This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/U2VBzZjxuUEG7jBJne-b7fm_w5Q.roa
File: U2VBzZjxuUEG7jBJne-b7fm_w5Q.roa (raw, json)
Hash identifier: 8aRNgSR8HA+VvI/YQOm/0nr6qkxRB9YXLUxiFxn77ns=
Subject key identifier: 53:65:41:CD:98:F1:B9:41:06:EE:30:49:9D:EF:9B:ED:F9:BF:C3:94
Certificate issuer: /CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Certificate serial: 019B7F83094956A11C94813DB3A87EC794C4
Authority key identifier: 16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/U2VBzZjxuUEG7jBJne-b7fm_w5Q.roa
Signing time: Fri 02 Jan 2026 16:20:52 +0000
ROA not before: Fri 02 Jan 2026 16:20:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 188.93.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:09:49:56:a1:1c:94:81:3d:b3:a8:7e:c7:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Validity
Not Before: Jan 2 16:20:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=536541cd98f1b94106ee30499def9bedf9bfc394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:31:cf:2f:df:c7:ff:ea:a0:3b:27:03:de:
38:45:76:e4:d3:c3:0f:6d:32:73:09:a7:a2:62:53:
9c:9e:24:80:aa:93:ae:85:d3:67:79:a7:99:b5:2c:
03:52:fe:a2:8d:a4:82:97:b2:bf:c3:bd:62:fc:ce:
18:e9:9a:14:d9:c9:00:fa:02:ec:96:a6:9b:e7:f5:
90:89:88:67:90:7e:77:11:34:2d:ba:1f:df:45:15:
a7:c3:95:14:d8:bb:3b:08:0b:09:8d:0b:87:a1:1a:
5c:83:3a:46:74:10:cc:e4:e5:f4:de:c5:01:56:9b:
c3:90:69:d0:9c:e2:d0:00:eb:30:91:ea:18:62:da:
9d:a3:77:0d:55:20:2d:bf:93:70:7f:8b:18:d5:b5:
f4:3b:9f:3f:11:27:83:1b:ed:30:c7:c1:de:b5:79:
04:ef:1e:fc:4a:93:d2:35:fa:0e:c7:8a:6b:5d:4b:
18:5a:f0:72:96:06:54:9a:ad:69:74:96:48:86:f1:
c3:89:c2:c2:47:99:b2:3d:19:af:a6:a5:65:23:c6:
bc:27:18:2a:6f:84:d3:12:7a:f6:91:6d:b9:8b:28:
73:33:bf:25:e9:bc:67:69:2c:78:30:7c:03:77:99:
ae:bb:43:47:df:6d:72:6d:34:c2:ac:51:c9:b4:c2:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:41:CD:98:F1:B9:41:06:EE:30:49:9D:EF:9B:ED:F9:BF:C3:94
X509v3 Authority Key Identifier:
keyid:16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/U2VBzZjxuUEG7jBJne-b7fm_w5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4d:33:b3:ec:d8:c6:94:b3:e0:cd:b9:f9:f6:6c:53:9a:83:
e0:34:98:80:f0:b2:3e:3b:ae:41:d3:28:5a:c9:f6:4f:67:fe:
b1:9d:5f:f9:d8:ad:b0:1a:58:f9:62:44:8a:d8:fa:74:11:63:
61:e7:9f:65:09:0a:8d:72:d4:57:36:7f:74:fc:0b:b6:fa:c9:
ed:1a:15:ff:9d:ec:cb:62:2d:e5:30:06:3d:6d:ca:29:59:18:
1c:92:db:8c:4c:b7:e7:4f:f4:35:8e:2e:d9:2f:1b:6a:d3:fd:
d1:c2:92:4e:34:26:cf:28:77:2a:94:5c:6e:53:61:5f:55:7d:
d5:23:fd:05:ba:d4:ee:58:f4:a5:8f:bd:55:8c:3e:49:43:99:
f2:f3:ec:99:9a:b2:a5:c2:35:f0:d5:4e:57:da:3b:cf:36:46:
e7:f4:fc:06:4b:e5:5a:12:18:03:bf:a9:10:cc:ad:54:50:ba:
12:ec:81:12:8d:b5:49:74:31:46:a7:2b:14:ca:14:fc:cc:0c:
1a:97:54:c3:7f:a1:41:82:57:33:12:5a:f4:11:03:1a:22:1d:
99:ea:4a:dc:18:ca:b7:5d:79:ca:5b:64:6e:bb:8e:10:0d:4d:
87:87:bf:33:a0:21:c7:4d:b3:9f:97:f1:84:c0:ac:aa:fe:46:
b8:6b:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:35 2026 by rpki-client