This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/djBGBe9HqvFt7_WabJRUgnTlUhU.roa
File: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (raw, json)
Hash identifier: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=
Subject key identifier: 76:30:46:05:EF:47:AA:F1:6D:EF:F5:9A:6C:94:54:82:74:E5:52:15
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019B797EEB6FB417D2F5FB7B380E4CFC8AB9
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/djBGBe9HqvFt7_WabJRUgnTlUhU.roa
Signing time: Thu 01 Jan 2026 12:18:39 +0000
ROA not before: Thu 01 Jan 2026 12:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39405
IP address blocks: 185.118.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:eb:6f:b4:17:d2:f5:fb:7b:38:0e:4c:fc:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Jan 1 12:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76304605ef47aaf16deff59a6c94548274e55215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:d6:b8:c2:59:b9:58:56:45:06:ef:31:e5:
d0:c7:a4:7b:f3:7d:93:56:14:77:37:f0:f1:dc:a4:
bf:3f:cd:a6:e4:76:40:72:86:ad:73:b6:ee:88:b2:
e0:04:5e:78:3b:eb:fc:14:9f:a5:b9:41:08:ca:69:
21:40:4a:61:51:8f:76:29:07:83:9f:51:5a:18:f9:
3f:81:80:8d:14:6f:e3:16:fa:40:97:c2:4c:69:f3:
22:88:a7:12:aa:6d:6d:2a:e7:56:30:e3:14:bf:8b:
e9:15:f3:6b:28:59:c6:97:8b:21:e4:f7:3d:75:ec:
f6:94:36:fe:b9:6f:c3:74:ee:57:5e:1c:ec:2c:d1:
c3:4b:96:4d:be:ac:91:9e:35:79:f9:6d:be:06:dd:
0e:11:8d:6f:c8:ba:a2:4f:c1:ae:d0:d8:7f:c7:c5:
c5:7d:21:d4:91:88:a4:d0:7c:c9:39:bf:25:76:aa:
b5:aa:22:34:89:df:55:c9:f9:6b:2e:bb:70:2c:10:
63:b6:ea:9a:0a:4a:b8:7c:a6:77:d0:c9:b5:a3:07:
19:c7:35:26:49:82:be:27:d5:95:90:90:d6:1e:30:
b8:48:83:0e:5c:86:14:bd:1d:8c:96:97:f8:ad:9f:
9a:66:4e:a1:2e:b2:7d:41:1e:e2:ed:a8:4d:60:c9:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:46:05:EF:47:AA:F1:6D:EF:F5:9A:6C:94:54:82:74:E5:52:15
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/djBGBe9HqvFt7_WabJRUgnTlUhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.119.0/24
Signature Algorithm: sha256WithRSAEncryption
30:08:e6:e1:9b:48:0e:62:c0:9b:3b:0c:fe:35:4f:02:c3:8c:
34:e6:ca:50:58:4f:47:5e:7b:d7:a5:26:bd:e1:e7:26:bc:dd:
ed:bc:0c:11:de:56:fd:31:93:1f:1d:c3:e4:a9:32:57:ba:94:
f7:85:de:23:e1:b4:8a:72:d4:86:59:5b:89:f2:86:1b:dc:dd:
ea:75:e4:c1:ea:e1:c3:92:ca:ae:e6:cf:ba:9e:47:49:0c:56:
91:85:ef:5c:93:1a:2c:e4:f6:95:95:75:45:b5:db:0a:63:3f:
be:1d:a8:cf:b6:3a:8d:ed:be:f7:fd:01:51:31:6b:53:04:7b:
1d:cc:01:9d:b9:28:cd:3b:58:ad:a1:57:b9:63:56:1b:7b:08:
5d:4a:90:92:8a:ae:01:93:ba:47:1b:b1:fe:8b:b3:f2:5f:fe:
03:35:b7:7f:49:84:d5:02:fe:ed:e9:1c:9f:b5:87:6f:6b:22:
03:01:e1:91:0c:1b:10:7a:0d:29:21:4a:a8:f8:56:56:c0:e9:
6a:ba:77:65:f4:3f:0c:54:7a:9e:03:fb:a8:6a:b8:1a:f3:17:
ec:28:d6:c7:c5:f6:92:4d:e6:16:0e:fe:d6:f5:1e:17:ff:06:
7c:23:26:0b:71:24:aa:a0:fd:90:65:82:5f:b5:42:37:5a:c7:
d2:c7:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:32:46 2026 by rpki-client