This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pdAuWCg6TQgkV_DNEw347ffcuoI.roa
File: pdAuWCg6TQgkV_DNEw347ffcuoI.roa (raw, json)
Hash identifier: pl1f/C8mIihpD/JXuATZYRdSHQjZScm0eZRtZIVVq50=
Subject key identifier: A5:D0:2E:58:28:3A:4D:08:24:57:F0:CD:13:0D:F8:ED:F7:DC:BA:82
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7758FE79A8126CA8F955A50B25CB5CE8
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pdAuWCg6TQgkV_DNEw347ffcuoI.roa
Signing time: Thu 01 Jan 2026 02:17:59 +0000
ROA not before: Thu 01 Jan 2026 02:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199538
IP address blocks: 193.192.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:fe:79:a8:12:6c:a8:f9:55:a5:0b:25:cb:5c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5d02e58283a4d082457f0cd130df8edf7dcba82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:92:19:9c:28:4d:18:e3:a4:6b:14:e6:74:
3d:04:2d:24:61:bf:bd:e3:bd:5a:ff:49:55:e6:46:
51:6d:e5:49:ab:52:9e:9e:76:25:1c:cd:93:6f:5a:
21:8c:0c:33:01:e2:6e:31:4b:64:cb:e8:50:a8:02:
92:61:01:e3:6b:30:2b:88:f3:1a:31:48:56:30:7b:
19:c8:64:66:ce:ba:ba:7d:b3:cc:e7:9a:f9:7e:42:
1c:4d:6c:d2:f6:61:f1:92:30:12:f8:67:be:8b:4e:
42:dc:19:7e:ba:a9:85:62:09:81:8f:97:68:b2:b8:
aa:73:58:22:c8:aa:87:91:16:83:4f:c6:54:0f:b8:
a9:4a:e8:e9:c2:bc:46:32:cd:27:82:19:09:ad:91:
19:b3:af:11:a5:be:f5:27:20:31:04:d6:0e:4e:f9:
f4:03:cb:4a:84:99:5c:cf:d8:26:37:a2:51:51:00:
13:01:57:21:7d:5c:57:7d:db:37:9f:5c:bf:79:b7:
8c:91:77:f2:25:96:82:df:7e:ae:aa:9c:37:fb:ae:
17:03:6c:9b:00:88:b3:b4:6f:22:a0:ab:63:f3:f6:
dc:d9:a6:cd:d1:d8:33:62:23:37:b3:78:a5:4c:59:
b5:71:a7:45:dc:8c:b4:13:26:2a:f4:f7:a1:67:2c:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:2E:58:28:3A:4D:08:24:57:F0:CD:13:0D:F8:ED:F7:DC:BA:82
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pdAuWCg6TQgkV_DNEw347ffcuoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d0:fe:ad:ee:07:ec:8d:49:a9:c5:5d:6e:cd:14:1d:b1:8f:
94:f7:4f:ac:e8:40:2e:1b:b9:26:c7:d0:de:56:c3:a2:39:a1:
19:4f:2c:dd:aa:9e:ab:ab:b1:f2:aa:a5:3a:d0:d6:1f:99:df:
14:27:9c:77:13:84:56:4c:db:19:41:5e:d7:6f:54:62:67:b1:
bb:bf:8f:c2:48:b2:45:59:d7:bd:d5:b9:9f:4e:29:bc:6b:f7:
73:bc:eb:8e:35:68:aa:2d:91:77:e8:1c:e6:c8:51:9d:d6:a2:
3f:7d:bd:4f:a2:0c:53:79:e4:d3:64:22:19:69:18:41:62:e1:
65:cb:4e:d1:f3:80:04:47:95:33:5e:8b:cb:7b:fa:2f:fe:dd:
53:de:ed:27:4f:c2:b3:77:39:ec:bf:c2:e5:da:be:6f:b1:97:
fa:0e:60:d6:47:ce:8b:cb:7f:d5:2c:c6:ff:d7:6f:d1:14:0e:
47:75:89:25:db:c6:f3:ff:5c:5c:1b:79:e4:87:d0:32:92:06:
e5:55:84:e9:2a:d1:e8:cf:05:cd:b2:38:74:13:2d:27:c8:3c:
9c:56:de:e2:55:2d:c9:ac:83:fd:21:6f:6c:a0:cc:82:18:72:
cc:2a:5b:c0:28:ce:7b:40:d8:bc:67:62:b1:ab:a3:6d:d5:a0:
c4:ce:ea:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WP55qBJsqPlVpQsly1zoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWQwMmU1ODI4M2E0ZDA4MjQ1N2YwY2QxMzBkZjhlZGY3ZGNiYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7mSGZwoTRjjpGsU5nQ9BC0kYb+9
471a/0lV5kZRbeVJq1KennYlHM2Tb1ohjAwzAeJuMUtky+hQqAKSYQHjazAriPMa
MUhWMHsZyGRmzrq6fbPM55r5fkIcTWzS9mHxkjAS+Ge+i05C3Bl+uqmFYgmBj5do
sriqc1giyKqHkRaDT8ZUD7ipSujpwrxGMs0nghkJrZEZs68Rpb71JyAxBNYOTvn0
A8tKhJlcz9gmN6JRUQATAVchfVxXfds3n1y/ebeMkXfyJZaC336uqpw3+64XA2yb
AIiztG8ioKtj8/bc2abN0dgzYiM3s3ilTFm1cadF3Iy0EyYq9PehZyw0ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXQLlgoOk0IJFfwzRMN+O333LqCMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvcGRBdVdDZzZUUWdrVl9ETkV3MzQ3ZmZjdW9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcC4MA0G
CSqGSIb3DQEBCwUAA4IBAQCO0P6t7gfsjUmpxV1uzRQdsY+U90+s6EAuG7kmx9De
VsOiOaEZTyzdqp6rq7HyqqU60NYfmd8UJ5x3E4RWTNsZQV7Xb1RiZ7G7v4/CSLJF
Wde91bmfTim8a/dzvOuONWiqLZF36BzmyFGd1qI/fb1PogxTeeTTZCIZaRhBYuFl
y07R84AER5UzXovLe/ov/t1T3u0nT8Kzdznsv8Ll2r5vsZf6DmDWR86Ly3/VLMb/
12/RFA5HdYkl28bz/1xcG3nkh9AykgblVYTpKtHozwXNsjh0Ey0nyDycVt7iVS3J
rIP9IW9soMyCGHLMKlvAKM57QNi8Z2Kxq6Nt1aDEzupR
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:43 2026 by rpki-client