This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/SYrllEJSlKvgkdw578ZRNVSFNWE.roa
File: SYrllEJSlKvgkdw578ZRNVSFNWE.roa (raw, json)
Hash identifier: k4gJZrWaGXAakwoprVZK+70H4xXKeMYoqoBwpy13NQI=
Subject key identifier: 49:8A:E5:94:42:52:94:AB:E0:91:DC:39:EF:C6:51:35:54:85:35:61
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 019B78A2257686930ECAD89B29ED2BA672F6
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/SYrllEJSlKvgkdw578ZRNVSFNWE.roa
Signing time: Thu 01 Jan 2026 08:17:30 +0000
ROA not before: Thu 01 Jan 2026 08:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211903
IP address blocks: 45.94.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:25:76:86:93:0e:ca:d8:9b:29:ed:2b:a6:72:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jan 1 08:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=498ae594425294abe091dc39efc6513554853561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:f2:bc:fa:61:f8:1f:2b:d1:40:74:e6:c9:
7c:15:3c:eb:90:ff:42:f0:d9:d8:9d:8e:84:9e:7f:
a1:b6:0e:46:e8:36:4d:c9:ff:37:88:f2:23:97:97:
ef:2f:18:da:8a:3f:57:36:65:d9:12:a6:0b:0e:13:
4f:46:21:72:08:d0:74:42:00:a1:1f:48:7f:13:0f:
d5:24:14:86:bb:a2:cd:8d:7d:46:92:e3:6b:d1:6a:
ae:7c:48:e2:9b:8d:c5:ee:4f:53:9d:90:00:4b:a7:
b9:db:f9:f2:e7:fb:02:c4:40:da:d8:90:03:5d:6a:
07:d7:bb:12:77:96:e5:ec:e5:44:e0:c1:d8:ac:fb:
39:da:28:06:53:7f:32:78:96:d8:73:94:bf:22:dc:
4c:b7:56:e0:d1:2b:6f:de:91:3e:41:e2:7c:e2:fc:
c7:59:17:be:96:67:db:f2:44:df:d1:f6:83:7d:4f:
90:45:cf:27:9f:8c:04:ff:0c:0a:df:9b:96:ef:86:
6e:95:34:70:d5:8a:91:71:dc:4b:b5:b7:23:c1:a9:
ca:86:d4:1e:40:6b:4c:6a:9a:a3:3e:d1:06:4f:83:
fd:ae:7d:50:05:67:fb:33:82:a1:19:56:3c:3e:a8:
41:d7:c3:d5:51:60:28:ee:d2:35:ce:af:ec:e9:e8:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:E5:94:42:52:94:AB:E0:91:DC:39:EF:C6:51:35:54:85:35:61
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/SYrllEJSlKvgkdw578ZRNVSFNWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a4:62:8e:4f:52:9e:61:7a:96:ab:d2:47:c9:d1:19:df:31:
0d:47:43:ad:31:8b:ff:11:a2:7b:6e:c7:1b:33:2a:91:16:2a:
41:72:2d:7c:ca:c9:89:c8:01:3c:4e:95:a4:69:fe:86:01:63:
5e:05:be:2a:ba:b5:ff:3b:ec:9c:74:1b:32:20:a8:92:18:96:
91:3b:da:29:ae:6b:df:65:04:eb:fc:d4:fb:28:6b:d2:69:3c:
59:28:1a:87:81:23:de:61:7b:41:64:ec:d0:7c:76:10:65:80:
2b:66:8d:ca:a5:4b:ab:3c:ff:0b:6e:66:d8:d2:2c:da:d5:46:
8c:1b:75:0e:63:b5:82:4e:dc:43:2e:43:af:e2:7b:bc:9b:09:
67:1c:99:20:c4:9a:3e:01:e2:db:c8:68:74:ff:bf:10:8a:cc:
82:47:10:a1:cf:4c:7b:ca:f1:f6:58:f1:4a:e5:fe:e5:02:7d:
4b:35:a2:11:92:ff:36:77:46:fc:93:33:19:49:7d:5c:2c:d1:
9e:1a:9f:b0:8a:71:f3:c2:b5:d5:b7:6e:4a:f6:50:da:04:c4:
cd:8d:27:45:b6:a3:6c:cc:75:52:c8:3c:d7:26:a7:c4:8d:d1:
12:28:54:85:da:b2:be:a5:e3:26:29:e1:47:a3:67:1a:22:0d:
1a:e8:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:25 2026 by rpki-client