This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/C29RUK-qTDoRIZIVb7crIuPreWM.roa
File: C29RUK-qTDoRIZIVb7crIuPreWM.roa (raw, json)
Hash identifier: mdSn+zkOr0EwMF5gIU0hQilaSvKGXBzAoemCMvqxqC4=
Subject key identifier: 0B:6F:51:50:AF:AA:4C:3A:11:21:92:15:6F:B7:2B:22:E3:EB:79:63
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 019B7EA6CF38BF66DEC9856649C34626F96D
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/C29RUK-qTDoRIZIVb7crIuPreWM.roa
Signing time: Fri 02 Jan 2026 12:20:19 +0000
ROA not before: Fri 02 Jan 2026 12:20:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 193.53.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:cf:38:bf:66:de:c9:85:66:49:c3:46:26:f9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jan 2 12:20:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b6f5150afaa4c3a112192156fb72b22e3eb7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:2a:d3:00:23:7e:94:51:1c:47:1b:00:9f:
42:85:2a:69:43:86:c4:51:46:14:4d:4b:c0:04:fc:
14:b5:3a:b3:4e:ab:9b:ea:b1:40:25:db:3e:14:52:
d4:14:5c:7a:24:27:60:e5:4b:a2:cf:9b:60:55:a6:
0d:24:e3:5b:52:c9:6a:ab:e5:95:68:b0:1b:35:19:
66:d1:d1:fe:a6:04:64:38:64:fd:bd:76:40:0c:7e:
99:36:dd:cf:d0:b7:31:44:6d:57:0c:37:c2:65:f6:
46:00:15:43:10:2a:9c:05:c7:f5:4a:74:60:94:05:
e0:b7:49:ec:e7:e5:49:4c:28:aa:90:08:98:5e:70:
55:fa:e9:26:b4:3a:bd:fc:2e:6c:17:80:af:54:96:
6a:18:5b:6b:11:91:bc:cc:46:8b:00:45:d6:e5:2e:
8d:50:36:9e:d7:40:98:6f:37:bd:68:27:83:ea:43:
5f:61:4e:95:3f:7d:14:71:32:d0:6a:f6:58:f5:9c:
08:2b:91:ab:74:49:85:db:12:39:21:1c:4f:20:06:
d2:ac:37:b3:ae:3d:ed:49:6e:bd:73:41:c8:5d:66:
d0:14:63:9f:92:f0:9f:c0:d4:f8:20:b9:5a:05:c5:
26:44:60:62:ac:5c:b5:58:c2:46:7d:e7:52:47:3e:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:51:50:AF:AA:4C:3A:11:21:92:15:6F:B7:2B:22:E3:EB:79:63
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/C29RUK-qTDoRIZIVb7crIuPreWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.81.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c1:c2:f5:f1:08:3b:db:19:07:67:8e:8b:3e:85:39:6d:5c:
7a:ee:e9:66:1a:69:13:1f:88:6d:57:73:82:2c:0f:85:e6:0a:
30:66:2f:b1:79:bf:d6:5e:1e:97:9c:87:44:69:77:a1:4b:56:
d1:32:1e:f9:d6:f0:59:11:0e:cd:1c:0d:75:9f:ce:20:85:18:
d8:c1:db:3b:89:f3:1e:9f:91:8f:c4:0b:f2:e3:f8:53:62:d7:
e3:02:91:bd:1b:af:8c:f0:7e:30:d0:3a:81:d4:61:eb:ca:69:
fd:4d:78:93:52:37:0c:d8:a6:1e:d1:78:d7:1b:0b:52:cc:39:
b2:ef:10:42:f3:48:be:a4:dc:bb:21:6f:e9:5b:e8:f1:74:f6:
87:26:a0:b5:e0:c4:9e:1f:fd:af:e1:d6:25:0c:84:ba:7b:26:
2f:a3:40:71:65:bd:b0:cb:32:38:67:67:11:41:64:74:52:8f:
88:74:52:cc:6d:ad:39:a1:cc:77:8d:a5:1d:19:22:bf:5c:cb:
65:e2:8c:8d:9c:92:a5:7b:76:b9:d3:cb:e6:01:d7:6b:e7:49:
2b:ab:0a:ce:33:57:d3:7f:40:e6:1a:2b:6c:ce:4b:0e:21:c4:
ec:b9:27:a4:79:54:f8:21:13:60:86:38:17:45:e1:c2:6a:c5:
9f:dc:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:41 2026 by rpki-client