This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/74nAH9muoqGD-s4yAjGfkwaZSpY.roa
File: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (raw, json)
Hash identifier: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=
Subject key identifier: EF:89:C0:1F:D9:AE:A2:A1:83:FA:CE:32:02:31:9F:93:06:99:4A:96
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 019B7AC7E4F22DB10D300769D00C9AE8D7E9
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/74nAH9muoqGD-s4yAjGfkwaZSpY.roa
Signing time: Thu 01 Jan 2026 18:17:59 +0000
ROA not before: Thu 01 Jan 2026 18:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202709
IP address blocks: 193.42.210.0/24 maxlen: 24
194.50.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:e4:f2:2d:b1:0d:30:07:69:d0:0c:9a:e8:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 18:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef89c01fd9aea2a183face3202319f9306994a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:f2:16:3b:03:33:ec:de:a6:9e:7e:0e:bb:
c1:5b:f4:10:30:d3:98:2e:29:20:b3:5b:bd:51:59:
22:80:98:ff:ae:c0:60:a8:ba:f8:13:d5:d8:55:60:
36:65:c1:d1:80:87:20:03:05:d0:14:8a:5a:94:06:
23:3d:22:37:12:74:99:d5:7f:83:4f:6e:d7:04:ff:
fc:c4:cd:b4:8a:9b:98:f2:42:ce:ae:6d:e5:66:06:
4d:9b:be:77:a3:3d:d6:bd:6a:df:5d:b9:76:b7:27:
cd:63:94:43:d1:e3:9d:ab:59:eb:7e:98:bf:16:0c:
fc:b0:52:85:03:a6:b7:6e:20:b0:53:11:58:b6:16:
08:60:59:98:21:e9:92:07:c9:4d:65:47:ac:d9:4f:
04:5b:05:8d:f6:52:9b:e2:68:41:3d:86:47:4d:13:
cf:7a:f4:a6:bf:f9:3c:56:2d:20:c8:28:f6:d0:98:
18:67:36:27:79:ae:92:62:0b:17:d5:d5:b6:52:2e:
f0:e6:2b:dc:59:7a:35:87:2b:da:4d:99:95:50:79:
a4:7e:d9:e0:c7:bd:89:b3:6f:b0:28:ed:7b:0c:89:
4b:74:6a:88:08:bb:22:cf:0b:e1:74:eb:72:46:6c:
6a:71:6b:16:c6:9c:22:2b:51:aa:87:8d:40:4f:0f:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:C0:1F:D9:AE:A2:A1:83:FA:CE:32:02:31:9F:93:06:99:4A:96
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/74nAH9muoqGD-s4yAjGfkwaZSpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.210.0/24
194.50.74.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9d:ff:87:6e:25:ad:fd:07:7d:b0:cc:52:c3:79:fa:79:de:
33:87:bb:c3:20:85:3c:d6:d1:d5:1c:c4:2b:5d:1b:9d:cc:81:
0f:99:d3:9e:6f:9b:ce:12:df:98:f5:00:ed:2e:ca:f8:ac:eb:
3a:51:08:9f:a9:0a:2d:2e:fc:1b:46:fa:c1:2b:85:28:58:1e:
42:35:27:31:ac:d4:f5:d6:51:27:ea:fa:b3:cd:fb:72:66:51:
77:2f:2f:a0:db:91:b9:44:42:17:8c:9a:9b:28:99:3f:31:85:
3f:85:c0:5f:72:16:6f:ee:43:af:99:31:a3:df:af:0e:4e:ea:
e2:7e:bc:74:6e:0f:a8:31:77:a1:1f:1c:44:f6:e8:93:31:df:
f1:02:06:39:fb:1e:08:00:17:e7:2e:64:6b:57:34:f6:7d:71:
e5:ab:d0:c3:7b:b1:e7:a7:d6:a2:c4:c6:fb:98:25:d8:f7:90:
9e:e2:83:b6:85:a9:e3:b4:46:96:d6:cc:92:12:a4:02:67:dc:
ef:ba:94:01:b0:0b:fc:c5:32:23:09:ff:f2:41:c0:46:16:13:
2a:3a:a6:0b:b4:c4:a0:ad:19:4b:23:51:20:65:cc:83:73:88:
af:19:4c:28:ea:3b:00:2c:bd:e2:97:f2:a0:12:6b:cf:af:e6:
43:0e:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:42 2026 by rpki-client