This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CUoEuBmYZBuyqkAbQsd6NNwtX0I.roa
File: CUoEuBmYZBuyqkAbQsd6NNwtX0I.roa (raw, json)
Hash identifier: bcbEKN/aZESlRYCfRehjy/LHNujKoltNxGdr6bQJBgM=
Subject key identifier: 09:4A:04:B8:19:98:64:1B:B2:AA:40:1B:42:C7:7A:34:DC:2D:5F:42
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7758FF36C0037572232E9463322C5B6C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CUoEuBmYZBuyqkAbQsd6NNwtX0I.roa
Signing time: Thu 01 Jan 2026 02:17:59 +0000
ROA not before: Thu 01 Jan 2026 02:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199980
IP address blocks: 193.192.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:ff:36:c0:03:75:72:23:2e:94:63:32:2c:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=094a04b81998641bb2aa401b42c77a34dc2d5f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:f5:74:56:18:98:82:b5:59:f3:fc:0a:35:
73:7d:ac:b4:a8:18:ed:ad:3e:9e:1b:4e:57:e0:33:
02:49:48:c5:f8:d6:86:bc:ef:bc:6f:67:23:71:f1:
b9:dd:32:42:6d:0b:82:8e:fa:f9:5d:08:a9:d5:45:
e9:45:c1:15:89:05:0c:4e:b0:92:a6:7d:29:b6:e6:
cf:4d:f1:f7:ae:3d:95:26:38:1c:cf:f1:ee:32:77:
08:c8:b7:3a:fb:cb:5a:8b:7d:aa:a2:5f:fe:bb:2e:
38:c0:39:2d:f1:07:5d:53:b3:d4:bc:b1:c4:f9:26:
ec:b7:ca:0a:3b:e1:b2:03:27:33:7d:e2:5c:a2:e6:
cb:4e:e6:fa:49:06:72:96:14:2c:a4:44:c6:4e:96:
80:8e:74:c3:9d:cc:22:42:f5:80:b9:80:b4:92:60:
cd:31:44:bb:f3:32:d9:1f:36:80:5d:0a:e8:34:86:
c8:8d:b9:49:5e:e7:08:4e:a9:08:ad:96:1a:e0:81:
e1:cf:6f:1f:7c:0f:b2:4f:df:f7:33:cd:7d:5d:de:
a9:03:ee:61:8e:a8:e6:75:ee:55:36:0f:fe:65:66:
06:4b:78:76:72:42:8a:1e:47:26:b6:af:ee:3b:c7:
5a:ac:20:8f:6e:c4:df:01:d4:68:b1:23:71:dd:c1:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:04:B8:19:98:64:1B:B2:AA:40:1B:42:C7:7A:34:DC:2D:5F:42
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CUoEuBmYZBuyqkAbQsd6NNwtX0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:47:46:5e:08:c8:ea:d0:f4:f7:7e:e7:1c:34:43:f3:ac:e2:
41:9e:34:3c:21:aa:37:a6:7f:27:d7:49:b8:56:9e:67:e1:b8:
73:24:c9:6c:fe:ab:80:09:27:88:19:17:3a:c3:39:17:e2:66:
85:f5:7b:f7:a3:95:6d:bb:b3:16:03:97:9e:82:1c:ed:2b:63:
c8:6a:2b:87:e3:6c:1a:7c:99:bf:cb:5e:92:09:f0:a2:4b:00:
63:61:a3:c7:13:ed:ac:d9:ed:e5:12:73:14:96:f4:6b:3b:7b:
71:05:71:05:f5:e7:59:2b:13:1b:64:b3:75:90:c2:28:c1:3d:
d9:d1:13:dd:b8:dd:8d:7b:93:0f:8f:f0:5a:e7:f7:0e:d5:50:
53:56:6b:64:7d:9b:ef:bf:9c:8b:97:d1:38:82:50:7c:17:5f:
fd:84:95:94:db:d2:3d:c2:12:91:ca:be:aa:0a:22:d2:16:1f:
e4:9a:93:c3:b2:03:b5:51:00:ac:6b:ec:4c:0d:43:9f:47:89:
6b:8d:9c:b8:20:59:02:69:5b:97:b9:4e:cb:2e:01:5d:fd:02:
93:74:88:3d:a9:c1:e8:12:00:8a:cc:e7:41:37:a5:c6:c8:d7:
36:40:8c:77:76:43:cd:0b:46:9c:38:fe:13:9a:40:4c:22:ef:
76:7b:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:09 2026 by rpki-client