This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SYCE7XYwEf_mL0l3fhCAasBs6kk.roa
File: SYCE7XYwEf_mL0l3fhCAasBs6kk.roa (raw, json)
Hash identifier: 4UKEU0JzmhFb7rH7SWbRfJVDH6KCGeERF4ca0x91K2Q=
Subject key identifier: 49:80:84:ED:76:30:11:FF:E6:2F:49:77:7E:10:80:6A:C0:6C:EA:49
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019B7C8002D65EA2E541A9DF48720D532F68
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SYCE7XYwEf_mL0l3fhCAasBs6kk.roa
Signing time: Fri 02 Jan 2026 02:18:42 +0000
ROA not before: Fri 02 Jan 2026 02:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5377
IP address blocks: 193.252.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:02:d6:5e:a2:e5:41:a9:df:48:72:0d:53:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 2 02:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=498084ed763011ffe62f49777e10806ac06cea49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:93:c1:f1:45:91:b2:09:1f:df:cb:45:1b:
82:bd:85:5b:ad:ae:4c:7e:68:5f:4e:15:29:3d:15:
17:da:7f:de:d0:1f:bc:0c:bb:ec:f9:3b:35:d5:31:
b1:e7:34:6e:02:17:4a:7d:a4:1d:2a:e8:8b:fd:0f:
a9:6b:80:ba:80:63:e2:7c:4e:8e:6d:99:10:39:ed:
14:d0:fc:2e:a3:09:04:67:f1:be:33:d0:32:38:fc:
2d:b3:c7:97:5b:a6:8e:81:a2:3c:c3:fe:c6:2b:19:
66:d8:7d:d9:b6:aa:d5:ee:38:b1:0e:15:35:13:21:
d9:89:9a:b8:e4:a0:25:70:70:f2:20:1d:8b:b3:ef:
22:d0:1d:10:dc:5d:f3:10:e5:68:16:0b:55:f5:78:
dc:46:70:43:f1:a7:59:69:39:e0:95:4b:b7:81:f0:
3d:7f:29:7d:0d:a6:d9:b2:7b:2f:06:73:21:41:d6:
04:95:8f:2c:64:23:55:97:37:9a:c8:cf:52:5c:7d:
85:7b:b7:91:57:fa:0c:30:81:9a:aa:cb:96:92:59:
5c:38:a8:3f:c5:36:7c:9a:48:0e:37:2c:a8:0c:07:
c7:88:fa:f9:3f:c5:2f:d1:fa:83:58:2f:72:14:88:
da:f9:cb:99:86:0b:df:e9:a0:2b:8f:05:50:11:85:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:84:ED:76:30:11:FF:E6:2F:49:77:7E:10:80:6A:C0:6C:EA:49
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SYCE7XYwEf_mL0l3fhCAasBs6kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.252.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:95:23:ca:1a:8e:7a:0d:b4:72:9f:bc:da:e5:d2:0d:9b:83:
97:dd:e7:de:19:bc:00:99:5a:41:d6:36:bd:55:04:98:8a:33:
66:c2:16:d8:68:87:38:a1:30:89:a1:cb:09:69:a1:31:29:f0:
bb:a7:bb:74:06:3d:1e:bf:45:1d:39:97:06:48:38:f3:ce:89:
26:50:60:8c:38:2e:3e:8b:c7:fb:30:a3:a7:78:37:f6:75:15:
81:3f:44:7c:91:e5:13:bf:25:5e:a7:5c:08:b1:78:35:3b:10:
1c:bd:84:c0:87:74:d3:79:b9:c6:c7:bd:a8:39:e3:1f:c7:00:
e9:d9:3d:25:a0:9e:4c:97:e8:c3:2a:2c:98:08:46:ad:27:70:
64:22:66:6e:a9:39:bc:03:34:35:0a:68:1e:d2:2a:42:79:e5:
01:41:16:01:b6:65:6a:53:30:20:c6:fe:ee:96:72:47:62:38:
95:d1:ef:4f:dc:b4:65:6c:38:09:0b:ba:2c:51:3e:46:3b:75:
90:91:dd:fe:28:cb:d5:e5:48:3b:92:3c:76:c8:19:73:1b:9f:
5a:b0:94:a3:79:eb:b2:51:55:38:8e:6b:eb:c1:6a:ba:0f:f7:
63:90:3e:06:6d:fd:d7:82:a7:4e:15:2f:95:db:93:db:6d:a2:
76:1d:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:22 2026 by rpki-client