This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/snU0F1xcSWMYFQ2eQd5gZYlccBE.roa
File: snU0F1xcSWMYFQ2eQd5gZYlccBE.roa (raw, json)
Hash identifier: JdJmPKAnAhiR1J0EFD0dsDA9MKwuUlfNp7RQdQdV3Wk=
Subject key identifier: B2:75:34:17:5C:5C:49:63:18:15:0D:9E:41:DE:60:65:89:5C:70:11
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 019B78355FF98AE6E03589327BF5B6AD66EC
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/snU0F1xcSWMYFQ2eQd5gZYlccBE.roa
Signing time: Thu 01 Jan 2026 06:18:42 +0000
ROA not before: Thu 01 Jan 2026 06:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 194.180.51.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:5f:f9:8a:e6:e0:35:89:32:7b:f5:b6:ad:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 1 06:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b27534175c5c496318150d9e41de6065895c7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:f5:06:d6:cb:d9:37:ea:0d:72:f8:80:ad:
11:3c:00:cc:69:0e:d2:28:0f:0f:d8:89:a9:cf:df:
d4:da:43:70:28:0f:c5:9a:af:ba:51:df:8f:fb:52:
a5:e4:21:3b:e0:60:22:03:fc:d2:3d:fa:00:1e:33:
fe:4d:54:3e:8b:dd:58:e3:16:8c:4b:a1:02:f1:70:
2c:d0:e5:0d:43:19:bd:08:69:53:3d:7e:28:b7:81:
b0:56:fb:06:24:94:99:58:1d:56:19:1a:d5:53:32:
6e:a8:2b:e1:9a:89:fa:5b:66:53:05:b6:e1:c6:e3:
c5:30:49:32:ad:b6:53:7b:27:7f:b8:67:34:10:00:
7d:8b:53:0f:e2:16:55:26:a6:3a:ae:5a:41:fa:2b:
de:46:f8:04:1e:3d:fa:fa:2c:84:92:16:d6:08:9d:
f2:e6:73:f8:73:cf:49:92:cf:b4:f3:bd:70:d7:cb:
cb:75:05:60:14:0f:65:0b:3b:3c:dd:e4:6d:8a:a0:
53:50:6a:b2:da:49:58:c5:c3:93:18:ca:89:15:b9:
81:cd:d0:6a:16:be:d9:a0:ec:99:e8:b6:43:ce:72:
20:30:22:ab:4f:a1:1d:4c:48:71:5a:26:5b:6c:c9:
44:bb:02:7e:00:37:41:b5:ce:c3:37:b6:14:bd:e8:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:34:17:5C:5C:49:63:18:15:0D:9E:41:DE:60:65:89:5C:70:11
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/snU0F1xcSWMYFQ2eQd5gZYlccBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
24:87:45:a1:04:ac:d9:71:11:04:31:71:56:b8:18:4d:d7:cd:
15:06:65:50:43:58:9b:9c:45:6f:e2:42:be:51:8b:0c:eb:f7:
6a:da:89:a7:f1:f9:f6:f6:ec:89:17:2b:12:a5:03:b9:14:3e:
f7:0b:50:fb:43:a2:e4:72:e0:97:00:25:3f:b9:2f:63:38:58:
c9:02:9d:83:bc:05:48:1d:60:5d:87:15:e4:cb:cc:7e:f1:b0:
15:23:34:d8:4d:ee:13:52:36:37:db:86:63:c8:b6:d9:e4:4c:
21:3c:f3:32:a9:a3:22:66:0f:32:1d:30:e7:fd:39:57:0e:33:
c7:07:6c:d4:ed:dd:98:ce:31:e9:f2:3a:1c:39:6d:14:e3:eb:
c7:4c:d4:b1:dd:53:57:bd:8f:36:3d:60:d7:ae:f7:e0:75:b5:
fe:f6:80:af:2a:ff:af:02:08:2e:19:8d:56:74:06:09:e5:9e:
94:8d:b6:2b:c7:b4:b4:dc:07:87:fd:01:00:0f:47:46:36:08:
93:43:4e:6b:13:64:c5:c8:d3:1e:9b:b1:14:49:7d:59:c3:48:
3d:03:09:ad:0a:00:e8:a0:11:49:88:8b:ee:87:33:f8:1d:f9:
e4:95:08:ca:ce:4f:1d:be:2b:b5:16:a6:fa:48:a2:45:13:e2:
7d:82:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:34:14 2026 by rpki-client