This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/05QIvJOOAUXqj808lKMxTvcjpgI.roa
File: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (raw, json)
Hash identifier: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=
Subject key identifier: D3:94:08:BC:93:8E:01:45:EA:8F:CD:3C:94:A3:31:4E:F7:23:A6:02
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019B7E382A731AC85E7E8C30363BA94B7FB9
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/05QIvJOOAUXqj808lKMxTvcjpgI.roa
Signing time: Fri 02 Jan 2026 10:19:28 +0000
ROA not before: Fri 02 Jan 2026 10:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60258
IP address blocks: 82.194.16.0/24 maxlen: 24
82.194.17.0/24 maxlen: 24
82.194.18.0/24 maxlen: 24
82.194.19.0/24 maxlen: 24
82.194.20.0/24 maxlen: 24
82.194.21.0/24 maxlen: 24
82.194.22.0/24 maxlen: 24
82.194.23.0/24 maxlen: 24
82.194.24.0/24 maxlen: 24
82.194.25.0/24 maxlen: 24
82.194.26.0/24 maxlen: 24
82.194.27.0/24 maxlen: 24
82.194.28.0/24 maxlen: 24
82.194.29.0/24 maxlen: 24
82.194.30.0/24 maxlen: 24
82.194.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:2a:73:1a:c8:5e:7e:8c:30:36:3b:a9:4b:7f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Jan 2 10:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d39408bc938e0145ea8fcd3c94a3314ef723a602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:9f:28:2a:70:e9:5b:28:5c:ea:f5:ac:60:
4c:27:d6:4e:50:53:07:f0:67:9e:c3:44:00:3d:09:
a4:a2:ec:a9:7e:21:10:b8:1a:da:63:5c:60:17:a6:
c1:55:48:57:45:96:e4:f4:c6:99:95:7c:1e:96:16:
c5:28:d2:b9:2e:c2:0a:f2:6b:59:74:e0:52:e7:2e:
4d:be:03:87:48:85:b1:93:18:4f:5f:91:1f:9a:4f:
8b:69:e3:4b:8a:35:47:a8:0f:f8:9b:72:e5:51:fa:
94:8e:f3:18:9a:f4:a4:b3:a7:8f:4f:05:77:64:1a:
5e:35:6c:38:a5:b9:00:85:bc:80:09:0c:83:10:15:
9a:03:bd:00:be:d3:1c:b1:18:73:10:bf:22:79:21:
49:51:0f:31:b7:b8:bf:d5:94:f7:4c:8a:39:69:ca:
12:cd:4f:03:57:28:13:69:9e:c1:e1:f6:3e:fb:df:
58:e9:83:b5:88:4e:19:3e:b6:73:ea:df:d3:6f:51:
23:10:7e:7b:b8:33:5f:74:2e:c2:0d:df:64:b6:37:
a7:15:20:e8:74:8b:a9:61:2f:58:6f:60:40:fe:db:
6b:6f:75:8e:70:29:da:2e:92:26:b7:1d:4d:22:e7:
24:d6:54:47:1f:02:9a:2f:01:39:d3:92:29:77:1b:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:08:BC:93:8E:01:45:EA:8F:CD:3C:94:A3:31:4E:F7:23:A6:02
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/05QIvJOOAUXqj808lKMxTvcjpgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:54:47:85:9d:82:37:52:b2:4e:bb:3d:e3:fc:e9:33:c6:3e:
5f:f9:77:cf:a0:d4:ab:82:32:3d:9b:a5:78:a2:04:c3:13:71:
c8:44:f4:55:cf:eb:f1:f2:61:49:f4:ff:73:dc:ba:b2:59:36:
5d:c4:8f:92:b7:6b:ab:13:44:94:f3:8f:dc:fb:ce:8c:f4:bb:
ac:0e:48:ca:f4:e2:fb:68:1f:37:15:12:90:74:5a:c4:5e:0f:
81:92:2d:2b:e8:ea:26:ca:3d:1f:60:bb:46:91:34:52:61:95:
03:2b:c3:95:fc:4b:23:cb:dc:9e:fc:f7:76:12:bc:ee:aa:94:
1c:57:eb:ed:ec:7e:fa:8c:a5:00:95:f6:80:a2:93:bf:a3:9e:
dc:77:c6:9c:2c:26:67:d3:eb:e9:9c:15:11:0d:e4:cf:0d:66:
64:87:38:87:dc:ff:74:a6:d3:ea:34:84:4f:97:70:ec:f5:3b:
69:92:d5:64:61:ef:0c:ca:5f:d3:ee:d3:68:fd:39:e3:f4:5b:
db:c6:bc:d7:bd:d0:2d:db:cd:37:98:16:e8:7a:54:9e:f2:34:
06:9c:75:fb:c5:73:51:cf:67:f4:75:e6:f1:dc:a3:e8:7c:6e:
c0:b1:58:7f:8a:e4:91:57:73:41:19:23:0f:14:75:4f:dc:54:
20:e2:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:54:27 2026 by rpki-client