This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa
File: RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa (raw, json)
Hash identifier: r3EeiiesKv5F1JB1yTDFm2/eqrLc37XLpiQOCBpKBec=
Subject key identifier: 46:F2:B3:FC:A6:06:E9:C3:01:BE:CC:BC:61:9D:8B:79:60:BE:26:A7
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 019B7C121BAC9CFE6537C64E8FA51C486A67
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa
Signing time: Fri 02 Jan 2026 00:18:40 +0000
ROA not before: Fri 02 Jan 2026 00:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9208
IP address blocks: 193.58.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:1b:ac:9c:fe:65:37:c6:4e:8f:a5:1c:48:6a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Jan 2 00:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46f2b3fca606e9c301beccbc619d8b7960be26a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:2f:9c:20:9e:4f:56:16:40:e5:b7:58:c2:
91:b8:7e:02:ab:00:a4:62:1f:aa:73:a3:ff:86:21:
0f:1b:3b:5d:f2:24:75:0a:77:d9:47:24:87:f3:94:
69:b6:2d:22:1e:15:70:91:17:29:47:1a:d2:8e:2f:
d6:fb:a8:db:e5:e1:8f:90:0e:f2:b5:dc:90:da:f0:
e4:71:fb:66:ee:47:29:18:8f:26:6d:1a:40:45:21:
ff:61:6e:77:28:3d:0a:9d:41:f9:95:42:83:d0:d0:
4a:5f:a4:d4:fa:8f:4a:38:f2:4a:95:e2:f1:74:37:
07:71:75:cd:3f:6b:90:e0:a4:a5:57:14:1d:d6:3d:
66:85:37:34:80:3f:50:ee:d5:eb:ab:8b:55:56:d4:
b5:f6:88:de:46:c3:5d:7c:a9:a2:f7:cd:b6:eb:9e:
b0:db:d1:ad:ca:46:c9:d4:c6:77:2e:52:56:04:70:
ba:9e:da:ad:5b:5f:a8:ad:36:58:2c:3a:e5:58:35:
b1:5d:20:45:62:83:93:65:62:42:e7:d1:89:00:3d:
04:29:8a:2d:92:e7:0d:49:55:68:ca:61:82:ae:6e:
e5:fb:ed:e1:4c:c5:b3:cb:c5:f6:14:a7:e9:21:3b:
6a:f8:55:14:ac:a7:b9:f5:2e:a7:b2:34:16:e1:41:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F2:B3:FC:A6:06:E9:C3:01:BE:CC:BC:61:9D:8B:79:60:BE:26:A7
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/RvKz_KYG6cMBvsy8YZ2LeWC-Jqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.48.0/20
Signature Algorithm: sha256WithRSAEncryption
cc:ff:c5:dd:3e:5b:de:b1:de:f2:f1:b1:04:c1:b0:13:be:41:
ab:65:ab:35:80:5e:07:38:ca:03:a4:20:26:56:f1:7e:ad:c3:
b6:23:72:3f:86:b4:b3:d1:01:d6:fc:9c:17:4e:5c:70:c7:7a:
2f:29:96:3c:cd:ea:94:a1:44:f1:8a:b5:15:d3:7f:dc:02:32:
8a:06:f3:bd:11:36:34:17:9f:dd:55:08:9e:33:11:ef:3b:12:
2f:03:1d:5c:cc:f6:f5:79:d7:3d:b2:76:b3:9c:5f:99:69:48:
2a:8e:0d:77:59:0c:b6:37:17:ae:e9:75:fa:1a:80:6d:f5:84:
b2:34:54:5c:0b:af:b3:12:66:c9:ee:18:a4:33:94:79:4f:05:
46:d3:94:4e:c4:41:79:9a:44:a5:79:f8:2d:98:18:e7:62:41:
ab:44:6a:d9:44:a6:b1:18:9c:c3:5d:25:b1:fe:7d:67:16:7a:
d7:b3:e5:0c:93:f7:60:ef:dc:f1:1d:56:4b:07:9f:76:1a:87:
21:64:81:7a:3c:b1:fd:48:0b:c1:f7:b5:5e:8e:48:44:09:72:
3d:2c:a9:1d:97:74:03:40:13:35:09:e7:17:46:71:d7:0b:c9:
f4:91:27:b0:32:6c:54:24:30:e2:21:b2:a0:07:39:55:da:3c:
58:63:50:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EhusnP5lN8ZOj6UcSGpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTdmZThkZDcyYzUwYzYyOGRlYTk3MzE1OGQwZjk0MjMy
NmRhOGYwHhcNMjYwMTAyMDAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmYyYjNmY2E2MDZlOWMzMDFiZWNjYmM2MTlkOGI3OTYwYmUyNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxMvnCCeT1YWQOW3WMKRuH4CqwCk
Yh+qc6P/hiEPGztd8iR1CnfZRySH85Rpti0iHhVwkRcpRxrSji/W+6jb5eGPkA7y
tdyQ2vDkcftm7kcpGI8mbRpARSH/YW53KD0KnUH5lUKD0NBKX6TU+o9KOPJKleLx
dDcHcXXNP2uQ4KSlVxQd1j1mhTc0gD9Q7tXrq4tVVtS19ojeRsNdfKmi9822656w
29GtykbJ1MZ3LlJWBHC6ntqtW1+orTZYLDrlWDWxXSBFYoOTZWJC59GJAD0EKYot
kucNSVVoymGCrm7l++3hTMWzy8X2FKfpITtq+FUUrKe59S6nsjQW4UGcvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbys/ymBunDAb7MvGGdi3lgvianMB8GA1UdIwQY
MBaAFIsX/o3XLFDGKN6pcxWND5QjJtqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUt
ZjViYWVhZWU4NjVhLzEvUnZLel9LWUc2Y01CdnN5OFlaMkxlV0MtSnFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yOGQzY2QtZDc5OS00M2Y2LTg3ZmUtZjViYWVhZWU4NjVh
LzEvaXhmLWpkY3NVTVlvM3FsekZZMFBsQ01tMm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwTowMA0G
CSqGSIb3DQEBCwUAA4IBAQDM/8XdPlvesd7y8bEEwbATvkGrZas1gF4HOMoDpCAm
VvF+rcO2I3I/hrSz0QHW/JwXTlxwx3ovKZY8zeqUoUTxirUV03/cAjKKBvO9ETY0
F5/dVQieMxHvOxIvAx1czPb1edc9snaznF+ZaUgqjg13WQy2Nxeu6XX6GoBt9YSy
NFRcC6+zEmbJ7hikM5R5TwVG05ROxEF5mkSlefgtmBjnYkGrRGrZRKaxGJzDXSWx
/n1nFnrXs+UMk/dg79zxHVZLB592GochZIF6PLH9SAvB97VejkhECXI9LKkdl3QD
QBM1CecXRnHXC8n0kSewMmxUJDDiIbKgBzlV2jxYY1Bp
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:38 2026 by rpki-client