This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/sYd3XN4uHfxAz8H1K9PwUScQprc.roa
File: sYd3XN4uHfxAz8H1K9PwUScQprc.roa (raw, json)
Hash identifier: DDMqRvtsXQN4lxerdF1mUWxEx9IF8CVqZoQJ/ajBN8A=
Subject key identifier: B1:87:77:5C:DE:2E:1D:FC:40:CF:C1:F5:2B:D3:F0:51:27:10:A6:B7
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019B7B35BFAE88BE503C33FD0F22C9703742
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/sYd3XN4uHfxAz8H1K9PwUScQprc.roa
Signing time: Thu 01 Jan 2026 20:17:58 +0000
ROA not before: Thu 01 Jan 2026 20:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 193.36.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:bf:ae:88:be:50:3c:33:fd:0f:22:c9:70:37:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Jan 1 20:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b187775cde2e1dfc40cfc1f52bd3f0512710a6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:29:be:d4:77:8c:86:48:81:db:bf:7a:f4:
48:71:2a:45:61:47:2a:4a:96:e5:02:94:14:7a:75:
4b:88:44:4e:c5:ae:9c:68:c2:85:a3:63:ec:ba:fa:
d8:f1:9e:78:53:3b:d9:47:ad:1f:03:8e:46:0d:c0:
12:bd:e1:b8:8c:69:56:ad:c4:87:78:63:a9:e2:19:
69:c1:91:82:26:eb:c0:9c:4a:86:0f:cc:71:dd:51:
fe:81:2a:5c:c4:0f:cf:48:65:82:4e:bc:9d:74:1d:
67:2b:ed:59:19:77:c8:52:cc:f7:21:15:5c:4b:d7:
89:8c:ff:58:7d:33:07:83:06:3d:73:f9:68:cc:8f:
3e:88:47:7f:df:67:5e:0e:83:8a:65:5f:b8:ed:64:
7b:00:f2:dd:18:5f:4e:07:3e:fc:21:28:d7:28:25:
56:18:9b:9d:7e:ef:57:fb:e6:34:32:a6:8c:15:b0:
39:55:28:54:7c:d2:bf:43:4d:6f:ff:94:6b:cf:19:
69:9a:b6:2b:6f:b3:94:da:d9:da:f5:40:64:6f:5b:
b5:26:9e:c2:b9:4b:e8:25:79:8a:60:fe:47:62:95:
b4:2d:b8:7b:e6:98:5f:d8:69:5d:b6:42:06:e8:4b:
55:47:19:d5:92:04:42:12:b8:29:fd:61:d9:3c:6f:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:77:5C:DE:2E:1D:FC:40:CF:C1:F5:2B:D3:F0:51:27:10:A6:B7
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/sYd3XN4uHfxAz8H1K9PwUScQprc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.93.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5e:ae:26:51:f8:e2:79:d4:5e:50:35:fc:ae:f1:15:1e:07:
a8:ca:39:20:9e:1a:5e:c9:ff:4f:22:c3:a1:d4:00:0f:8a:2b:
72:fd:f7:59:e6:e3:a6:e6:1a:6b:7f:db:4f:26:3f:1c:54:82:
a8:b8:f6:8e:23:e1:01:ba:bb:9d:54:ad:ea:fb:53:65:60:d1:
7b:89:09:cc:e7:83:86:75:98:ac:b6:bb:ec:b9:4f:79:7f:d2:
f5:45:ca:4c:89:c5:fd:3b:ac:56:d9:fc:54:fa:8d:92:1c:8b:
97:f0:01:13:5c:38:13:04:cc:0b:8d:ff:14:2a:b3:2d:8b:07:
f7:ca:a0:5d:27:dc:5c:9c:df:94:56:94:c5:52:e7:fc:2a:70:
9d:ae:85:92:1b:7e:0e:8a:c8:c7:08:7a:0c:c6:4a:e7:f6:30:
b4:de:fe:06:bc:7d:df:d8:20:45:a3:d6:4a:fb:3b:8f:31:9c:
bc:25:43:f1:ad:9f:03:e5:67:35:91:1c:ac:18:bd:e0:fd:d5:
b4:d8:9b:60:6f:52:f2:39:93:fc:52:d4:e3:4e:09:07:16:59:
89:d5:21:1d:12:e9:25:b1:88:8e:d9:2d:1c:9c:e9:c7:42:f4:
fd:df:8f:62:99:bd:f7:23:61:2e:3f:bf:36:f1:66:d8:14:d0:
65:7d:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:36 2026 by rpki-client