This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/i0WslBSNbZGrjfVFMISsJmr6unc.roa
File: i0WslBSNbZGrjfVFMISsJmr6unc.roa (raw, json)
Hash identifier: 1n8qaJxx+xqAWzWkPFiEInqRBUPmVPxyAAXtCgkJ0/Q=
Subject key identifier: 8B:45:AC:94:14:8D:6D:91:AB:8D:F5:45:30:84:AC:26:6A:FA:BA:77
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019B78A373DEFF31DE9FF0A8267611AE04E2
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/i0WslBSNbZGrjfVFMISsJmr6unc.roa
Signing time: Thu 01 Jan 2026 08:18:56 +0000
ROA not before: Thu 01 Jan 2026 08:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3215
IP address blocks: 193.163.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:73:de:ff:31:de:9f:f0:a8:26:76:11:ae:04:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jan 1 08:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b45ac94148d6d91ab8df5453084ac266afaba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:e8:0c:7a:39:f6:33:d6:a3:11:c9:01:f2:
cd:d3:ec:18:21:4b:84:91:1f:69:88:fe:06:b3:39:
40:d9:72:73:ed:38:14:50:69:9d:10:aa:49:71:bb:
11:ff:93:d0:33:9e:ea:e9:ac:f3:5e:9a:d4:11:32:
39:60:31:8b:df:67:96:a1:b1:ba:c1:e6:cd:e5:e2:
ee:d8:8e:22:b9:49:a9:2f:e9:1c:4a:cc:e2:22:87:
ec:c1:2c:2d:37:6b:f9:d4:78:dd:81:d2:27:f9:ab:
37:cf:55:b0:28:c4:d6:f3:4a:18:ba:e3:4b:f2:d0:
40:1e:a5:75:c0:19:1e:b7:05:82:62:b0:da:81:4e:
8d:00:12:34:af:94:02:89:f2:0d:01:ac:65:42:ec:
1b:9a:fe:a0:19:87:6a:a1:5b:5b:69:a1:01:52:f8:
3f:f1:29:c0:b5:da:6a:a9:4d:35:fd:80:ee:ee:85:
07:be:09:76:c4:58:7c:83:fc:8b:cb:3e:e6:95:40:
bf:75:bd:40:2d:94:5f:17:99:f5:0e:1c:84:a4:af:
19:73:8c:e3:b4:bc:8a:22:d9:40:f0:53:24:22:b0:
de:15:f4:2c:1c:8f:b4:5a:92:74:2f:64:cd:a4:5d:
39:df:a4:84:7c:e6:6f:33:d9:60:16:c7:a0:bb:12:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:45:AC:94:14:8D:6D:91:AB:8D:F5:45:30:84:AC:26:6A:FA:BA:77
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/i0WslBSNbZGrjfVFMISsJmr6unc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.99.0/24
Signature Algorithm: sha256WithRSAEncryption
59:38:9a:75:7f:90:19:24:df:87:5e:8c:99:56:e6:f0:71:a3:
77:d7:e6:fa:6a:b9:a4:89:7b:21:68:df:94:64:a0:a6:3f:c2:
e0:84:c0:ab:b2:cc:f3:ce:be:1b:58:bc:38:2b:ec:79:87:c7:
e2:18:e1:a2:a3:c9:24:47:e6:df:2b:88:b9:7b:0d:ed:0d:be:
19:a9:d6:5d:c7:86:ca:00:37:3c:99:4f:2c:ec:57:3d:ab:89:
f4:2a:a0:cb:c9:94:a0:85:1b:84:86:9a:90:e9:b6:00:54:30:
99:57:4f:80:7e:fd:98:a0:20:b8:70:27:ca:71:5f:ef:33:f4:
5f:19:81:f5:b2:0f:ef:dd:33:56:eb:ac:86:8d:47:72:77:bf:
d6:95:47:f8:d1:c4:79:6d:bb:10:bb:6d:db:8a:fa:fc:94:04:
e4:67:f2:75:fb:32:03:c4:1c:ca:a8:dc:c3:72:86:8c:02:e0:
4c:6d:5c:6e:4a:3e:2d:48:29:5c:34:fd:36:f8:34:34:36:04:
58:75:dc:d4:3e:45:a2:ee:33:b5:31:38:9d:da:c6:aa:d9:bb:
41:ca:72:ad:41:c1:bc:12:35:26:50:11:93:bf:c6:5f:f0:09:
fa:5e:a2:3b:27:f6:24:6e:92:98:93:0f:99:ff:16:3a:18:30:
bd:91:03:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:41 2026 by rpki-client