This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tC-SnLwiFD2qkUWb34ZJlHrEwL0.roa
File: tC-SnLwiFD2qkUWb34ZJlHrEwL0.roa (raw, json)
Hash identifier: W2oX38Ug4hCN4nWmTJExGxqNgP/EzMkmtz9vGCWN0AQ=
Subject key identifier: B4:2F:92:9C:BC:22:14:3D:AA:91:45:9B:DF:86:49:94:7A:C4:C0:BD
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 019B7B360B86B02DB878B0993545805D139E
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tC-SnLwiFD2qkUWb34ZJlHrEwL0.roa
Signing time: Thu 01 Jan 2026 20:18:18 +0000
ROA not before: Thu 01 Jan 2026 20:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47134
IP address blocks: 188.213.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:0b:86:b0:2d:b8:78:b0:99:35:45:80:5d:13:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 20:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b42f929cbc22143daa91459bdf8649947ac4c0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:64:3b:f2:d5:a2:ad:8f:9a:00:57:d3:5c:
3b:5c:d2:1b:6d:06:c4:9c:61:b7:c4:77:4a:57:32:
0f:a0:32:17:28:6e:17:56:e8:52:a3:8a:b1:f4:bb:
d3:ff:e5:1c:99:36:51:ca:02:a7:8c:3d:1b:8c:d5:
01:bc:4e:64:c6:94:3f:db:99:12:2e:e7:06:e7:95:
89:d4:2f:f1:1b:36:36:3d:61:a9:e3:ab:d4:3d:0a:
be:4f:2d:8a:6e:2c:cd:4e:9d:f2:76:5e:e6:d8:ac:
16:ca:32:08:aa:3a:5b:57:29:6e:be:9e:ce:72:c4:
7b:fa:e8:71:69:0a:8c:aa:e4:92:4e:db:8d:68:f5:
4b:e9:ac:f8:5e:fa:28:1d:fb:f5:4a:c2:7c:55:af:
a3:5d:cf:66:ba:2a:2a:cd:67:f9:2f:e5:7f:12:dc:
c5:5c:1c:d2:f1:d2:6d:9b:63:4c:3e:94:19:30:0c:
54:85:ba:10:a2:b9:49:4c:90:24:9c:7b:17:44:d3:
15:54:bb:3a:f3:57:fa:7d:1e:ba:46:8f:94:e1:85:
6f:40:05:5c:9f:16:3a:99:b2:90:23:28:e1:e5:cb:
2d:24:4e:24:c0:ef:74:c7:c8:1a:6d:72:86:3c:c5:
5a:46:64:b3:88:ec:92:66:f0:17:c3:1d:a2:b1:82:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:92:9C:BC:22:14:3D:AA:91:45:9B:DF:86:49:94:7A:C4:C0:BD
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tC-SnLwiFD2qkUWb34ZJlHrEwL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:25:3f:c8:d6:b7:a8:55:d5:55:7e:1b:15:28:d9:a8:47:6a:
c0:3d:32:33:9d:10:9a:11:1e:88:cb:ef:cc:2f:49:a0:67:56:
28:52:d3:22:03:c4:e9:5f:12:be:a8:de:a0:28:cd:ff:4d:64:
ce:22:86:f0:92:91:58:2c:40:8c:75:4d:1a:35:ac:29:7a:64:
96:93:b3:40:9b:f0:40:07:21:e1:95:cf:44:d7:aa:80:af:1d:
84:ba:5d:5d:48:17:ac:46:9f:5a:8e:36:73:54:17:e0:5c:66:
9d:f3:f4:2c:85:ff:d0:b6:6f:32:f8:bc:d6:98:be:6a:42:6c:
a2:49:3a:d9:8e:66:25:95:d6:a8:7f:eb:5b:a2:e4:99:a4:da:
79:b0:c1:ac:22:dd:79:10:c6:74:50:8f:b7:6c:3e:74:02:98:
42:1f:63:7a:68:ff:28:b5:bb:fe:aa:65:f1:66:42:6c:fd:ab:
1d:e6:95:10:3b:31:96:18:8b:bf:71:7d:0c:b9:81:89:64:fe:
3f:31:59:88:4f:78:fe:99:d9:06:58:62:b9:78:23:3e:a3:08:
dd:03:c5:f3:31:f1:8a:86:7f:fd:59:af:5e:e8:60:38:b9:f6:
48:98:52:33:86:d0:80:c1:81:e0:3c:2c:5f:14:6d:f5:04:8c:
9b:c6:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:24:32 2026 by rpki-client