This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/uaMX8OCYbSxBlbpnUENrRiTwaY0.roa
File: uaMX8OCYbSxBlbpnUENrRiTwaY0.roa (raw, json)
Hash identifier: AZg0zm8r8ZxZT3h6KfhtY2c5WsXYcVXS9ecTWb+mM/M=
Subject key identifier: B9:A3:17:F0:E0:98:6D:2C:41:95:BA:67:50:43:6B:46:24:F0:69:8D
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019B7E38824623629CCB21C8E2A94939A8CA
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/uaMX8OCYbSxBlbpnUENrRiTwaY0.roa
Signing time: Fri 02 Jan 2026 10:19:51 +0000
ROA not before: Fri 02 Jan 2026 10:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15362
IP address blocks: 78.130.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:82:46:23:62:9c:cb:21:c8:e2:a9:49:39:a8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 10:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9a317f0e0986d2c4195ba6750436b4624f0698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:4c:c9:da:53:75:9a:b9:7e:4b:46:03:64:
c8:d4:77:aa:37:01:e1:de:3a:47:31:38:77:85:11:
80:64:57:5e:75:29:27:76:5b:80:01:22:47:b3:8c:
00:f5:6d:ce:d5:a5:1b:bb:69:9b:f1:71:0a:79:a0:
3e:d9:f3:44:46:c9:37:4f:ce:d3:73:ef:14:1f:ba:
a5:db:52:43:de:e7:5a:82:70:5c:0e:b2:c7:76:72:
b5:82:e9:a1:df:c9:83:69:3f:5f:70:78:5b:76:ea:
04:b1:10:06:9e:f8:a1:dd:74:e7:b5:54:9a:0b:02:
4f:25:40:00:52:c9:a4:26:e0:f6:a1:58:56:97:ea:
4e:3a:67:73:a0:6e:89:99:58:39:f4:d2:be:bd:2f:
ee:a7:3b:b6:20:20:24:f2:72:3f:6a:0a:9b:5d:ee:
9b:ff:93:78:ff:3d:eb:fb:e3:e1:12:81:42:9c:37:
ae:7e:f1:16:ec:a5:00:8f:3a:ed:7f:47:df:57:62:
55:1c:c2:30:eb:40:ba:86:be:16:17:7d:c8:38:ff:
84:5e:51:7f:4a:2c:62:b8:db:b7:83:dc:81:ec:a2:
2b:d2:f4:cb:69:d3:15:28:a1:02:ef:22:f3:51:5e:
5c:db:f8:b8:4b:8c:17:03:b9:85:f4:01:3c:f8:16:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:17:F0:E0:98:6D:2C:41:95:BA:67:50:43:6B:46:24:F0:69:8D
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/uaMX8OCYbSxBlbpnUENrRiTwaY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.156.0/24
Signature Algorithm: sha256WithRSAEncryption
87:09:14:eb:c6:1f:8f:e9:ef:b6:32:42:19:90:e0:d1:95:fd:
57:e2:ca:22:0c:7f:75:3b:b9:0e:f6:ea:19:54:e0:f6:ad:44:
d5:66:a9:a7:37:43:f1:51:f7:49:7c:67:26:7a:17:a1:64:b9:
cc:0c:1c:d1:08:9c:ec:85:b9:f1:4f:3b:db:ad:a2:96:63:3f:
ad:21:bc:7a:35:16:4e:61:f6:d9:78:59:1f:d0:6d:b7:a9:59:
81:64:ad:86:fe:1f:9c:76:a8:f2:c5:75:51:2a:d9:37:19:79:
28:9e:a1:54:85:d8:b2:86:e8:0a:a5:4f:8c:19:20:06:33:00:
4a:5c:d6:59:9a:9c:bd:08:e9:55:b4:95:fb:31:32:18:a8:68:
82:40:da:43:1b:f1:12:26:1f:58:09:1a:c2:86:8c:99:65:7c:
02:d3:20:8a:7a:88:d2:db:83:42:83:f3:a3:3b:3f:d8:29:41:
37:0e:0f:7d:86:9d:3d:d3:a2:7f:e7:71:00:f8:d8:2c:6c:8e:
5f:08:19:f0:49:64:7a:8c:f9:d8:a6:f6:2f:49:84:a1:5b:c6:
99:2d:61:f3:15:dd:26:17:6a:a4:33:cc:f3:d1:96:20:20:e8:
e9:04:44:ed:2c:1e:e2:06:0b:ba:24:f0:cc:25:92:d2:8b:5a:
29:ef:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:27 2026 by rpki-client