This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/udGl8isNJxExRSIhiZ2jjvucC5s.roa
File: udGl8isNJxExRSIhiZ2jjvucC5s.roa (raw, json)
Hash identifier: 46OQaBoVhzlHfO3MZlMA5GIChgYIIijufkFgTDDBkM8=
Subject key identifier: B9:D1:A5:F2:2B:0D:27:11:31:45:22:21:89:9D:A3:8E:FB:9C:0B:9B
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019B77C754600D2562D9FE39AD87493AAA22
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/udGl8isNJxExRSIhiZ2jjvucC5s.roa
Signing time: Thu 01 Jan 2026 04:18:30 +0000
ROA not before: Thu 01 Jan 2026 04:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197223
IP address blocks: 2a03:8c0::/32 maxlen: 32
2a03:8c0::/36 maxlen: 36
2a03:8c0:1000::/36 maxlen: 36
2a03:8c0:2000::/36 maxlen: 36
2a03:8c0:3000::/36 maxlen: 36
2a03:8c0:4000::/36 maxlen: 36
2a03:8c0:5000::/36 maxlen: 36
2a03:8c0:6000::/36 maxlen: 36
2a03:8c0:7000::/36 maxlen: 36
2a03:8c0:8000::/36 maxlen: 36
2a03:8c0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:54:60:0d:25:62:d9:fe:39:ad:87:49:3a:aa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 04:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9d1a5f22b0d271131452221899da38efb9c0b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:11:f3:18:3e:75:94:1c:b6:a2:f4:a9:1b:
ad:5d:90:4b:e6:8e:31:53:2d:17:0b:b6:2e:6f:49:
93:f6:46:28:37:1a:bf:80:3c:88:ba:cf:73:cb:c4:
b0:c4:c5:05:a0:0c:9f:d5:86:f0:7c:e7:01:75:a2:
49:7d:1e:10:fd:36:c3:3f:b1:0c:29:ea:95:e7:2c:
25:11:18:77:ee:89:d5:d5:63:63:aa:da:6d:66:0c:
67:95:f1:a2:72:ef:70:c9:d4:1e:ba:31:81:fe:e0:
9e:6e:3a:62:e6:1f:8a:74:77:1e:87:11:ad:e9:6d:
29:e0:0b:b6:d3:ea:26:4b:5f:aa:b4:45:c2:a3:12:
63:1c:78:e7:65:e9:a4:a9:03:3b:7a:89:cc:f3:31:
0e:9d:f2:e9:ce:7c:97:73:07:5b:40:90:31:fb:b4:
25:7f:57:b1:9e:80:dd:35:62:c8:1d:f6:8a:82:ba:
3a:7f:85:90:26:e3:3b:3f:80:38:7e:fe:38:e0:07:
42:2b:9c:9b:86:4d:c8:da:86:0e:48:12:c7:5e:12:
96:dc:09:30:02:62:9e:34:4b:a7:bc:84:3e:71:d7:
0e:09:10:70:67:29:9a:28:35:28:90:85:7e:64:fa:
cf:fa:cc:15:7e:6a:5b:59:76:de:5e:4a:54:4c:a2:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D1:A5:F2:2B:0D:27:11:31:45:22:21:89:9D:A3:8E:FB:9C:0B:9B
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/udGl8isNJxExRSIhiZ2jjvucC5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:8c0::/32
Signature Algorithm: sha256WithRSAEncryption
08:83:29:57:6d:c9:81:12:3a:7f:13:f2:e4:eb:b0:7c:ec:41:
8f:19:97:e4:2e:67:84:27:f5:c4:8c:ee:2f:a0:fd:92:4d:7a:
53:02:d4:63:d1:56:f9:4b:4f:0b:0e:45:a1:57:e2:46:9b:7c:
ee:9b:66:a2:c4:1e:79:5f:75:11:50:84:32:b5:5c:c1:78:ef:
4f:d4:13:d0:22:52:1f:af:98:2c:3e:18:2d:12:9b:75:b8:53:
60:ed:20:aa:46:4e:fe:47:94:c0:dc:ba:bc:dd:99:8d:d6:1e:
4d:88:fa:00:2a:3e:09:0e:b4:83:f3:bb:1c:2f:85:c8:e0:7f:
7f:5e:c0:91:17:87:32:b1:c8:a9:a1:87:c4:f3:79:ff:2c:5a:
36:1d:e8:73:0c:39:4e:81:81:32:2a:93:70:54:f4:34:f0:e3:
71:fc:81:a5:e6:07:0c:27:a8:8c:c4:05:10:16:c3:f7:6a:2d:
eb:7e:c2:da:c1:b8:75:5f:f3:3e:d5:5d:73:65:37:d3:e1:70:
5f:11:53:d1:bc:da:26:06:4c:da:ac:22:af:61:fd:11:8e:3e:
5c:26:e0:9a:26:dc:1e:6e:89:9d:4c:46:46:ca:d8:eb:14:bd:
fd:28:e0:d5:e7:f3:c4:74:30:38:72:11:c7:95:da:85:23:86:
6a:c6:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:41:44 2026 by rpki-client