This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/K-Ukw9fZgRzZKfVIB8mhequSrWM.roa
File: K-Ukw9fZgRzZKfVIB8mhequSrWM.roa (raw, json)
Hash identifier: let9P0Y0+bLswRMrPXV5OghUnNmwIASxOD5f74emjEw=
Subject key identifier: 2B:E5:24:C3:D7:D9:81:1C:D9:29:F5:48:07:C9:A1:7A:AB:92:AD:63
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7758FD3E923DA2E4BCD47E9FC49434D1
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/K-Ukw9fZgRzZKfVIB8mhequSrWM.roa
Signing time: Thu 01 Jan 2026 02:17:59 +0000
ROA not before: Thu 01 Jan 2026 02:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198881
IP address blocks: 178.16.117.0/24 maxlen: 24
188.114.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:fd:3e:92:3d:a2:e4:bc:d4:7e:9f:c4:94:34:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2be524c3d7d9811cd929f54807c9a17aab92ad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:4f:63:14:eb:3d:7b:0a:59:90:48:ab:67:
7a:e9:76:dc:71:31:08:a6:66:62:ee:54:2f:05:6a:
2d:58:13:12:57:21:b5:a9:51:64:da:6c:d9:95:5d:
05:c3:bb:0d:3f:fe:61:30:d2:8c:5e:6b:44:bb:83:
3c:bb:4b:2c:89:40:26:f6:30:63:72:31:d6:4a:12:
12:87:ec:6f:6a:64:33:a9:be:42:eb:45:c6:cd:dd:
94:c6:55:75:6f:29:4d:cd:d3:a7:a4:16:ee:85:f6:
f3:06:b0:4d:1f:b5:65:14:4a:c3:3a:e4:09:ce:aa:
42:8a:66:cc:f2:88:d5:bc:c7:eb:42:a0:fa:0a:d3:
7d:d1:4f:e0:3c:f5:61:48:4f:ed:f1:02:7a:f3:40:
3f:88:81:24:5f:0b:0b:9c:e7:15:86:34:5b:f1:c4:
8e:3c:f6:0d:45:a1:9e:4f:3d:2b:1b:56:f8:39:e2:
ab:75:00:11:6a:60:9c:e7:c6:7d:9d:a8:46:c6:06:
b2:52:da:14:39:a7:54:8e:10:74:9c:6d:38:c8:72:
41:d3:c7:03:68:60:f5:36:f3:01:1b:8b:f6:55:92:
a0:53:81:86:71:f4:f2:72:da:a1:82:c9:27:b2:df:
90:6f:91:1e:98:98:c0:61:86:fc:27:32:bf:c9:d5:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:24:C3:D7:D9:81:1C:D9:29:F5:48:07:C9:A1:7A:AB:92:AD:63
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/K-Ukw9fZgRzZKfVIB8mhequSrWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.117.0/24
188.114.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:8b:f9:f0:8f:e8:38:0b:4e:39:20:5f:ba:93:7a:a9:fa:c4:
0b:b0:43:69:91:08:ae:d6:d5:09:d3:e8:17:f1:b7:44:09:45:
69:e4:fb:ba:b7:66:a2:7d:77:bd:9a:a2:f1:48:eb:17:5e:d7:
89:f2:16:9b:dc:a5:ec:55:a9:b9:88:a8:df:0e:47:65:04:89:
cb:e1:06:dc:0b:b5:ad:d8:51:83:dd:dd:e5:a7:f3:dc:62:a1:
f7:96:c7:7d:6a:28:9f:1a:c5:2e:86:63:5e:b8:40:96:fd:84:
87:3e:80:19:e7:4f:f6:92:c3:01:ac:f4:97:d5:ea:84:19:2a:
9f:f6:a5:b6:09:22:c5:f3:3d:04:f2:53:86:7a:8b:1d:40:2b:
46:b9:77:48:91:28:cf:f4:d0:b6:ad:5a:d3:16:0b:5c:65:5a:
ba:22:4c:2b:86:01:56:84:a8:7e:e4:6a:be:0b:2a:13:41:82:
a7:c1:c4:b1:e3:bb:79:5f:73:6f:09:20:55:e5:4f:23:95:43:
8e:50:34:7c:69:70:c9:67:32:e8:f6:bf:22:db:ef:45:c7:04:
3a:29:7d:36:74:31:27:9c:e6:90:8a:2c:fc:c3:40:aa:2f:d9:
51:b5:0d:65:78:35:65:a8:d0:09:b5:38:9c:51:de:89:70:b5:
a9:3e:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:03 2026 by rpki-client