This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa
File: v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa (raw, json)
Hash identifier: azp2mK2l0SmjEdVLQ9ZYdD4KO3+EjEhWMc0Gk6dWvew=
Subject key identifier: BF:56:76:3B:4B:ED:30:45:F5:F1:C9:59:EE:1F:CC:A3:4C:67:C7:BE
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019B7E3722631ED240EAD30C527EB6ABD34E
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa
Signing time: Fri 02 Jan 2026 10:18:21 +0000
ROA not before: Fri 02 Jan 2026 10:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208580
IP address blocks: 93.179.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:22:63:1e:d2:40:ea:d3:0c:52:7e:b6:ab:d3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 2 10:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf56763b4bed3045f5f1c959ee1fcca34c67c7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b0:44:9f:bd:13:0e:69:c8:b1:6c:19:5a:ea:
1e:ec:12:45:a9:28:45:38:31:3b:32:49:0a:c0:71:
39:73:11:17:eb:b5:db:19:b6:66:98:07:38:2d:a2:
7a:89:dc:34:99:c4:56:ef:3a:13:98:28:68:44:bb:
34:29:fe:31:86:10:eb:5a:f7:91:5f:29:23:ca:25:
de:80:4d:0b:8d:8b:76:8c:18:8a:0d:48:0b:c0:91:
6e:a4:c3:9f:eb:d1:fb:3b:0c:55:1a:82:c0:4d:63:
5c:32:e5:c8:22:1f:a6:88:40:d3:eb:bc:d2:9f:86:
6e:c8:5d:71:95:55:9e:1c:9f:e1:9c:91:3e:28:45:
1a:c0:34:06:d6:a9:81:7c:78:cf:be:0e:07:01:4a:
a7:63:ab:08:e5:84:84:c2:bc:64:81:cf:cb:13:c4:
d6:1e:87:db:49:13:47:07:70:df:9a:1d:87:e7:56:
84:fc:98:eb:fe:e1:dc:4e:32:dc:07:de:6b:98:55:
8e:de:9d:05:fe:30:ad:7e:4d:3c:76:32:0d:1c:b8:
5a:24:5b:9c:b2:ce:1c:f9:59:5c:d3:d0:24:6d:65:
d7:3d:de:57:e7:9e:3c:96:59:db:ee:fc:97:4e:94:
f2:e5:38:a8:7c:ca:29:1a:22:26:a1:11:a3:bb:6a:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:76:3B:4B:ED:30:45:F5:F1:C9:59:EE:1F:CC:A3:4C:67:C7:BE
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/v1Z2O0vtMEX18clZ7h_Mo0xnx74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ef:c1:73:c2:35:b3:85:1a:8a:d1:3e:7a:12:53:b5:75:1a:
a8:df:2d:30:c0:ad:9c:07:10:23:65:c8:43:15:b8:6b:6f:5e:
4e:b6:0f:2c:cb:e6:23:d3:7b:43:1f:71:3c:64:99:f1:af:ec:
8a:c1:27:1e:95:21:f0:6e:1c:7d:df:c7:17:ac:98:d7:b9:f3:
59:13:6f:4c:91:aa:63:b2:03:b2:c8:96:c4:02:97:82:99:b7:
40:20:a9:20:21:7f:f6:ce:ef:d8:b9:5c:46:10:78:dd:a4:83:
ba:f5:e9:fc:b8:ed:3a:be:7d:4a:19:23:e0:bb:cd:db:22:5f:
02:2a:e3:c8:82:ad:26:91:ed:73:75:6e:0f:be:1b:4e:d6:11:
4f:44:35:3c:46:14:ce:04:49:db:8f:df:6a:9f:dc:d6:11:f0:
e7:27:a3:af:c6:8a:3f:43:53:01:24:b7:07:a9:9f:a8:40:d3:
fd:20:49:7c:6c:ff:ad:89:0a:51:31:45:dc:75:fa:c7:d2:50:
1c:45:9a:a5:a5:9c:50:cc:d1:e2:67:49:3e:81:d7:38:bd:e1:
18:7b:7b:3d:c8:50:7f:05:e5:8d:94:93:91:42:c0:5f:2f:6a:
58:bf:9e:17:bd:b0:1d:9e:cc:ea:69:fd:80:40:66:71:82:41:
62:d9:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:02:13 2026 by rpki-client