This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ztVjJUiUV1rDC2jieY_0fSkWKqc.roa
File: ztVjJUiUV1rDC2jieY_0fSkWKqc.roa (raw, json)
Hash identifier: E90uqL2/PKft67i6lux5huLN0HrPAucj9w5VzeHEJuI=
Subject key identifier: CE:D5:63:25:48:94:57:5A:C3:0B:68:E2:79:8F:F4:7D:29:16:2A:A7
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 019B77596CCF5A278C63D5B1C15144F310AE
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ztVjJUiUV1rDC2jieY_0fSkWKqc.roa
Signing time: Thu 01 Jan 2026 02:18:27 +0000
ROA not before: Thu 01 Jan 2026 02:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202298
IP address blocks: 195.242.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:6c:cf:5a:27:8c:63:d5:b1:c1:51:44:f3:10:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: Jan 1 02:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ced563254894575ac30b68e2798ff47d29162aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:52:ab:ab:74:dd:b5:74:f6:20:ed:28:75:
d2:87:6c:59:25:e6:eb:73:11:6b:79:0b:b2:ed:44:
bb:33:5f:05:3c:df:e1:48:e5:e4:98:bb:34:c1:51:
dc:05:0e:e8:66:4d:9b:04:8b:b1:41:51:e6:62:77:
1d:d0:cc:bb:7f:0e:a1:b2:42:b2:96:2e:fc:39:c3:
53:83:a4:78:3c:e3:67:14:0d:ac:e1:c9:2c:fd:6b:
e3:48:c7:f8:11:42:ea:25:95:9a:e5:43:6b:e1:0f:
68:f0:89:d3:e2:47:bf:9e:6c:1c:65:94:ab:9c:e6:
bc:29:03:99:1e:c8:54:f6:3f:38:b0:db:fd:82:f4:
94:cc:c5:3c:41:18:0c:85:11:89:21:16:dd:18:38:
52:2b:3e:5b:0e:53:7e:b1:26:e1:b1:33:4e:bd:72:
dc:6d:a2:bd:eb:fc:5b:e0:c2:3e:16:26:d5:70:a4:
fc:d2:d8:8e:8c:21:87:d1:b4:07:02:07:9d:6c:b0:
b4:7e:e7:ba:4a:3b:50:64:fa:5b:75:1f:84:e7:c5:
37:dd:ff:bd:db:48:73:21:53:3e:ad:7d:c8:8d:bc:
c9:08:2b:dc:41:18:3d:7e:61:2e:38:9f:05:4d:27:
09:4f:c2:77:14:e1:2d:35:22:4f:09:53:1b:28:34:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:63:25:48:94:57:5A:C3:0B:68:E2:79:8F:F4:7D:29:16:2A:A7
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/ztVjJUiUV1rDC2jieY_0fSkWKqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c1:23:e9:b7:ff:47:40:62:83:78:cd:06:a2:70:14:b6:10:
c4:5a:be:40:ca:d9:78:1a:ca:0b:69:a3:3b:21:cd:19:53:f6:
17:c3:73:d3:ad:21:ca:d5:f3:4d:19:0d:70:1b:d2:65:a2:4a:
52:d7:37:80:1e:51:c8:f0:b9:b3:cf:57:51:65:60:dd:5f:9a:
6e:6c:4e:8e:24:ed:4e:83:28:5a:29:2e:1c:27:63:ba:bd:75:
4c:7b:aa:b2:3d:ee:83:f5:35:52:c4:84:06:e0:f6:5a:14:c7:
2b:01:71:39:11:a2:49:3d:8c:35:b8:27:a9:13:5b:00:05:7f:
cf:70:89:e3:8a:55:43:65:fc:32:66:de:ff:cb:00:9c:f5:76:
8f:ee:12:88:5d:ac:dd:a6:5a:59:d1:0e:dd:ab:a2:79:ce:66:
b9:2b:7e:28:03:a7:e1:dd:82:76:4e:43:a2:a2:f8:d3:43:ab:
86:4a:fe:00:96:89:ee:92:de:9d:05:86:0e:fe:ff:6e:93:d6:
27:25:f5:d0:73:11:bd:bd:c7:db:fc:a8:94:3a:80:ae:dd:fd:
c6:71:75:2d:95:00:38:c0:41:7a:0f:85:63:1b:32:a9:9a:34:
ae:1d:b8:2a:46:31:e1:1a:62:88:35:d3:4a:77:a2:a0:32:c6:
fd:28:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:32:58 2026 by rpki-client