This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/nvDGi2VWUxlJY5ddjwd_81AUYcU.roa
File: nvDGi2VWUxlJY5ddjwd_81AUYcU.roa (raw, json)
Hash identifier: nwWq6f8Ne8jkmyjzTCC/7xkGZ6i70k+BSewMhaIlbJs=
Subject key identifier: 9E:F0:C6:8B:65:56:53:19:49:63:97:5D:8F:07:7F:F3:50:14:61:C5
Certificate issuer: /CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Certificate serial: 019B7C12A766847110863E6E10D08EEC63C7
Authority key identifier: 2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/nvDGi2VWUxlJY5ddjwd_81AUYcU.roa
Signing time: Fri 02 Jan 2026 00:19:15 +0000
ROA not before: Fri 02 Jan 2026 00:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60359
IP address blocks: 80.78.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:a7:66:84:71:10:86:3e:6e:10:d0:8e:ec:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3d5adb1d064369b7e41baebdb0e8e135d65763
Validity
Not Before: Jan 2 00:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ef0c68b655653194963975d8f077ff3501461c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:c3:92:76:cd:b2:06:f1:d1:c2:70:ae:7f:
9a:a9:18:ba:27:53:35:d0:4f:cc:39:29:29:f6:0e:
78:66:a8:cf:85:85:43:8a:11:a8:0e:fd:fc:ec:3b:
b5:65:9f:56:ae:09:0a:97:2d:32:4f:98:40:84:64:
81:88:2e:4f:26:11:76:a0:7c:d2:7c:ac:9c:d0:44:
62:11:bb:1a:de:17:32:bb:51:ea:be:57:05:9e:1b:
f3:61:5f:2c:8f:07:8e:d3:92:73:4f:b6:fe:e8:54:
ae:c6:05:48:90:c6:fc:4a:ff:b8:54:3b:e5:53:b9:
fc:c8:91:1c:de:dc:5b:a0:2e:1e:eb:27:61:92:31:
30:e7:f0:6a:df:ab:8a:1b:f0:e9:ad:03:14:39:10:
53:a0:91:57:1f:05:f4:f9:a1:0a:f7:f0:a7:bc:11:
99:b0:9a:12:fc:78:98:2e:ad:13:9f:3b:31:d9:f7:
df:2d:26:79:02:8b:fc:44:33:65:9d:a1:6b:8e:d0:
0b:8e:63:d0:cf:ac:7d:ad:30:c7:5e:8c:3c:ee:79:
db:37:89:7d:ac:cc:9f:9d:e5:91:b7:72:24:ac:aa:
cc:ea:b4:c1:60:bd:78:98:f8:7f:a7:30:5c:95:67:
79:cd:24:56:e1:c6:e8:f0:e4:3b:4e:76:05:07:c6:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:C6:8B:65:56:53:19:49:63:97:5D:8F:07:7F:F3:50:14:61:C5
X509v3 Authority Key Identifier:
keyid:2E:3D:5A:DB:1D:06:43:69:B7:E4:1B:AE:BD:B0:E8:E1:35:D6:57:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/nvDGi2VWUxlJY5ddjwd_81AUYcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/87615a-3ca3-4b5b-810c-bebf42fbe846/1/Lj1a2x0GQ2m35BuuvbDo4TXWV2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.63.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7d:2b:1d:36:13:b8:3c:5a:b3:9b:10:de:40:12:bd:b6:d0:
de:89:17:ee:3b:c3:e3:87:0b:0a:c1:e7:f8:0d:78:34:92:52:
b7:c3:df:e9:fd:ef:2e:f0:3c:9a:34:ed:29:f7:d7:aa:56:31:
aa:19:be:30:66:41:35:ca:4b:da:55:80:5f:b4:f0:64:ac:9f:
bb:f1:24:a2:aa:58:85:92:45:1c:8b:60:67:2c:c9:f4:9a:e1:
73:e3:b0:06:46:7b:e2:9a:0a:84:46:e7:e0:4e:67:ce:c2:1a:
36:37:46:41:c0:34:06:b9:3b:54:ac:16:05:f5:1c:b2:48:b8:
85:a3:2b:31:26:d5:66:05:f2:90:bb:ab:94:9f:e5:14:ca:fe:
5d:f4:45:9f:b7:0f:5d:d1:a3:f7:57:cc:3b:9e:c0:40:d6:4f:
20:93:7f:08:af:05:b1:ca:9e:3d:8f:c8:87:79:2c:d9:d8:95:
a9:58:c6:ae:5a:37:83:a9:94:c7:cf:44:7e:4a:2a:56:a1:61:
7c:4a:9f:93:f2:16:cb:c7:73:c5:4e:62:ec:3d:1c:0c:ed:fe:
ae:b0:a3:76:38:7d:28:2c:c1:f1:10:1c:e0:d6:f0:43:e2:16:
a5:67:3a:96:60:81:21:85:92:1e:12:ef:07:6f:fd:b6:3d:b0:
01:48:36:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:50 2026 by rpki-client