This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/selpiMAtC673iTWOb2-y6QgzUug.roa
File: selpiMAtC673iTWOb2-y6QgzUug.roa (raw, json)
Hash identifier: S+gkj1cHuv4jzn2Arj35/6Qs4lZjCuFq3ftU/O9rJog=
Subject key identifier: B1:E9:69:88:C0:2D:0B:AE:F7:89:35:8E:6F:6F:B2:E9:08:33:52:E8
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 019BB7959F3149A02423BDC4B08435FE4937
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/selpiMAtC673iTWOb2-y6QgzUug.roa
Signing time: Tue 13 Jan 2026 13:39:54 +0000
ROA not before: Tue 13 Jan 2026 13:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205513
IP address blocks: 62.73.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b7:95:9f:31:49:a0:24:23:bd:c4:b0:84:35:fe:49:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 13 13:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e96988c02d0baef789358e6f6fb2e9083352e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:2d:20:d7:31:72:3d:78:17:81:13:3f:01:
f9:d5:e4:50:ce:aa:e4:3d:1e:70:97:9d:90:ad:0e:
25:34:a7:08:f8:3e:40:c6:2a:f3:16:47:ba:d3:ed:
8f:16:19:50:70:4a:63:01:02:1f:2d:30:0c:d0:ad:
96:3e:78:a1:38:a3:75:9e:8b:11:7c:ab:6f:22:8f:
f8:24:d3:ec:93:6d:27:96:17:a2:9e:82:d3:1f:05:
c3:f3:fc:d4:08:8b:b4:d6:10:ee:fa:5d:5c:13:8a:
9f:e4:5c:5e:13:d9:b5:c9:b4:50:cd:3b:90:b9:0b:
f5:da:6f:1f:76:a3:21:2b:1c:52:7a:03:90:12:c2:
43:f5:10:33:89:2c:32:3e:1e:20:73:c3:ff:3c:98:
3b:bc:8d:1d:4d:08:37:b7:d2:c4:ce:e8:20:0a:10:
1d:cb:c0:24:18:d1:3d:db:80:a0:a2:bd:a7:e5:e7:
c7:21:6d:cb:f0:ff:b7:d5:1b:e6:79:3a:bd:18:c2:
74:d4:0a:4a:1c:97:87:df:f7:9b:96:ce:0d:c0:96:
10:c5:e1:04:82:d4:57:ed:a9:2c:c0:41:46:12:13:
e4:61:25:97:2a:03:4c:da:d8:bc:db:c2:fb:48:25:
6b:6b:66:4d:08:76:03:be:cc:df:82:d0:9d:04:ff:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:69:88:C0:2D:0B:AE:F7:89:35:8E:6F:6F:B2:E9:08:33:52:E8
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/selpiMAtC673iTWOb2-y6QgzUug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.65.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1c:8f:6a:0c:5a:77:95:69:ce:7f:39:fc:10:66:79:ef:4f:
9b:45:07:c3:34:82:a1:55:36:b2:c1:c2:18:44:20:00:94:80:
a4:0d:3a:68:e9:8e:2d:bd:0c:01:0e:08:77:91:29:2d:59:26:
1b:ad:84:f8:da:b1:3b:94:f3:99:5a:57:5e:87:34:36:bf:57:
95:ed:39:cb:68:82:2c:09:80:bb:ff:ab:34:af:de:03:1c:32:
11:75:0a:4e:71:fa:52:1e:84:18:bc:ac:95:bb:66:21:67:17:
c1:0c:22:c7:aa:62:fc:82:be:fc:dc:58:70:c7:46:44:59:7a:
ca:2b:d7:15:90:dd:20:a4:43:72:66:36:cb:22:4f:67:76:1d:
cb:7d:3d:3f:c5:50:1c:40:35:dc:a1:0f:e6:9a:38:ca:02:a5:
54:73:d6:8a:26:41:62:1f:c5:28:5e:7a:b8:6e:59:c7:dc:3e:
f3:64:db:0c:2a:1c:82:b2:13:c0:96:b6:18:c0:7f:18:ef:05:
93:cb:97:83:f9:2d:46:b8:fc:67:2e:11:ea:c2:4e:a7:63:2d:
6d:bc:e1:a9:a1:f4:10:df:1d:ec:73:fb:dc:f3:c6:66:3a:e8:
dc:bb:50:f6:38:79:88:4c:a5:56:e2:91:d6:a3:5c:ed:be:b0:
4c:70:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:51:04 2026 by rpki-client