This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/Iuaoq7xqZRoecZzyevNXwAMi3-c.roa
File: Iuaoq7xqZRoecZzyevNXwAMi3-c.roa (raw, json)
Hash identifier: SRPau6cxiFHTMpBCP5vvZIhkHG5VuskjK4s4tpPVTEM=
Subject key identifier: 22:E6:A8:AB:BC:6A:65:1A:1E:71:9C:F2:7A:F3:57:C0:03:22:DF:E7
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019B7BA4D2C778ACA3BEBE207023938572AE
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/Iuaoq7xqZRoecZzyevNXwAMi3-c.roa
Signing time: Thu 01 Jan 2026 22:19:18 +0000
ROA not before: Thu 01 Jan 2026 22:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213039
IP address blocks: 81.163.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:d2:c7:78:ac:a3:be:be:20:70:23:93:85:72:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jan 1 22:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22e6a8abbc6a651a1e719cf27af357c00322dfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:32:94:b1:ce:7c:65:f6:24:fa:5b:6a:66:
9c:99:f8:f1:68:47:a2:ab:05:85:a7:c0:3c:47:c8:
63:8f:7f:43:5d:7b:75:ef:3c:e5:a0:42:50:b3:e4:
e0:bd:e3:99:0f:7b:b0:f1:5c:dc:7c:34:05:78:61:
c8:0e:eb:99:d6:e4:22:f8:8b:32:fe:7a:00:3a:09:
a6:f9:87:df:ad:8a:f2:c1:13:00:d8:85:7f:27:16:
fa:78:bd:e8:3c:8c:9c:30:bb:e4:67:e6:04:bd:6d:
79:57:35:e9:e4:06:3b:f4:af:62:4f:ad:9d:7f:f3:
98:88:24:7a:01:f9:de:ab:88:78:04:3a:39:5e:98:
3e:4f:36:84:f9:9f:33:67:94:52:89:42:23:bf:00:
23:f3:a8:a8:69:f7:57:4e:32:8e:ce:28:63:e1:3b:
57:72:34:66:10:d5:25:53:fc:bb:80:e5:68:17:bc:
7f:73:6a:e9:9e:10:32:79:78:e0:fe:91:12:1b:74:
91:c9:3b:7d:aa:2a:66:1b:2e:fe:c9:1d:fc:86:87:
84:02:ea:65:cb:2a:7e:a1:5f:01:7d:e3:af:ba:b1:
36:fe:66:37:cd:e1:f9:52:aa:9a:03:06:93:1b:98:
2a:dd:9a:a6:6e:70:92:f2:58:56:09:71:98:56:9d:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E6:A8:AB:BC:6A:65:1A:1E:71:9C:F2:7A:F3:57:C0:03:22:DF:E7
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/Iuaoq7xqZRoecZzyevNXwAMi3-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.210.0/24
Signature Algorithm: sha256WithRSAEncryption
98:24:73:38:f6:87:f6:c6:da:39:59:b1:f5:77:32:3e:a7:5b:
75:be:5c:37:94:a0:e6:55:67:0e:73:c3:56:a1:3e:34:d1:81:
94:34:79:eb:52:25:ff:6b:d2:97:bc:ef:07:f4:76:1a:85:4f:
e6:1d:c0:5a:4a:53:1c:86:35:79:15:27:60:1d:60:85:e6:f4:
b7:75:71:21:4b:ed:e1:2f:6b:c9:ed:d4:f1:00:bd:99:03:94:
a8:5d:e3:b1:91:fd:d5:c4:97:69:de:25:5e:30:7f:8d:bd:be:
9a:cc:85:5f:20:05:26:2c:45:19:49:99:4d:09:49:c1:6a:e0:
b8:54:c3:b7:f7:1b:6f:22:0d:7f:fa:d8:41:d4:f5:48:ce:c7:
c8:62:ae:d8:c7:46:67:85:8d:9f:b6:4f:a4:07:c1:6e:52:1f:
da:bc:8b:e3:39:01:66:50:02:40:6c:2d:cd:49:95:73:78:da:
11:85:00:5a:2c:c1:f5:87:27:a2:6d:a3:3d:36:a8:5a:e5:e3:
d4:a5:66:34:05:b7:1e:14:7e:fc:67:0d:b3:95:c3:d1:2f:02:
a6:ae:f6:05:18:8e:5b:f8:3d:16:78:41:41:d7:cd:8c:58:4b:
ab:6f:aa:41:3c:65:76:9a:69:a3:6c:50:16:ba:dc:a4:f5:27:
22:0d:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:43:50 2026 by rpki-client