This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/02UbpjggiD2hCuBROuOMzSrBNes.roa
File: 02UbpjggiD2hCuBROuOMzSrBNes.roa (raw, json)
Hash identifier: oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=
Subject key identifier: D3:65:1B:A6:38:20:88:3D:A1:0A:E0:51:3A:E3:8C:CD:2A:C1:35:EB
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019B77C6CF1D7A6E798F42D59C27D4A3B866
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/02UbpjggiD2hCuBROuOMzSrBNes.roa
Signing time: Thu 01 Jan 2026 04:17:56 +0000
ROA not before: Thu 01 Jan 2026 04:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31027
IP address blocks: 193.41.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:cf:1d:7a:6e:79:8f:42:d5:9c:27:d4:a3:b8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Jan 1 04:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3651ba63820883da10ae0513ae38ccd2ac135eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:9b:13:68:ba:83:4e:1c:a6:9c:bb:b8:67:
35:f4:18:3c:2f:97:37:82:aa:c9:3f:ea:78:0f:ef:
e7:fb:de:bd:a5:bb:bf:10:34:26:da:dd:3a:53:ff:
cc:93:02:71:2d:10:f5:87:5b:7e:2b:42:8d:7a:38:
51:83:44:91:bf:57:5c:21:d4:c8:43:94:5a:41:f8:
f7:32:e5:41:96:ea:4a:6c:2f:c2:de:57:3c:58:e0:
7d:0d:7b:47:dd:9b:5f:28:75:8e:50:36:6f:97:84:
90:f4:21:94:4e:59:9f:93:4d:c7:df:71:0f:d8:b7:
b8:46:e5:3a:53:7d:c0:62:81:4a:cf:ce:98:f1:16:
64:6b:4b:3b:80:34:b7:5b:51:b2:aa:88:1f:53:01:
b4:f5:04:f7:a8:2d:2b:9f:33:1a:20:51:50:e1:0c:
4f:e0:59:13:6f:ff:50:d9:93:71:c4:cb:4a:0a:d1:
28:d4:fa:22:3c:86:08:21:f1:12:e9:18:00:4d:21:
a9:71:5f:17:0f:3f:83:80:14:4f:68:d5:b7:35:ae:
2d:b8:6d:52:62:99:1d:71:e5:a6:b1:e2:9a:bc:41:
06:6a:6d:b2:fd:69:13:9f:7d:82:f6:fb:51:e7:40:
f4:74:de:c5:30:38:91:8b:cd:f3:d2:f5:b6:4e:5b:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:1B:A6:38:20:88:3D:A1:0A:E0:51:3A:E3:8C:CD:2A:C1:35:EB
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/02UbpjggiD2hCuBROuOMzSrBNes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.156.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a5:7b:4d:61:a7:6a:9d:79:2c:b1:35:2f:d1:23:d2:71:73:
56:b1:19:5a:a9:88:ce:76:c1:70:bd:65:a4:83:72:4f:7b:f6:
1e:00:2a:8c:ea:cb:f5:83:ba:87:09:78:84:9e:24:a4:64:bb:
35:87:00:fb:f8:9e:b3:0c:f4:6b:59:29:b2:ab:95:d8:69:f8:
90:cf:e6:bb:f7:17:a2:c9:b7:a1:58:9f:eb:a0:d6:25:f8:0e:
a7:f5:f5:a0:ff:b7:0d:3d:b0:b1:e7:05:23:45:3e:b7:b8:0a:
ff:4f:bc:b9:25:93:5e:1b:e1:e3:c5:67:d2:a6:f2:af:ce:fa:
cb:85:3a:e4:13:bc:ef:d7:ac:9c:42:b8:f9:0d:9c:41:31:d9:
9d:e4:ec:6f:2d:ce:61:6b:e7:cc:bf:f1:ff:cb:9a:e9:c0:93:
f5:23:13:34:49:3f:5a:61:00:25:a2:3e:42:79:29:a6:96:02:
a1:09:db:8b:c3:df:fb:93:aa:2e:b8:f9:9a:9d:45:e2:97:e6:
6d:9d:fb:3c:fb:7a:97:f0:36:56:83:d4:ec:61:e5:44:fb:e6:
9b:1a:ad:7d:e8:84:a7:43:8d:8f:ec:b8:cc:b7:f4:f0:0e:97:
8a:03:99:cf:ba:f4:58:c9:90:2d:e2:4a:af:36:28:60:93:b1:
ff:a7:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:26:21 2026 by rpki-client