This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0KuAFDI1KLIuUulT3U0LXqFC7l0.roa
File: 0KuAFDI1KLIuUulT3U0LXqFC7l0.roa (raw, json)
Hash identifier: BMFA0Ej7RFBVxMF/qWj0ObEBSznzVBuO+sWtVY0DKPU=
Subject key identifier: D0:AB:80:14:32:35:28:B2:2E:52:E9:53:DD:4D:0B:5E:A1:42:EE:5D
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019B78345C142680CEDD9AB5D84A12EDBBFE
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0KuAFDI1KLIuUulT3U0LXqFC7l0.roa
Signing time: Thu 01 Jan 2026 06:17:35 +0000
ROA not before: Thu 01 Jan 2026 06:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213020
IP address blocks: 79.110.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:5c:14:26:80:ce:dd:9a:b5:d8:4a:12:ed:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 06:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0ab8014323528b22e52e953dd4d0b5ea142ee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:46:4f:26:ae:d8:04:c6:dd:fa:56:ac:f5:e0:
5b:76:da:37:cd:b4:bb:0f:3d:03:3b:07:86:b6:88:
05:32:bb:3a:cc:45:4e:11:12:fa:4c:32:64:a9:86:
a6:ce:f2:e0:9d:12:61:b2:23:23:df:e5:ec:92:ee:
25:b3:2f:68:be:38:f7:25:25:58:ba:cb:88:bf:1b:
0d:b1:bf:17:02:d0:58:04:0d:80:d7:22:07:0c:7a:
33:5d:96:87:e2:d9:ba:c3:ea:36:ba:71:04:4a:a5:
9f:e5:d5:f3:b7:f7:a0:20:52:cb:35:ce:d3:bd:ca:
4c:a1:f3:5c:db:dc:d4:98:63:32:95:43:f6:6c:05:
35:b2:eb:bc:bd:76:8d:71:f2:8f:8e:d2:f1:cc:46:
0d:d7:49:0d:f8:e7:a1:e3:9b:03:de:6f:0f:b3:f0:
47:d9:05:af:5a:05:d3:4b:11:02:0c:41:58:bc:38:
7a:ee:45:5e:62:af:a2:e5:63:22:80:5f:f7:dd:d3:
c7:c0:0e:e3:c4:f5:66:ac:4e:0d:04:f5:22:8c:4a:
d9:58:9e:61:69:b0:e0:a8:1e:18:fd:d2:b0:e5:23:
ba:ee:f6:f2:71:8e:c1:f1:7f:56:9e:e5:89:2d:e6:
bc:8e:4b:98:bb:ae:df:61:c3:97:75:c9:31:95:e3:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:80:14:32:35:28:B2:2E:52:E9:53:DD:4D:0B:5E:A1:42:EE:5D
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/0KuAFDI1KLIuUulT3U0LXqFC7l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:23:29:71:aa:87:a0:37:d6:c1:52:c0:a9:3c:6e:74:20:f9:
17:e1:e0:06:4c:5d:e0:98:2b:d5:70:53:81:f8:fa:c0:5b:67:
94:41:e1:01:db:64:80:b5:dc:d3:ff:04:f1:08:cc:09:9d:0d:
ea:8d:44:d2:15:87:36:59:96:2d:eb:32:45:4f:0f:7c:6e:02:
e9:c2:48:f5:7a:76:67:2c:09:c3:cf:ec:5f:57:81:07:4c:86:
16:a0:40:8e:87:15:8b:74:0b:4f:9b:af:f9:98:58:f4:2a:77:
03:82:11:32:14:af:1c:40:27:2c:ff:db:9b:a6:ee:bb:b9:84:
80:b7:65:6e:74:cd:6a:57:71:fe:60:62:ae:ee:64:32:55:6a:
8b:65:e7:70:51:ea:d4:eb:04:05:df:9c:d2:a2:ee:0c:dd:2f:
45:46:d2:95:38:21:7c:a9:e7:f8:25:cd:62:2f:48:c9:33:56:
59:57:a4:c8:76:bb:10:33:c3:7c:07:df:6b:c9:41:fa:27:f1:
9b:d1:c1:11:24:f5:bc:ea:b7:d2:9a:33:9f:f1:fb:d4:22:e9:
0d:a4:bd:3e:10:ba:43:ce:8f:93:7f:a8:6c:c3:e1:14:ea:af:
99:ef:ce:99:7e:7b:73:48:a0:a4:17:51:e8:ca:df:ec:85:dc:
cc:d2:b9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:15 2026 by rpki-client