This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa
File: 1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa (raw, json)
Hash identifier: kC5aY81+7wV5FaAuCbcDPO88uURjqA0og191H8ou4nk=
Subject key identifier: D6:92:26:E0:21:2E:FC:9E:86:3E:7D:53:53:2D:54:3E:12:8C:05:49
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 019B7CEE04767FE71C3824C73744B490F40B
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa
Signing time: Fri 02 Jan 2026 04:18:52 +0000
ROA not before: Fri 02 Jan 2026 04:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203310
IP address blocks: 185.51.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:04:76:7f:e7:1c:38:24:c7:37:44:b4:90:f4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Jan 2 04:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d69226e0212efc9e863e7d53532d543e128c0549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:8b:6d:8c:9b:70:f2:8e:46:41:95:f7:f9:
d5:e9:d3:f5:dd:9a:a8:43:f4:15:12:ec:4f:d4:14:
67:7c:d5:92:d7:f0:a8:fe:da:6c:2b:f8:1b:d1:e4:
79:49:55:4e:17:aa:e7:9d:19:a4:21:ca:e7:e8:b2:
ab:ee:03:a3:4c:20:b4:50:2e:4b:fa:eb:25:e0:43:
a3:6d:69:9e:78:a8:e6:52:d6:09:87:a1:9c:fc:91:
59:f8:fc:4b:93:8b:cc:da:81:24:29:52:23:86:60:
72:78:1c:4c:68:e8:35:19:c5:b3:12:d7:36:bd:1a:
57:c3:84:a4:a0:ee:7b:2b:76:fc:9b:8d:4f:2f:f4:
e8:42:74:6d:fc:01:1c:97:a6:28:a4:31:8d:91:6c:
4a:8d:0d:b9:27:94:6e:ed:64:1b:1a:43:cb:bf:e7:
ea:74:63:14:f0:92:5b:f5:22:70:5b:67:1e:6c:ff:
38:15:07:2d:1f:04:60:5d:4b:37:86:93:73:ec:21:
b4:b8:a2:09:8e:1f:b8:e2:72:b8:92:70:51:9b:ab:
b4:65:bc:17:47:e5:b5:14:11:e5:75:b4:3d:2a:a2:
bd:17:65:28:04:a7:07:12:b6:f8:53:83:6e:6a:c1:
5b:16:04:08:6b:06:3c:75:0f:42:26:1a:6f:a5:5e:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:26:E0:21:2E:FC:9E:86:3E:7D:53:53:2D:54:3E:12:8C:05:49
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c2:78:0a:ab:8a:17:34:a6:3c:dc:ff:fa:9c:56:82:93:41:
5d:24:d4:08:84:4d:e4:a9:c5:28:cc:61:0c:44:0a:ae:84:36:
5e:48:c9:10:1c:fd:1a:94:14:ba:11:dc:c6:23:66:45:5d:7e:
a3:03:30:d4:69:0e:84:52:b3:8b:f5:88:36:f5:61:9d:ba:d0:
85:79:77:0f:c0:39:f4:7b:ec:1b:31:fd:d5:ec:7c:fb:4c:e9:
5b:86:52:26:77:cf:3f:61:92:7d:08:7c:fe:6c:c3:b4:af:13:
3d:14:eb:b3:ec:6a:bd:86:b0:19:49:3d:06:e6:a2:90:ad:db:
ae:b4:38:b2:0a:82:dc:ac:cb:98:ce:7d:53:c3:d7:1e:62:37:
cd:75:3a:f5:d9:42:39:da:2d:fb:7a:7a:a1:82:85:13:ca:ec:
26:41:02:c6:55:0c:2a:17:52:3b:d7:f5:42:8b:35:87:f8:b1:
0f:a5:24:e2:6b:63:19:eb:04:9b:7a:bd:ef:d9:5e:3a:6a:dd:
4f:9a:a6:9b:f0:c6:16:71:65:54:df:6f:f8:04:b0:6f:de:16:
f6:26:b3:36:b9:15:82:35:96:27:8c:6f:b7:e8:e7:bb:f7:87:
1e:31:16:3f:a0:84:04:4e:33:23:83:65:cb:10:2d:99:4d:7d:
a1:e2:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:28:41 2026 by rpki-client