This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/MZXty06Zl0SzNmooJ_8YDA7IJCo.roa
File: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (raw, json)
Hash identifier: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=
Subject key identifier: 31:95:ED:CB:4E:99:97:44:B3:36:6A:28:27:FF:18:0C:0E:C8:24:2A
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019B7834660C3A0B0FB45AA024F45B87AE3C
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/MZXty06Zl0SzNmooJ_8YDA7IJCo.roa
Signing time: Thu 01 Jan 2026 06:17:38 +0000
ROA not before: Thu 01 Jan 2026 06:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 193.163.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:66:0c:3a:0b:0f:b4:5a:a0:24:f4:5b:87:ae:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Jan 1 06:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3195edcb4e999744b3366a2827ff180c0ec8242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:49:69:0d:81:7c:63:d4:61:67:66:5b:d1:
53:85:3d:4c:8d:62:89:4b:83:56:75:67:a4:46:cd:
6b:d2:fe:1b:69:c5:ff:11:ac:46:d6:66:75:c5:05:
ce:75:29:40:ac:00:60:4a:91:b2:be:17:1f:7d:15:
f9:76:58:c9:0d:bd:91:da:04:23:91:76:3c:de:7c:
0c:66:60:2a:59:d8:cc:08:58:16:f8:bc:a9:71:3f:
50:de:b2:d0:29:43:f9:bf:c1:e4:56:01:1d:d3:a6:
94:9d:ba:74:78:4f:ae:6f:e8:a3:e3:64:1f:d2:e4:
d7:75:f6:53:f5:ed:77:ac:46:91:24:71:c8:46:ff:
f6:43:2e:81:c7:12:1e:03:aa:89:0a:0c:10:95:fa:
01:d4:2e:f2:3c:99:1b:4d:48:46:54:5a:f0:4e:cf:
bb:68:b1:c4:75:cb:78:84:72:ed:63:c4:e1:8d:dd:
91:82:28:91:ff:2a:bc:0e:c7:f0:8b:73:bf:20:7a:
cd:da:d7:6b:99:47:e1:c8:71:88:20:f8:42:28:f5:
54:f3:08:a3:81:d8:8d:e9:12:18:47:1e:a5:72:1e:
02:cc:35:3a:bb:82:e9:09:6d:58:89:e0:d1:26:83:
83:d4:47:d9:e8:d4:bf:72:d8:32:91:c6:9c:21:88:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:95:ED:CB:4E:99:97:44:B3:36:6A:28:27:FF:18:0C:0E:C8:24:2A
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/MZXty06Zl0SzNmooJ_8YDA7IJCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.13.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8a:d4:71:66:51:24:33:ac:86:fd:ba:a5:8e:78:17:e9:ff:
d7:9c:d5:43:b4:27:0f:b0:78:7e:42:9a:f8:4c:af:ad:cf:dc:
fc:35:63:f4:f6:46:10:84:bf:73:d1:87:a7:9d:d4:68:15:a3:
4d:9b:2c:57:dd:c4:f1:04:51:f8:21:53:2d:3e:dd:bd:e8:dd:
1e:1d:e2:38:4b:a9:3e:ba:b4:d3:50:fe:67:87:6e:8f:8e:9e:
69:e5:52:f4:b2:e1:7e:35:74:b9:03:1a:ff:d6:e4:00:25:8e:
57:f9:7e:d6:16:a0:c8:1d:1d:b7:ff:f1:d9:f3:58:d0:a1:c9:
f4:07:1b:65:68:2e:00:a1:42:3c:57:75:c2:76:98:38:3c:35:
f9:b3:73:fb:74:ba:42:4a:41:b9:94:8b:d4:12:48:32:7c:35:
57:6e:48:9b:c5:03:37:06:22:9e:fe:cf:91:84:d9:8e:ec:92:
24:00:31:d2:45:9a:1d:67:55:55:71:8c:2e:a7:15:a0:13:a0:
b4:b8:a8:c7:ca:bf:2d:d2:a9:3f:47:12:93:f7:28:50:da:89:
0c:a5:2d:42:c7:da:0a:ae:67:89:a0:d1:34:d5:38:43:3d:2e:
82:8e:4c:6a:73:72:68:59:22:45:29:d7:79:a3:8e:ff:ab:4e:
5b:2e:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:41:30 2026 by rpki-client