This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/iRgpkScl2E0qydvLYxmlqR43YT8.roa
File: iRgpkScl2E0qydvLYxmlqR43YT8.roa (raw, json)
Hash identifier: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=
Subject key identifier: 89:18:29:91:27:25:D8:4D:2A:C9:DB:CB:63:19:A5:A9:1E:37:61:3F
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019B797EE135841AFF5CAEF21E36382858C0
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/iRgpkScl2E0qydvLYxmlqR43YT8.roa
Signing time: Thu 01 Jan 2026 12:18:36 +0000
ROA not before: Thu 01 Jan 2026 12:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211184
IP address blocks: 2001:678:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:e1:35:84:1a:ff:5c:ae:f2:1e:36:38:28:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Jan 1 12:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=891829912725d84d2ac9dbcb6319a5a91e37613f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:7a:bf:27:22:0a:8d:f7:66:b6:db:36:5d:
ea:e8:a6:be:f8:fa:d1:6b:f9:42:25:47:60:96:af:
ab:a4:ee:bf:5c:28:54:98:33:97:b4:df:f9:83:ad:
73:d2:21:f8:7f:10:eb:39:15:6e:f5:52:40:77:36:
2d:45:c0:42:3d:88:23:3a:a9:08:34:65:fc:68:54:
26:49:20:f2:0a:55:6a:52:5c:93:03:3d:66:cb:49:
dd:41:8b:10:1f:cd:6c:88:96:42:de:48:11:d9:57:
f3:f2:a0:c5:0a:ab:9f:4f:09:f5:f0:b7:d2:67:da:
da:20:19:9b:de:fd:a9:f3:40:91:73:34:c7:6a:91:
fd:4e:9a:7b:30:50:d6:1e:c8:98:7c:09:15:58:3a:
3b:7d:64:6f:94:fa:ff:94:4c:4f:ab:fb:ea:f8:f7:
a2:ad:e9:e9:96:0a:12:5c:83:1e:7b:c4:5d:ed:bb:
98:6a:16:23:0c:9d:ee:49:d8:a8:4c:81:9b:d4:d4:
e1:e5:be:89:5f:e1:b1:6e:d3:f8:2a:b3:88:86:2d:
c1:e6:62:18:3c:3d:f8:6e:70:0e:c7:34:f4:6e:7b:
c0:0b:dc:f1:dd:b7:5b:1e:58:66:d5:e1:71:12:d5:
35:23:8a:c6:1b:af:a7:24:33:0c:c8:8f:50:61:97:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:18:29:91:27:25:D8:4D:2A:C9:DB:CB:63:19:A5:A9:1E:37:61:3F
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/iRgpkScl2E0qydvLYxmlqR43YT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1080::/48
Signature Algorithm: sha256WithRSAEncryption
1e:b3:be:25:c5:b6:94:ed:e6:77:4c:13:b1:3d:f8:32:8b:7d:
90:ec:a2:4e:26:9d:2f:d7:ad:a2:3e:60:0c:fc:3d:6a:43:01:
09:41:a5:f9:8c:33:9a:7f:a8:b5:19:78:99:7a:f0:11:c5:2e:
75:7f:71:95:2d:7c:82:21:d5:7a:83:49:20:2f:5c:1f:a1:10:
78:3b:4c:92:95:c2:8d:c8:62:2f:df:3b:9d:ce:45:e3:b6:c8:
c4:24:81:6d:13:1e:bf:34:b9:cd:09:b6:14:d8:bd:27:68:25:
d2:ed:0d:c9:eb:bf:1d:27:3e:2e:ed:3b:d3:1e:3e:1e:02:72:
5c:cb:cc:78:91:be:2e:96:25:9d:e8:7e:37:ab:3b:b2:3e:34:
4a:11:0d:59:40:e3:46:20:ad:57:0f:c4:78:da:f6:95:02:4c:
d6:20:3c:64:8c:03:f7:77:f8:7c:67:f3:5d:84:55:eb:a2:fe:
68:6f:12:3d:2e:c1:a6:fc:69:d2:88:c5:a8:89:2f:94:4c:a9:
04:bc:8a:c9:e5:fa:10:e4:ca:fb:f0:93:e3:79:23:76:b5:00:
0e:04:94:d0:fc:01:28:56:c0:63:30:e0:f0:97:cf:b2:26:20:
cb:07:89:36:02:29:4f:84:19:3a:c6:4a:25:bd:d3:38:b7:e7:
3f:25:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:25:11 2026 by rpki-client