This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa
File: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (raw, json)
Hash identifier: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=
Subject key identifier: 08:2E:29:E8:9D:7C:C7:8E:0E:AA:92:74:56:CA:A1:CB:BD:A6:E9:38
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019B7BA39C93B17854C3B0BC3C2C1CA054E4
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa
Signing time: Thu 01 Jan 2026 22:17:58 +0000
ROA not before: Thu 01 Jan 2026 22:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59708
IP address blocks: 80.253.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:9c:93:b1:78:54:c3:b0:bc:3c:2c:1c:a0:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 1 22:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=082e29e89d7cc78e0eaa927456caa1cbbda6e938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:22:a9:56:68:ea:78:66:9c:c6:05:99:b7:7c:
25:c1:3e:b7:b1:38:2b:21:29:9e:1e:c7:10:de:90:
46:31:eb:e6:26:e7:fc:c5:f5:46:18:9e:54:64:91:
e3:4c:9f:d6:6e:d4:79:51:2c:59:87:3e:b1:79:fe:
9d:e7:dc:22:42:83:db:3d:ba:3c:75:a2:e6:c4:6e:
97:a8:64:7b:15:4e:82:4c:75:c5:28:75:5f:09:e7:
42:7c:1f:23:93:d6:63:b6:ba:82:de:1f:29:82:4e:
f2:a2:bc:7e:f9:4d:15:b2:5a:9c:f3:82:58:e8:03:
67:9d:75:f1:6f:af:78:e9:59:9d:67:18:08:4d:c0:
6d:d7:a2:8e:21:06:75:d4:46:76:12:93:36:2a:a1:
7f:8a:6e:4e:05:b3:b1:c4:9f:ad:4b:a1:51:57:12:
fd:a4:36:75:d2:67:c3:8b:fb:84:2d:e2:31:df:64:
bd:4f:21:50:22:2d:c8:11:99:b8:38:a2:f1:e6:84:
02:45:aa:7f:91:d0:9f:44:c4:e2:42:01:2a:5b:14:
6e:f5:2d:1b:11:03:b0:3c:f3:1c:f3:e0:14:7d:78:
87:50:1b:80:75:ed:29:5a:8c:da:06:5e:b8:41:5a:
5d:14:be:93:00:f6:20:81:2d:5c:2a:81:c3:60:8b:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:29:E8:9D:7C:C7:8E:0E:AA:92:74:56:CA:A1:CB:BD:A6:E9:38
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2d:60:9f:22:90:32:ef:9f:50:72:f6:12:10:8c:ab:e0:3b:
24:de:4f:58:f2:9a:f0:a9:ff:a4:7f:99:8d:1f:59:5c:d3:9b:
91:25:22:b6:1b:60:ba:c0:d1:c7:d4:d1:cc:d1:23:f4:46:ee:
4f:28:bf:8a:d1:8a:a2:36:7c:e6:6e:60:61:b8:86:04:5c:d6:
f1:e7:02:d8:28:bf:08:bd:84:08:c0:e8:b4:df:55:79:fc:f7:
82:d5:ff:15:83:65:bd:16:ff:eb:a1:46:1f:b6:0e:29:c0:64:
ef:b0:58:07:a3:18:84:19:a0:f5:7f:99:8e:23:11:de:a3:0f:
ea:b6:aa:e9:a9:43:6a:0b:48:b1:ae:58:33:02:a1:52:cc:34:
56:3a:5d:08:2a:0a:bc:04:12:da:83:cc:d2:82:54:5e:42:7c:
69:4b:0d:b8:de:4e:40:5a:bc:48:07:9f:2d:07:19:5f:49:19:
97:2b:60:10:15:ac:35:27:6e:c6:91:e5:b5:6e:ff:28:ca:bc:
e3:a7:a7:84:24:8f:20:6c:a9:4e:f1:ee:8f:af:42:a9:b1:11:
01:5e:58:12:2e:d2:cd:ce:23:51:04:93:6f:53:02:da:c3:19:
f2:cb:4a:35:b9:6c:7a:9f:d1:24:ca:ec:28:17:e5:bb:33:a9:
ab:28:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:08:10 2026 by rpki-client