This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/pMi_2iDmt-lT6pAwyjWuQDGa_O0.roa
File: pMi_2iDmt-lT6pAwyjWuQDGa_O0.roa (raw, json)
Hash identifier: ZC+lvMGM7K+2aRAYs06T+FrjbLH1je+sqYWK1p3NT+U=
Subject key identifier: A4:C8:BF:DA:20:E6:B7:E9:53:EA:90:30:CA:35:AE:40:31:9A:FC:ED
Certificate issuer: /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial: 019B7F14EA1A359676FAAE9956B069C20313
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/pMi_2iDmt-lT6pAwyjWuQDGa_O0.roa
Signing time: Fri 02 Jan 2026 14:20:35 +0000
ROA not before: Fri 02 Jan 2026 14:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43435
IP address blocks: 78.155.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:ea:1a:35:96:76:fa:ae:99:56:b0:69:c2:03:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Validity
Not Before: Jan 2 14:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4c8bfda20e6b7e953ea9030ca35ae40319afced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:3e:23:c6:57:0f:4c:23:85:0e:18:ff:10:
33:51:77:07:86:7c:47:60:63:ab:78:a2:29:98:3b:
fe:22:28:91:59:dc:80:e0:6d:81:6e:17:cb:9b:8a:
08:c7:a2:01:74:84:32:53:6d:a3:08:f9:b5:fc:8b:
55:97:c7:5d:0b:b7:52:a4:47:5d:b4:ac:71:0d:06:
af:1d:8a:5e:19:43:6c:57:8a:19:e1:5d:43:4d:e6:
84:4a:17:8e:05:ba:ce:6e:24:9e:b9:44:2c:c1:12:
43:f0:5d:e8:9f:8c:50:a4:73:bc:50:9e:80:77:bc:
c4:c8:83:a0:e9:9d:92:6a:04:05:e1:26:47:69:fc:
e8:95:46:1a:68:ac:d3:48:11:d2:b7:38:ef:1b:b8:
43:b1:d4:50:ac:b6:b3:fd:19:ab:e1:27:e7:5f:bd:
b8:bb:11:b1:c8:72:42:4b:aa:76:31:a7:2b:43:65:
b9:d3:0f:99:7d:99:99:53:a6:5e:c0:3c:f2:87:9b:
55:e6:73:4e:51:97:5e:6a:1d:ca:b1:d1:29:69:94:
2d:9f:1e:84:bf:77:e4:92:8d:5e:02:03:31:24:bf:
3b:b2:15:b7:eb:bd:75:05:61:19:87:13:6d:a1:82:
d0:40:a0:f9:f4:f7:5a:db:d6:e7:48:a0:ff:47:f5:
a4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:BF:DA:20:E6:B7:E9:53:EA:90:30:CA:35:AE:40:31:9A:FC:ED
X509v3 Authority Key Identifier:
keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/pMi_2iDmt-lT6pAwyjWuQDGa_O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.155.96.0/19
Signature Algorithm: sha256WithRSAEncryption
97:32:cd:4e:b0:66:7c:5e:6f:9b:d1:d8:32:7e:70:17:51:cc:
67:7e:95:8e:0f:aa:4e:1d:03:68:fa:65:8b:b5:da:c6:22:fa:
0f:fb:c5:8d:5b:1c:e9:f7:7e:60:9f:bf:0b:d0:5c:61:c6:45:
37:83:0a:4c:1f:fc:b6:f6:15:b5:b0:56:87:d1:41:5d:f5:2a:
c5:05:75:5f:4d:84:39:5a:72:15:e2:55:1c:d0:83:db:64:d8:
06:5f:ab:92:51:ca:4d:e3:1d:f3:10:cb:8a:ce:d6:b5:4b:04:
d1:c4:2c:d7:26:ba:11:4f:56:19:74:e5:de:17:61:e7:11:43:
00:0b:c0:01:f7:77:de:0e:8a:00:b4:24:25:7a:01:2a:de:e1:
cb:cc:fd:a3:80:07:20:5d:8e:53:82:6f:b2:4f:97:33:e4:ba:
e0:11:98:d2:ce:f8:03:f7:11:a5:c2:35:94:65:fd:84:e3:ee:
94:f6:91:9d:4c:72:fb:a7:08:74:1e:ec:87:6c:0e:c4:fd:51:
22:01:d4:b3:21:ec:d5:a3:76:de:42:54:d9:a5:49:44:13:6d:
71:99:67:26:61:2f:e0:3a:dc:85:8e:fb:e2:97:68:2d:3c:06:
d0:63:0b:cf:b6:2b:5e:69:23:e3:fe:f2:f6:cc:7e:b9:d7:00:
b1:ae:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:45:50 2026 by rpki-client