This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa
File: YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa (raw, json)
Hash identifier: r+jOonrhaqNcXtHMcC3c05txxmDgPgiD9LqnOUDboTM=
Subject key identifier: 61:53:9F:71:80:5E:D4:2B:4B:47:CA:43:61:ED:6F:48:B4:11:84:99
Certificate issuer: /CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Certificate serial: 019B7AC89559435BDFF4F72B86593C5A5509
Authority key identifier: 2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa
Signing time: Thu 01 Jan 2026 18:18:44 +0000
ROA not before: Thu 01 Jan 2026 18:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44090
IP address blocks: 193.107.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:95:59:43:5b:df:f4:f7:2b:86:59:3c:5a:55:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed4087a3727f047e096db692e003d6c0113f1e2
Validity
Not Before: Jan 1 18:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61539f71805ed42b4b47ca4361ed6f48b4118499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:4c:91:b6:71:22:6d:bd:46:d8:40:94:e0:
27:f8:6c:36:b0:7d:ad:99:fb:2c:b4:98:7b:32:b2:
63:60:0f:f5:f8:e8:b6:3c:f1:ad:23:4c:c1:ed:6b:
98:b2:8c:4a:e3:1d:25:f8:56:a5:41:ce:c8:c2:ec:
02:ef:69:46:76:5b:95:b4:92:f6:f9:3f:84:03:c4:
3c:5e:46:d8:ef:d5:44:38:82:0e:a1:d2:b9:53:12:
83:31:d5:e7:36:34:a8:a5:50:28:5f:1f:96:ff:e1:
d8:2e:a1:f3:d1:0a:16:ba:d1:47:5d:0a:bc:e5:04:
d6:e7:f9:c1:f5:f0:ba:0d:e3:27:e5:b9:0d:04:2f:
fd:38:91:9a:f5:e7:7f:22:b4:b1:90:a8:a8:0c:3f:
39:2a:33:63:dd:73:3c:aa:68:43:f7:c8:f2:67:1a:
55:fc:07:82:08:30:45:4b:db:1a:5a:34:a4:30:3d:
81:d7:bf:2a:f4:9d:64:18:bc:96:d6:23:4f:16:5a:
dc:c6:dd:40:5d:45:e9:eb:46:dd:fe:ff:88:b2:94:
ce:8a:ad:33:b3:02:80:a0:96:77:39:8a:d9:00:91:
1e:c3:4d:b9:90:ad:44:02:c6:b4:0a:36:02:4a:10:
27:74:a9:05:23:80:5e:26:87:4c:4b:7e:23:f8:e8:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:9F:71:80:5E:D4:2B:4B:47:CA:43:61:ED:6F:48:B4:11:84:99
X509v3 Authority Key Identifier:
keyid:2E:D4:08:7A:37:27:F0:47:E0:96:DB:69:2E:00:3D:6C:01:13:F1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtQIejcn8EfglttpLgA9bAET8eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/YVOfcYBe1CtLR8pDYe1vSLQRhJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/539ddb-5078-481c-9b72-cc84eb42ac39/1/LtQIejcn8EfglttpLgA9bAET8eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.44.0/24
Signature Algorithm: sha256WithRSAEncryption
50:69:e6:ff:03:08:1c:a9:56:39:d8:94:61:b4:40:9b:9e:c3:
66:4a:5a:86:d5:8d:f7:9d:db:09:ab:93:74:79:33:9b:0d:a2:
d8:48:e5:ce:f0:25:a7:0f:4d:58:04:14:78:97:51:95:71:53:
09:fc:a5:c6:f5:12:dd:64:e0:4d:77:de:39:1e:fb:f7:33:17:
93:27:78:f3:91:d3:90:29:55:f9:1d:14:e5:8b:be:5d:44:53:
f1:2d:31:57:33:ee:8d:09:9f:46:49:e0:a9:9b:67:88:6a:26:
63:ed:cc:ba:ec:3f:92:b2:c9:b2:44:b3:6a:2b:91:e4:59:a0:
e5:7e:93:bb:13:9d:d1:e9:0d:fb:ac:6b:af:23:2a:57:86:7f:
4b:ef:3b:8b:91:a4:50:e4:1f:80:a7:7f:27:9d:6c:77:3d:ac:
66:34:4a:63:c3:04:3e:34:d0:f4:25:57:b5:fc:ec:e8:da:a6:
65:50:6a:97:1e:42:ec:e6:9f:5d:ce:1d:ec:42:51:9c:f2:11:
5a:7c:ee:33:37:09:0d:b1:fd:5e:16:28:7b:96:d0:96:e8:6a:
2b:66:82:4c:63:eb:9d:2c:f1:ac:ae:2b:67:c7:6b:6d:f8:5d:
ac:cd:7a:5d:18:b7:a5:d7:3a:54:fb:b4:a1:de:58:e1:16:55:
a1:69:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:04:56 2026 by rpki-client