This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/M52AATjdXBgxajzktnux2QbLdug.roa
File: M52AATjdXBgxajzktnux2QbLdug.roa (raw, json)
Hash identifier: S4m/c7OnNxor+S/UX1Qxo2msu+sB/UbCE+Y/qKNHiQo=
Subject key identifier: 33:9D:80:01:38:DD:5C:18:31:6A:3C:E4:B6:7B:B1:D9:06:CB:76:E8
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 019AFE2BB8C19E0CAD4EEABC476EBEB3EDE0
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/M52AATjdXBgxajzktnux2QbLdug.roa
Signing time: Mon 08 Dec 2025 13:34:29 +0000
ROA not before: Mon 08 Dec 2025 13:34:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 193.109.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fe:2b:b8:c1:9e:0c:ad:4e:ea:bc:47:6e:be:b3:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Dec 8 13:34:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=339d800138dd5c18316a3ce4b67bb1d906cb76e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:5b:78:17:c0:4e:3d:51:19:8b:fb:17:9a:
67:8b:af:8f:f1:a9:e6:9b:b2:38:bf:b3:dc:b9:21:
5c:ca:ee:7c:87:c6:a6:f1:d9:14:54:28:f8:39:44:
9d:f1:a2:ff:22:7c:71:3b:99:c0:ff:58:8f:d1:4e:
80:37:ea:d6:8c:e4:5a:5e:bc:ca:ab:48:27:75:37:
72:9a:d9:cc:18:a7:55:7f:da:f8:c4:7d:e0:b2:77:
a9:e4:85:d1:b3:f8:8a:d7:e3:7d:cc:d1:35:e8:98:
21:87:06:1c:2c:b9:07:f9:6d:8e:6e:82:f8:f9:2f:
77:77:d5:bc:3f:c3:ce:20:08:53:c8:ac:52:50:93:
39:71:4e:0d:30:42:a7:3a:5e:a4:85:b1:0e:2d:80:
98:ab:77:52:c7:87:ed:dd:88:85:2a:4e:ed:d8:06:
dd:c7:5a:78:83:7b:11:80:32:ef:0e:37:ee:23:17:
1f:f3:0f:90:eb:02:f1:a4:e4:bf:0f:49:99:17:ee:
49:1c:51:e9:1a:9e:82:80:ad:3f:9b:22:cd:87:e7:
4f:99:ff:b2:f4:48:0d:dc:01:c7:2c:63:e1:ef:d1:
fb:34:f1:ef:cb:cb:53:33:a9:aa:f3:1f:50:2f:7a:
e2:4f:a5:38:be:b3:62:f4:a5:a5:14:a4:d5:0a:4b:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9D:80:01:38:DD:5C:18:31:6A:3C:E4:B6:7B:B1:D9:06:CB:76:E8
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/M52AATjdXBgxajzktnux2QbLdug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.229.0/24
Signature Algorithm: sha256WithRSAEncryption
89:47:53:51:cf:1a:6c:98:f3:ce:76:79:55:f5:1c:a2:18:df:
2b:34:46:7d:40:f6:b6:dd:64:af:de:66:86:6c:0a:6d:9b:bd:
fa:8b:61:81:3f:d1:ee:e6:30:48:73:1a:2e:0a:37:7f:d6:fa:
00:84:4d:6c:8c:0f:33:28:53:03:62:56:d6:32:3a:d2:37:48:
0a:0a:36:ce:a8:4f:32:7b:77:6a:e8:40:d1:26:93:23:97:cb:
d0:bc:01:1c:02:84:58:4f:dd:35:f1:a7:c4:5f:11:38:cd:c1:
b2:c5:04:cf:23:b3:d0:db:09:ca:81:50:5b:75:d0:10:98:57:
c0:24:99:d2:ff:fd:9c:f8:a6:0f:86:9b:39:05:3b:12:86:76:
84:e8:8d:de:0d:17:9c:77:47:2a:43:05:d2:5e:3f:f2:fb:31:
09:ac:83:f3:8a:c7:51:9e:df:da:2b:63:99:63:95:7c:7c:56:
57:16:17:6c:97:07:67:e2:3f:2e:3e:a8:27:6b:19:01:2c:2a:
01:fc:c9:58:22:ad:03:4c:14:af:ad:98:cf:a3:57:19:40:52:
8d:ce:83:15:61:08:73:fd:b9:86:2c:b4:92:75:e2:67:51:b1:
ab:7b:45:e8:59:ad:4d:4c:67:c5:4c:25:5f:22:79:f1:19:45:
b5:fe:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 18:14:02 2025 by rpki-client