This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/UdpDaeZVys7LHpexLg2_ugrpKao.roa
File: UdpDaeZVys7LHpexLg2_ugrpKao.roa (raw, json)
Hash identifier: 4C4Vm/weE0RMdrsBZQ2+meAake0bVi8NxlHOyIu9Ojw=
Subject key identifier: 51:DA:43:69:E6:55:CA:CE:CB:1E:97:B1:2E:0D:BF:BA:0A:E9:29:AA
Certificate issuer: /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial: 019B7F155612A495565288999FF0F240CFD4
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/UdpDaeZVys7LHpexLg2_ugrpKao.roa
Signing time: Fri 02 Jan 2026 14:21:03 +0000
ROA not before: Fri 02 Jan 2026 14:21:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197997
IP address blocks: 194.0.32.0/24 maxlen: 24
2001:678:3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:56:12:a4:95:56:52:88:99:9f:f0:f2:40:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
Validity
Not Before: Jan 2 14:21:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51da4369e655cacecb1e97b12e0dbfba0ae929aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:7b:d8:e5:ec:a7:57:85:b4:cf:14:67:ec:
a1:97:8a:9f:d6:b6:ed:53:7a:db:62:e4:02:c2:4f:
61:c2:99:50:07:f3:aa:1b:fa:12:0d:fe:88:62:9e:
1f:c5:7a:de:10:a9:f1:5c:a7:13:13:b4:c6:35:1d:
b7:30:fd:af:dd:93:6a:0c:91:f8:19:69:6b:6c:23:
8e:88:21:02:47:19:b7:30:43:01:45:50:1f:22:80:
42:d7:12:c9:90:c3:6d:34:ec:11:e6:4c:25:1e:25:
e4:b1:52:da:1c:bc:2d:5b:43:13:d9:e9:de:41:ac:
f2:ef:2d:9c:07:89:00:42:3e:e4:23:2b:d0:da:35:
ef:b9:aa:1b:3f:e1:0b:ed:ad:67:41:ef:27:d2:7f:
6d:5f:9a:bf:2a:40:6b:cf:9f:1b:d0:e5:08:9e:90:
57:cf:8a:27:66:21:2d:1d:e7:6e:07:dd:1a:a6:cf:
5b:00:c6:b4:cf:a3:db:94:c3:4d:89:38:b7:e0:c7:
62:06:88:7c:0c:a1:cb:78:16:8f:eb:3b:22:7e:e8:
97:77:94:4d:36:19:5f:47:a2:e8:20:ef:71:46:e4:
2c:48:d2:38:03:0f:9f:29:e8:e4:1e:d6:a7:4d:1c:
34:cb:50:b5:b3:0f:fe:b2:e3:00:dc:60:4c:d9:3e:
f0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DA:43:69:E6:55:CA:CE:CB:1E:97:B1:2E:0D:BF:BA:0A:E9:29:AA
X509v3 Authority Key Identifier:
keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/UdpDaeZVys7LHpexLg2_ugrpKao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.32.0/24
IPv6:
2001:678:3c::/48
Signature Algorithm: sha256WithRSAEncryption
76:4d:50:05:1d:79:25:c6:33:a6:f1:2f:1f:2c:bb:ba:25:33:
7f:5d:de:f0:14:73:de:6b:5b:b9:89:e1:19:57:7c:31:c5:aa:
65:2e:10:af:47:7d:65:82:2d:b7:01:b0:9a:4a:fb:be:13:8d:
07:00:e2:a7:1c:87:d8:ea:2a:f2:9a:e6:c1:f0:01:61:28:78:
ee:9a:98:ec:a3:26:8d:2e:37:de:e2:e2:09:df:e7:b0:fd:a8:
59:f9:3f:50:df:5b:da:e8:e6:22:4a:f9:89:14:9a:88:c3:e9:
ca:6e:42:64:26:d4:b0:2c:62:60:25:b8:51:df:f3:e7:80:05:
d6:de:f3:5d:0a:b8:b4:f9:ba:f4:a9:14:89:88:d8:08:08:d5:
b4:02:62:d9:e7:2b:ef:f3:1b:96:bb:83:5b:c6:be:54:29:e6:
27:34:39:67:cc:dc:28:fd:f4:b9:2b:12:4f:e8:be:65:78:ad:
32:39:bf:33:39:c4:66:58:25:11:ad:56:fd:c5:6e:3e:6e:73:
0a:ad:60:86:f2:38:d8:da:08:44:3e:bc:86:c4:14:01:ee:ad:
94:b0:66:62:71:a2:75:7f:cf:0c:83:a8:9b:27:b0:a0:19:86:
0b:27:b1:5b:75:02:d1:16:24:18:e8:9b:c4:af:3c:5d:b9:c7:
5d:c5:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:38:54 2026 by rpki-client