This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa
File: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (raw, json)
Hash identifier: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=
Subject key identifier: 74:06:2F:8A:22:10:D1:91:F9:B7:9D:5E:F5:8C:36:3C:21:93:56:10
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019B7D5C81BCA357A956DB5FB9CC9DDEC8EA
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa
Signing time: Fri 02 Jan 2026 06:19:33 +0000
ROA not before: Fri 02 Jan 2026 06:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50613
IP address blocks: 82.221.96.0/19 maxlen: 19
82.221.100.0/23 maxlen: 23
82.221.104.0/24 maxlen: 24
82.221.105.0/24 maxlen: 24
82.221.111.0/24 maxlen: 24
82.221.113.0/24 maxlen: 24
82.221.128.0/19 maxlen: 19
82.221.128.0/24 maxlen: 24
82.221.129.0/24 maxlen: 24
82.221.130.0/24 maxlen: 24
82.221.131.0/24 maxlen: 24
82.221.136.0/24 maxlen: 24
82.221.139.0/24 maxlen: 24
82.221.141.0/24 maxlen: 24
82.221.143.0/24 maxlen: 24
82.221.146.0/24 maxlen: 24
193.107.84.0/22 maxlen: 22
2a02:f48:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:81:bc:a3:57:a9:56:db:5f:b9:cc:9d:de:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jan 2 06:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74062f8a2210d191f9b79d5ef58c363c21935610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:d8:57:b1:21:df:bf:64:cc:a0:e0:72:e7:
12:5b:1b:3c:b8:45:fd:ca:7e:95:bc:2a:01:a2:6c:
c7:72:78:14:54:2f:25:bd:12:06:80:0d:4d:95:e2:
5e:b1:73:e4:77:2e:ba:88:01:ec:d0:87:ad:14:9f:
99:aa:cf:35:79:e7:6c:17:22:81:c0:08:15:67:79:
80:ed:ff:d9:c0:d2:9f:fa:f8:0a:02:5e:bd:6f:b8:
db:e8:1e:bd:53:a1:28:bb:dc:c0:61:7c:15:c9:56:
e4:ba:50:bb:06:7a:2f:fb:06:ec:9f:02:09:c7:b5:
ce:07:35:07:39:cc:7b:01:3b:4a:21:13:42:e1:9b:
fd:d7:4c:4d:e6:4f:d0:13:ba:2f:7b:0a:70:03:38:
67:2d:41:ec:60:db:d3:ec:cd:00:96:ed:c9:a5:fc:
8e:24:1e:eb:6e:37:59:a7:6e:d3:dd:44:41:bf:22:
e2:7b:8c:80:c1:96:bc:f8:88:93:20:e6:d5:b2:97:
c1:d2:45:50:0c:42:4b:1d:91:41:e3:cb:93:f7:2d:
e7:bd:48:1a:46:6d:f6:ab:22:30:4d:75:c4:e2:53:
85:cb:e1:71:92:66:3d:08:5f:e2:a0:23:23:b8:61:
cf:c0:67:85:40:05:03:8e:9b:80:ed:bf:54:0a:2f:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:06:2F:8A:22:10:D1:91:F9:B7:9D:5E:F5:8C:36:3C:21:93:56:10
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.221.96.0-82.221.159.255
193.107.84.0/22
IPv6:
2a02:f48:2000::/40
Signature Algorithm: sha256WithRSAEncryption
09:9d:bf:bd:1c:7d:74:29:66:dc:05:c2:63:e4:39:1d:46:ad:
62:30:94:b4:32:6d:4b:72:66:54:0d:80:c0:d4:66:5d:e6:a1:
0d:8e:17:13:a0:57:af:e8:47:ed:f4:ea:fd:eb:8d:87:ef:68:
ba:15:f0:35:b1:01:c9:07:6d:d0:d7:33:76:69:07:3b:6f:74:
90:99:79:ab:0b:4e:2b:18:84:68:b2:b1:a7:8e:8d:a0:1c:63:
47:9b:f3:e5:b5:d9:66:e3:ea:22:20:90:ee:08:f4:01:ce:19:
2a:29:21:b9:a5:9c:da:47:aa:c0:3b:7d:85:51:16:e3:17:1c:
50:11:93:f2:d4:aa:88:f5:62:53:b2:21:82:bf:3f:9b:05:59:
e6:79:6b:0e:61:c8:e3:cb:42:7c:5c:28:f4:d0:ac:ea:f0:70:
b5:e7:e2:4d:21:d8:a7:af:e7:e5:78:68:29:08:94:73:8e:34:
bc:35:bc:7f:10:a4:b5:f8:ac:d7:24:61:0e:64:5d:e5:7c:05:
d2:2a:f0:75:27:38:7f:81:01:d7:c1:04:db:b4:98:6b:a2:84:
4f:5e:14:7a:20:95:17:88:8e:43:c0:90:73:15:3d:68:8d:fa:
b5:53:c8:52:88:13:84:ca:dc:67:54:30:71:99:1f:79:b4:0e:
27:2c:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:42 2026 by rpki-client