This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/sWc0x8xdprid2J0LIhsIpRR0BBk.roa
File: sWc0x8xdprid2J0LIhsIpRR0BBk.roa (raw, json)
Hash identifier: MM549Xitzolq2k3RRgaWuIzqMTH1U55wOE7cKGGNAZg=
Subject key identifier: B1:67:34:C7:CC:5D:A6:B8:9D:D8:9D:0B:22:1B:08:A5:14:74:04:19
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 019B7D5CC9A5E860ECB1263435BBFB407DEB
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/sWc0x8xdprid2J0LIhsIpRR0BBk.roa
Signing time: Fri 02 Jan 2026 06:19:51 +0000
ROA not before: Fri 02 Jan 2026 06:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39227
IP address blocks: 2a00:1f78:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:c9:a5:e8:60:ec:b1:26:34:35:bb:fb:40:7d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 2 06:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b16734c7cc5da6b89dd89d0b221b08a514740419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:46:a6:f7:24:d8:52:cf:78:62:d0:15:e0:
1c:ee:36:b5:97:ce:d0:f7:4c:bf:77:58:4c:9e:32:
eb:6f:64:39:6f:ea:19:79:4f:86:7c:0c:b3:88:26:
db:7b:68:85:f2:0d:9b:5e:7b:01:2a:13:46:bc:4d:
b2:2b:d0:ed:77:79:51:71:37:21:2c:0d:2a:c3:59:
dc:83:2a:fe:c4:cc:b9:d4:b1:a1:9b:71:36:7d:db:
56:6e:f7:d0:5b:79:ef:c7:f8:78:fa:96:04:59:e7:
95:82:51:28:c7:9e:a9:ea:a5:c2:99:9f:4f:db:8c:
a1:cd:f2:24:5a:32:6d:16:4f:e1:70:fa:97:f9:05:
e5:4a:bd:d3:95:3e:ea:0d:61:47:a7:f3:85:3b:07:
52:6f:f8:ae:a4:fd:00:72:66:58:2a:61:c2:7c:01:
8b:db:19:1d:95:16:76:a0:e2:37:13:7a:7c:39:73:
78:9a:69:9c:7a:75:09:99:8b:cf:61:17:df:00:25:
a7:a0:12:b7:a7:81:0f:6a:77:5b:8d:4c:8c:78:eb:
0e:00:ec:a0:ad:9e:ea:0f:5b:16:9c:5c:88:3d:6e:
16:ed:d9:8a:dd:32:38:31:2c:37:b4:83:e9:42:16:
dc:84:da:06:4a:60:53:8c:df:e0:7a:f4:9b:ed:61:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:67:34:C7:CC:5D:A6:B8:9D:D8:9D:0B:22:1B:08:A5:14:74:04:19
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/sWc0x8xdprid2J0LIhsIpRR0BBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1f78:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
16:08:fd:e6:8a:71:c7:82:7b:34:e2:d8:e5:df:ca:a1:22:cf:
96:e8:5c:a2:e0:7f:58:d0:8d:7b:54:b3:88:bd:b0:45:44:d5:
09:d9:b1:a2:23:9b:66:a1:a8:14:33:ca:fd:ac:27:d1:57:09:
1f:16:57:cd:95:bd:08:5a:6e:ca:e5:29:9e:c5:db:6c:17:53:
30:b2:2c:56:6d:40:4c:51:41:e7:05:a6:cf:22:5c:56:b0:49:
34:ca:36:81:ea:81:b0:f4:01:d0:5d:98:39:0c:9f:da:62:3b:
b9:96:03:8a:a0:d7:c7:f7:78:b0:38:d5:10:a6:7c:70:39:c5:
40:b6:1e:f7:a0:40:15:ae:5f:db:16:58:68:57:c3:8b:36:c9:
c9:2a:c1:45:98:62:96:00:e8:e7:7d:bd:eb:6e:f0:98:be:1e:
65:6e:d9:c4:6d:38:8a:25:12:d2:53:78:7a:9a:dc:e2:39:cd:
66:49:f3:6f:a1:05:26:e9:70:af:93:59:3c:87:15:b7:f2:4a:
9c:d0:a8:67:b3:a9:b2:ff:77:2e:25:71:8e:22:70:cf:77:d3:
87:82:d8:c6:c5:56:8a:37:c5:ed:93:b0:cb:3c:ae:fc:66:7f:
a6:d5:c1:d2:b1:f7:7e:88:7f:3a:9e:50:2d:8c:32:71:a3:f9:
b9:c7:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:42 2026 by rpki-client