This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/yVxkpnNWNPmfLM8KiJbpmmzhscw.roa
File: yVxkpnNWNPmfLM8KiJbpmmzhscw.roa (raw, json)
Hash identifier: wqxbIcyfrK8aJMxY/yMeGWSpob5ZYuT+6YYKdi4r/Pc=
Subject key identifier: C9:5C:64:A6:73:56:34:F9:9F:2C:CF:0A:88:96:E9:9A:6C:E1:B1:CC
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 019B775888655F2D92FC7D8509E7ADF77AEB
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/yVxkpnNWNPmfLM8KiJbpmmzhscw.roa
Signing time: Thu 01 Jan 2026 02:17:29 +0000
ROA not before: Thu 01 Jan 2026 02:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2472
IP address blocks: 193.48.161.0/24 maxlen: 24
193.48.162.0/24 maxlen: 24
193.49.230.0/24 maxlen: 24
193.50.134.0/24 maxlen: 24
193.51.118.0/24 maxlen: 24
193.55.4.0/24 maxlen: 24
194.214.214.0/24 maxlen: 24
194.254.208.0/24 maxlen: 24
195.98.226.0/24 maxlen: 24
195.98.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:88:65:5f:2d:92:fc:7d:85:09:e7:ad:f7:7a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 02:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c95c64a6735634f99f2ccf0a8896e99a6ce1b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:b5:18:1a:a7:33:52:ca:b2:53:a8:5a:88:
fb:c7:2a:77:7d:ff:7a:3a:05:40:22:00:89:53:18:
f9:e5:a5:60:82:a5:dd:2f:ab:22:32:35:7f:84:15:
d7:ea:cb:d0:8d:b7:7e:e8:dc:a8:88:d2:33:76:e2:
8c:1f:8a:1e:42:28:26:fc:64:14:6b:1e:7a:3d:43:
79:3d:5b:4a:40:3b:5a:52:d3:18:74:bb:4d:dd:b6:
6f:4d:52:98:6c:2e:68:38:96:14:31:d7:8c:98:a2:
08:c6:f2:d6:d0:f2:9b:cb:98:7d:45:b9:57:01:e8:
21:3f:de:7e:bc:ce:b7:b8:f5:a1:a8:9d:79:f9:c4:
0c:32:88:e3:da:aa:d8:33:7a:62:dc:fd:bb:a9:a2:
72:11:0a:77:1c:67:d1:62:f1:11:74:fb:6f:d2:57:
15:f4:1f:30:95:04:3b:af:fd:18:23:0a:ab:4b:61:
c2:ea:05:7c:1c:da:24:79:91:5a:af:48:4a:f6:89:
f3:34:95:61:0b:1c:5f:e0:a5:b3:2f:aa:49:5b:a8:
29:8c:44:30:7e:6e:e9:1d:6b:4c:20:6f:6f:3a:61:
00:f0:47:34:69:4b:3a:e4:71:ce:22:a6:0f:b1:59:
4b:42:be:e1:e6:f6:26:c1:2b:20:8f:75:a9:17:7b:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5C:64:A6:73:56:34:F9:9F:2C:CF:0A:88:96:E9:9A:6C:E1:B1:CC
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/yVxkpnNWNPmfLM8KiJbpmmzhscw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.48.161.0-193.48.162.255
193.49.230.0/24
193.50.134.0/24
193.51.118.0/24
193.55.4.0/24
194.214.214.0/24
194.254.208.0/24
195.98.226.0/23
Signature Algorithm: sha256WithRSAEncryption
65:aa:57:e4:e9:f2:87:87:d8:9b:81:d8:28:04:3a:7b:45:25:
ef:85:f7:61:bc:48:e5:31:0f:91:4d:52:f1:fc:92:19:c0:3d:
b1:0d:83:f6:7c:0c:c8:f2:9b:29:53:04:79:4a:b7:52:6d:ba:
93:e6:2a:49:72:35:c8:c5:1c:04:51:f8:4d:b4:83:f7:e4:a2:
2e:87:bb:88:b3:46:8c:64:4f:89:9b:bf:bb:d2:63:ea:e8:6d:
f0:bc:77:56:56:e3:05:f5:3b:a0:d7:27:50:08:07:45:9f:77:
5f:f1:44:6b:8e:09:71:5b:e8:b0:3a:1f:91:52:d8:5b:4e:4a:
a6:30:9b:a1:5e:16:e5:7b:30:53:8e:29:5a:ec:ee:66:1a:75:
65:a3:21:f0:d9:f7:8f:87:49:d7:5e:17:9c:ae:26:ed:e9:87:
65:c4:4b:86:c1:08:a6:e1:bb:96:ce:5b:0a:b7:5c:7f:87:3e:
e2:fd:4a:1d:07:4a:b9:7a:e9:75:e8:a5:74:00:6a:dd:34:ec:
62:cd:1d:a8:08:fe:8f:65:97:bc:1e:95:9d:75:56:1d:ad:48:
c7:08:50:eb:17:cd:da:62:5c:bd:e1:81:d2:76:79:cc:a4:fb:
64:66:9a:e7:83:6e:ec:33:6d:69:1c:d1:c0:b2:f3:12:0f:80:
9c:7e:cf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:39:11 2026 by rpki-client