This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/p1jKxGV195BACHg244ymCMSyshg.roa
File: p1jKxGV195BACHg244ymCMSyshg.roa (raw, json)
Hash identifier: Je8jdUItQ4lMgk0idQAC8BMwOcmLas3i/6KLec/Kn60=
Subject key identifier: A7:58:CA:C4:65:75:F7:90:40:08:78:36:E3:8C:A6:08:C4:B2:B2:18
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 019B77C6F4EE5E77CE2EB55E25FD6297C9BE
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/p1jKxGV195BACHg244ymCMSyshg.roa
Signing time: Thu 01 Jan 2026 04:18:06 +0000
ROA not before: Thu 01 Jan 2026 04:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24843
IP address blocks: 193.8.206.0/23 maxlen: 23
193.8.206.0/24 maxlen: 24
193.8.207.0/24 maxlen: 24
193.8.220.0/23 maxlen: 23
193.8.220.0/24 maxlen: 24
193.57.128.0/23 maxlen: 23
193.57.128.0/24 maxlen: 24
193.57.129.0/24 maxlen: 24
193.57.130.0/23 maxlen: 23
193.57.130.0/24 maxlen: 24
193.57.131.0/24 maxlen: 24
2a02:c804::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:f4:ee:5e:77:ce:2e:b5:5e:25:fd:62:97:c9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: Jan 1 04:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a758cac46575f79040087836e38ca608c4b2b218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:be:12:be:36:af:2e:7c:c6:82:09:9b:6a:
ab:ce:1b:15:e9:10:4a:53:ec:8e:81:6c:ca:25:36:
46:a1:ab:52:27:f5:8e:19:de:d2:57:a7:99:e9:2a:
17:f7:00:70:7e:b0:a5:34:18:b2:87:d6:3a:77:dd:
23:75:7b:af:9e:0e:e8:74:54:be:3e:d1:43:1f:c7:
ab:82:2f:6a:c9:08:af:20:f7:3e:74:44:bd:1d:b6:
e6:8c:af:a2:b4:20:96:47:8b:b2:9a:ce:d1:a4:95:
d6:46:cc:24:56:27:72:29:2f:17:93:dd:80:94:b6:
9a:cd:32:96:15:b4:ca:ee:d8:cc:5c:4d:5e:e2:46:
2f:70:01:eb:ab:54:90:85:7e:e4:0e:87:8c:89:c0:
3e:4a:a9:f5:61:7f:e5:9a:be:04:41:95:24:a4:02:
da:21:71:4e:f1:cc:1b:cd:42:fe:6e:ec:0c:76:36:
bb:3b:8a:08:f0:22:47:dd:9a:c3:72:58:50:4e:67:
e9:90:f6:b2:75:7e:b8:3e:5c:d1:f0:ad:32:ac:83:
1c:f8:a4:27:70:39:1c:04:e0:0f:6a:98:fe:14:f4:
b9:30:0d:fc:6a:90:b0:09:86:71:a3:24:f6:f3:18:
be:ff:4c:fb:b4:bc:9a:f6:85:58:1d:4e:2e:03:8b:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:58:CA:C4:65:75:F7:90:40:08:78:36:E3:8C:A6:08:C4:B2:B2:18
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/p1jKxGV195BACHg244ymCMSyshg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.206.0/23
193.8.220.0/23
193.57.128.0/22
IPv6:
2a02:c804::/32
Signature Algorithm: sha256WithRSAEncryption
42:93:db:76:cc:f3:4d:ac:d7:85:83:15:9d:f6:0c:dd:74:2e:
ef:70:62:1b:bc:ae:c3:0c:cf:cf:69:1e:57:06:28:d0:de:ed:
9e:da:1c:b6:d2:5b:a7:f8:53:8b:a0:1f:7a:18:fa:41:84:01:
db:fe:52:2c:41:46:cb:23:93:23:49:f3:48:f6:7f:d1:0e:ef:
d4:a3:0e:ec:1b:49:d7:8c:0c:2d:82:1d:b6:10:a0:b6:33:a7:
70:b0:28:2c:72:2b:f0:9b:51:62:6c:c6:b9:b2:9c:09:00:a4:
ad:cf:34:62:30:71:6a:06:c5:b7:bd:ed:d7:de:f0:4b:3d:36:
d8:6e:bc:38:b8:e6:fb:de:7a:da:37:b5:70:b0:9e:16:3c:75:
42:2f:87:bf:5f:b5:e6:d7:c8:01:d3:1f:0e:f8:49:af:79:91:
b1:10:6f:fe:1e:bb:9d:94:94:1e:58:a1:98:27:0e:05:8f:2a:
6a:f8:c2:0f:f6:ca:cb:4b:d0:4c:e9:1e:30:4f:7a:f4:ce:ed:
54:a6:6a:e7:1c:f3:92:cf:2b:0e:1f:b3:c1:34:0a:64:4c:a2:
52:ee:59:27:27:35:7a:7d:4c:e2:2b:21:30:b3:34:08:04:29:
17:b8:25:84:85:9a:e4:37:30:1d:4c:3e:e2:e3:3c:bd:da:8f:
73:d0:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:18 2026 by rpki-client