This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/US44wcphD6LlMjq_XXuf83C94AM.roa
File: US44wcphD6LlMjq_XXuf83C94AM.roa (raw, json)
Hash identifier: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=
Subject key identifier: 51:2E:38:C1:CA:61:0F:A2:E5:32:3A:BF:5D:7B:9F:F3:70:BD:E0:03
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019B79ECC1F8608167EB036D886D8F2CBC7C
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/US44wcphD6LlMjq_XXuf83C94AM.roa
Signing time: Thu 01 Jan 2026 14:18:37 +0000
ROA not before: Thu 01 Jan 2026 14:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202472
IP address blocks: 94.240.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:c1:f8:60:81:67:eb:03:6d:88:6d:8f:2c:bc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 14:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=512e38c1ca610fa2e5323abf5d7b9ff370bde003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:9f:9f:76:f4:17:89:4b:a1:46:4c:54:3d:
2e:c9:c8:e4:bc:98:a2:d6:67:6d:5e:e0:f7:3b:f0:
ec:f7:5c:3a:cc:c9:6e:5e:73:16:51:f2:91:61:51:
16:44:80:a7:db:43:fb:af:17:7c:b1:89:73:6c:30:
6a:28:11:4e:2d:2e:bf:60:61:75:10:45:e7:49:d3:
f0:b0:24:18:d4:0b:e3:fd:82:3e:35:76:a9:c8:8f:
b6:b9:99:86:f0:21:f3:58:3b:09:95:42:4f:34:01:
28:9d:ee:60:bf:ba:b3:52:4a:61:e7:af:79:21:6a:
e4:98:2a:d1:fb:4e:58:bb:50:6b:27:15:7a:59:52:
0c:f4:28:c3:53:8a:81:38:ad:8a:39:5c:b8:31:2c:
9f:a2:fd:07:b9:a4:33:e0:57:05:03:27:71:eb:2c:
2f:99:4e:55:0e:95:17:09:80:ac:30:93:f8:4d:db:
05:46:c3:0b:b5:39:71:9c:4c:35:c5:6d:1c:e0:99:
eb:09:33:c8:9b:e1:9d:1b:0b:11:87:4d:e4:d4:25:
b8:64:4a:8d:21:ad:ac:9b:23:36:5a:76:4e:44:f6:
9f:1f:af:9e:37:ae:09:e7:45:a1:a8:2c:76:d1:d2:
eb:f0:b0:0f:7b:b1:dc:77:07:d0:fc:32:4f:14:16:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2E:38:C1:CA:61:0F:A2:E5:32:3A:BF:5D:7B:9F:F3:70:BD:E0:03
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/US44wcphD6LlMjq_XXuf83C94AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f1:02:bd:59:f5:59:ef:80:7f:46:70:08:93:90:0f:89:29:
cd:39:19:6a:2f:de:f7:4a:68:41:d5:9b:82:dd:e2:f0:04:e8:
0f:14:59:4f:f2:13:9b:fd:32:8d:21:24:31:7c:68:5f:2e:af:
fc:9e:56:49:86:8f:a8:47:0d:3d:dc:da:b9:57:2b:6e:11:a8:
a4:0d:44:1f:49:07:14:d2:b6:d0:79:fc:a0:3d:57:25:a7:3d:
90:87:f5:c6:fb:ba:67:ab:c6:8d:d9:f4:6a:bb:d1:c1:19:70:
ae:82:f7:ec:3a:fa:f4:21:0a:97:60:f9:e4:03:8c:fe:34:b1:
54:42:7b:21:11:1a:ea:29:cc:9b:49:37:d0:10:d5:fd:73:61:
d2:db:ad:06:9a:a0:ac:46:32:ea:7e:27:14:61:a8:60:bf:f6:
b0:07:9a:00:a6:cf:4a:f5:d8:5e:1a:b3:53:8e:99:03:7a:4b:
42:f9:0a:c4:0d:0f:7d:21:4b:10:e5:3d:c7:26:30:4b:10:2f:
e5:98:7f:75:29:41:8d:d8:8e:f8:db:8b:27:d6:d6:e3:1b:c1:
b4:dc:e2:e8:2a:22:b0:29:95:f5:ca:73:d3:10:ff:b9:1a:52:
5c:01:2b:b7:d0:20:8f:d2:cc:20:c6:61:47:3e:ab:7a:89:33:
29:a7:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:31:46 2026 by rpki-client