This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/DaHppUozY1kCYvwX88wtsnmWINM.roa
File: DaHppUozY1kCYvwX88wtsnmWINM.roa (raw, json)
Hash identifier: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=
Subject key identifier: 0D:A1:E9:A5:4A:33:63:59:02:62:FC:17:F3:CC:2D:B2:79:96:20:D3
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019B797F4BB97A5DB58011BA14D961ACDBB6
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/DaHppUozY1kCYvwX88wtsnmWINM.roa
Signing time: Thu 01 Jan 2026 12:19:04 +0000
ROA not before: Thu 01 Jan 2026 12:19:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211444
IP address blocks: 193.58.118.0/24 maxlen: 24
194.62.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:4b:b9:7a:5d:b5:80:11:ba:14:d9:61:ac:db:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Jan 1 12:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0da1e9a54a3363590262fc17f3cc2db2799620d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:7c:2c:13:b3:e9:12:32:79:a4:32:04:39:
57:20:df:46:23:bf:8f:a9:ce:70:d8:8b:59:f8:12:
af:29:01:cf:88:29:c4:08:0d:25:ef:71:44:fb:12:
b1:51:ba:78:97:49:73:97:b9:61:e2:f1:e6:10:6a:
cc:9d:01:8f:0f:00:fa:04:29:b4:33:9e:17:0d:ed:
5e:23:e8:98:f8:0a:49:7b:46:c4:bf:ff:24:24:dd:
54:be:4a:c4:b6:9a:c2:0b:ba:87:27:08:d1:bb:e6:
41:43:1c:6c:02:07:63:cb:b6:df:ec:39:7b:b7:03:
03:d5:9d:69:e1:e1:e5:0f:22:44:96:88:fa:b9:e2:
c9:26:07:f0:87:f4:9f:05:43:aa:1f:12:b4:fc:d7:
a9:c0:59:15:50:ec:62:35:5f:ad:72:b4:53:03:47:
56:54:72:31:54:c8:86:d1:e5:06:6b:82:2b:37:e2:
aa:75:b4:70:78:52:b8:cb:15:4e:be:83:07:35:c1:
b6:aa:3c:c9:64:36:bc:84:ed:7a:24:48:2e:fd:c8:
3a:48:89:ae:35:f7:ee:b5:c8:1a:a6:71:20:0f:d6:
fb:31:ed:3a:fe:dc:4f:28:c2:b6:f1:5e:de:3f:60:
87:53:7d:21:a0:0b:c9:04:d7:ed:8c:71:7e:8a:28:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:E9:A5:4A:33:63:59:02:62:FC:17:F3:CC:2D:B2:79:96:20:D3
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/DaHppUozY1kCYvwX88wtsnmWINM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.118.0/24
194.62.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:52:be:8d:65:2f:6d:f0:0f:5a:af:93:c3:fb:65:19:97:b4:
04:3c:3a:20:fa:f2:92:87:a6:a8:cd:43:d8:ee:b1:62:3e:79:
b6:47:5f:2c:57:c6:bb:11:cf:b0:80:ba:c4:45:52:c4:e5:d5:
cf:78:66:90:10:c5:c6:aa:0f:f0:8f:ca:41:41:28:fa:dc:ba:
78:80:6d:66:68:b9:bf:2b:3f:5a:4b:61:9a:67:68:1e:14:9f:
50:7a:02:50:02:43:65:d2:74:19:38:56:70:14:fb:50:4f:51:
42:b3:61:e8:15:a0:26:2c:96:83:5a:fd:af:2e:66:fc:66:4f:
ea:6f:44:d1:97:9c:9f:26:f2:7e:14:54:6c:0d:db:fa:02:3e:
c3:ea:2d:49:34:2c:33:06:85:f9:56:08:d8:3f:4f:94:29:ff:
35:6c:fe:ba:f4:ae:27:3d:26:b2:35:a9:6a:00:fd:16:b4:8a:
2e:fc:9d:94:aa:dd:a9:4a:2c:53:5e:90:68:2f:57:db:d8:4e:
07:c2:ea:4f:3a:ea:09:a6:20:30:b8:a5:d3:02:10:21:1c:7d:
63:56:9e:8d:0e:9a:c7:71:0c:9d:cf:fb:bf:24:c2:8b:a2:26:
a1:d6:c9:f8:01:2a:3e:1c:86:29:35:89:2c:c4:99:ee:71:2d:
a0:dd:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:38:42 2026 by rpki-client