKe84tPBcPmd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2f:04:e6:fc:7b:c4:50:f3:03:86:35:02:af:97:3b:91:16:
ee:e8:aa:fa:f2:65:da:0a:5b:d4:43:fc:10:42:fd:4e:e2:48:
3f:a1:dc:6a:9a:7f:8d:c9:ae:d5:e1:07:6f:31:73:51:34:df:
af:47:d2:e3:93:28:0b:da:be:a0:90:12:9e:24:3a:68:2f:dd:
c1:47:42:fd:96:85:31:c9:4e:63:79:ff:f0:09:d5:32:67:5e:
bd:fa:21:3f:6f:84:e7:99:aa:ba:4b:c3:2f:73:7f:7d:1c:3c:
ff:a4:d6:ac:7f:61:17:c1:5a:4a:68:05:8c:60:01:91:9c:6c:
c0:ff:af:01:1b:c1:55:eb:99:c1:c2:fb:ab:36:0b:7d:60:23:
3f:05:91:f6:e9:30:c2:6d:dd:c2:15:dc:9b:f6:ae:62:bf:35:
2d:ef:2a:bd:48:e5:7e:38:8a:15:12:d8:46:ae:45:d2:c4:c6:
4c:fa:d7:16:f3:dd:08:4f:f4:42:b6:07:17:e5:48:7e:de:89:
94:12:b9:4e:5c:32:c8:24:94:ab:53:22:b7:75:14:90:f6:46:
e4:95:04:76:4e:d9:e4:af:9e:b3:e4:90:6f:11:22:d1:97:65:
a9:3f:37:10:b7:b3:85:29:53:4a:12:42:b6:98:ee:00:b4:e8:
d8:1b:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:10 2026 by rpki-client