This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/yHWUmeMzyGZrJ1tbuLlTdARQBVM.roa
File: yHWUmeMzyGZrJ1tbuLlTdARQBVM.roa (raw, json)
Hash identifier: OtFX28r4iu73s34n8DPvcMtSjAQCfr4M7hCbMX4XwLI=
Subject key identifier: C8:75:94:99:E3:33:C8:66:6B:27:5B:5B:B8:B9:53:74:04:50:05:53
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 019A810C4A215B08B9B660B8F81FF647F580
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/yHWUmeMzyGZrJ1tbuLlTdARQBVM.roa
Signing time: Fri 14 Nov 2025 06:27:37 +0000
ROA not before: Fri 14 Nov 2025 06:27:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8308
IP address blocks: 194.92.0.0/16 maxlen: 16
194.92.32.0/24 maxlen: 24
194.92.33.0/24 maxlen: 24
194.92.34.0/24 maxlen: 24
194.92.35.0/24 maxlen: 24
194.92.36.0/24 maxlen: 24
194.92.37.0/24 maxlen: 24
194.92.38.0/24 maxlen: 24
194.92.39.0/24 maxlen: 24
194.92.40.0/24 maxlen: 24
194.92.41.0/24 maxlen: 24
194.92.42.0/24 maxlen: 24
194.92.43.0/24 maxlen: 24
194.92.44.0/24 maxlen: 24
194.92.45.0/24 maxlen: 24
194.92.46.0/24 maxlen: 24
194.92.47.0/24 maxlen: 24
194.92.48.0/24 maxlen: 24
194.92.49.0/24 maxlen: 24
194.92.50.0/24 maxlen: 24
194.92.51.0/24 maxlen: 24
194.92.52.0/24 maxlen: 24
194.92.53.0/24 maxlen: 24
194.92.54.0/24 maxlen: 24
194.92.55.0/24 maxlen: 24
194.92.56.0/24 maxlen: 24
194.92.57.0/24 maxlen: 24
194.92.58.0/24 maxlen: 24
194.92.59.0/24 maxlen: 24
194.92.60.0/24 maxlen: 24
194.92.61.0/24 maxlen: 24
194.92.62.0/24 maxlen: 24
194.92.63.0/24 maxlen: 24
194.92.77.0/24 maxlen: 24
2a0a:3a40::/32 maxlen: 32
2a0a:3a40:1004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:81:0c:4a:21:5b:08:b9:b6:60:b8:f8:1f:f6:47:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Nov 14 06:27:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8759499e333c8666b275b5bb8b9537404500553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:a6:64:c6:e5:ae:e4:98:eb:7b:9e:fd:8d:
38:a7:6e:95:d1:e2:58:ad:b8:2d:86:0c:3b:95:2f:
30:4a:ba:e7:3f:7f:ab:86:84:a0:b5:21:76:84:71:
09:12:6a:b7:3a:f2:2c:66:ba:c3:84:a4:07:d4:d5:
56:82:60:2a:c6:61:6f:97:0b:75:40:fa:cd:63:74:
e3:f4:62:ab:ad:99:a1:7d:68:e0:a3:13:80:f6:a4:
85:d3:eb:5b:5d:61:63:b4:95:6f:a0:ca:fb:05:ee:
9c:fc:01:a4:ed:f1:64:6e:ca:df:b7:77:f6:5c:e8:
9c:55:2d:77:69:ae:5e:02:dc:88:10:af:b1:06:e4:
00:b6:ca:4d:7d:b8:a6:16:e8:8c:06:77:e0:d8:c4:
19:db:5d:f6:57:ae:98:3c:74:13:f6:c0:ad:69:fb:
48:fb:82:8d:f4:ea:88:9e:f0:3a:2c:97:8b:76:1a:
76:31:e9:cf:d8:84:71:09:0b:58:b8:dd:62:bb:af:
fb:e3:d1:99:57:27:7a:56:dd:5c:a5:60:59:e0:e6:
77:bb:e0:31:dd:fa:a2:74:88:92:b3:59:25:85:46:
f8:06:f0:bc:09:58:a7:e9:9d:60:35:d2:fb:8b:5e:
8f:34:98:90:f1:d8:86:0d:3a:a5:d5:8c:c9:5a:b4:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:94:99:E3:33:C8:66:6B:27:5B:5B:B8:B9:53:74:04:50:05:53
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/yHWUmeMzyGZrJ1tbuLlTdARQBVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.0.0/16
IPv6:
2a0a:3a40::/32
Signature Algorithm: sha256WithRSAEncryption
b0:c7:ce:0d:a9:f1:ba:89:8f:91:4e:a1:6e:e8:59:15:92:ef:
42:a5:33:1c:05:af:bc:73:ce:49:65:d7:3b:30:18:c1:28:ef:
d9:67:ef:a1:5f:c7:91:23:b0:9f:4e:02:52:5e:af:10:b5:7d:
06:90:70:33:63:f5:4f:bc:26:b8:37:fd:84:e0:05:be:cf:36:
03:ba:43:82:d3:ec:3d:71:83:9c:4c:fd:d7:eb:d5:e4:48:7f:
f0:84:c6:c3:77:cf:1b:de:a5:97:7b:19:f9:48:76:cf:a0:ca:
7d:49:01:70:d3:84:50:83:94:5d:41:bb:25:89:b2:94:de:6a:
8f:aa:a3:3a:7b:65:ba:d4:e1:97:cd:36:f8:11:5b:74:43:37:
e5:fe:f1:22:2d:47:34:27:79:dc:11:47:5e:a2:58:7b:bf:19:
2f:e3:34:ec:70:0e:65:01:67:06:96:e1:d9:81:e3:48:e1:44:
27:f6:f8:61:20:7c:aa:5f:b1:fe:17:c4:78:aa:df:6d:15:03:
cd:44:c1:76:03:5f:bb:9a:a4:11:84:8c:35:4f:14:58:49:80:
8f:03:8b:6a:6f:dd:92:06:91:f1:2b:38:e5:fd:c8:d2:89:a2:
ad:05:92:ac:8b:b5:c7:5e:5f:8f:4e:5c:fc:f5:06:70:23:4d:
94:7a:7a:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:07:20 2025 by rpki-client