This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C-87P-Aksh4eUzl2gSHv75URnxw.roa
File: C-87P-Aksh4eUzl2gSHv75URnxw.roa (raw, json)
Hash identifier: miompYPHGRQ4skoaLKuQd3VjLZtsIfeKJDHUx5WbRJY=
Subject key identifier: 0B:EF:3B:3F:E0:24:B2:1E:1E:53:39:76:81:21:EF:EF:95:11:9F:1C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019B212A2AD3A426DAA4EA8D8B7D6B86C0E9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C-87P-Aksh4eUzl2gSHv75URnxw.roa
Signing time: Mon 15 Dec 2025 08:39:30 +0000
ROA not before: Mon 15 Dec 2025 08:39:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133153
IP address blocks: 193.254.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:21:2a:2a:d3:a4:26:da:a4:ea:8d:8b:7d:6b:86:c0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 15 08:39:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bef3b3fe024b21e1e5339768121efef95119f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:92:3d:9c:e1:3b:74:e6:ce:e2:87:c5:8b:
84:88:32:59:3f:92:97:b8:1b:8c:f5:a4:b9:0d:1f:
cd:a4:46:29:2e:06:c4:b9:5a:f2:33:1c:7f:cc:34:
a7:60:5b:05:f9:83:0a:37:ab:e6:4c:e1:a6:b0:13:
89:ce:f0:64:0f:2e:c8:64:a7:ed:0f:92:f7:d6:0a:
32:40:63:c4:16:7b:4d:5e:5d:e3:37:de:d1:c2:d1:
ee:b0:16:dc:ce:90:a9:ce:84:c3:2d:f6:80:45:6a:
90:72:c9:e3:61:62:5c:e9:91:94:1f:9b:b7:7d:be:
c9:1f:28:e0:88:2b:8c:b8:98:8c:82:ab:7a:28:20:
1e:d2:2e:09:93:af:dc:67:d2:c1:e7:1d:6c:d3:49:
3b:4c:b7:46:77:b1:a0:2b:32:66:87:d0:86:35:0c:
7b:61:5f:b5:da:bc:db:49:85:b4:2b:2a:72:7e:03:
68:7b:ba:ae:00:a3:b1:0c:a0:68:b3:e4:d4:28:ea:
0c:ce:8d:0a:d7:19:dc:53:bc:69:18:31:90:08:b5:
fe:b6:c4:e3:3e:96:3e:0a:57:7c:0a:fb:20:c9:d1:
02:a0:4b:04:08:3c:3f:c9:94:be:43:de:34:eb:59:
1b:5b:fe:fc:6c:c1:b4:d8:73:09:9f:76:f7:8e:8a:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EF:3B:3F:E0:24:B2:1E:1E:53:39:76:81:21:EF:EF:95:11:9F:1C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C-87P-Aksh4eUzl2gSHv75URnxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.244.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4c:04:49:18:8d:b6:b2:cf:ca:ec:f8:30:d3:16:9b:96:a8:
12:6e:58:82:59:30:c1:63:14:dd:5b:6d:e0:1c:11:f0:1e:65:
75:75:7e:1d:80:5b:83:be:5b:24:58:64:2e:dd:81:20:de:c3:
38:75:8e:de:33:6b:24:15:d6:88:f1:2a:f2:83:82:89:e1:62:
bc:8e:44:85:8f:17:fe:ab:a6:21:1e:a7:1b:ad:95:d5:73:83:
45:29:03:ec:8d:b1:04:96:46:36:e9:24:df:9e:15:de:a3:b2:
c6:f1:d4:4a:01:25:55:a5:44:1a:ab:55:fe:84:dc:da:75:23:
4b:56:e3:6b:80:bd:4c:01:54:d2:38:c1:c9:4a:0e:ff:ce:c6:
8e:c2:33:96:03:98:b0:81:61:e7:fe:ec:84:a2:a7:2e:e2:8b:
eb:3f:51:0b:2f:77:4a:e5:7f:0b:da:00:14:ae:2e:a6:78:e6:
f0:d8:62:a3:ec:00:63:b9:5b:b8:da:1b:14:fd:ec:fb:c2:fa:
9f:c3:1b:16:85:bc:16:83:9d:eb:56:19:95:4a:80:a5:a0:c9:
45:94:b1:90:d7:21:19:db:b8:88:1a:3b:f0:bd:76:c0:a4:a2:
f4:6b:da:fb:1e:4c:23:15:68:cd:f7:79:dd:52:b3:9e:0c:52:
cd:dc:64:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZshKirTpCbapOqNi31rhsDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUxMjE1MDgzOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmVmM2IzZmUwMjRiMjFlMWU1MzM5NzY4MTIxZWZlZjk1MTE5ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5ySPZzhO3TmzuKHxYuEiDJZP5KX
uBuM9aS5DR/NpEYpLgbEuVryMxx/zDSnYFsF+YMKN6vmTOGmsBOJzvBkDy7IZKft
D5L31goyQGPEFntNXl3jN97RwtHusBbczpCpzoTDLfaARWqQcsnjYWJc6ZGUH5u3
fb7JHyjgiCuMuJiMgqt6KCAe0i4Jk6/cZ9LB5x1s00k7TLdGd7GgKzJmh9CGNQx7
YV+12rzbSYW0KypyfgNoe7quAKOxDKBos+TUKOoMzo0K1xncU7xpGDGQCLX+tsTj
PpY+Cld8CvsgydECoEsECDw/yZS+Q94061kbW/78bMG02HMJn3b3jopP5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvvOz/gJLIeHlM5doEh7++VEZ8cMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQy04N1AtQWtzaDRlVXpsMmdTSHY3NVVSbnh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwf70MA0G
CSqGSIb3DQEBCwUAA4IBAQCZTARJGI22ss/K7Pgw0xablqgSbliCWTDBYxTdW23g
HBHwHmV1dX4dgFuDvlskWGQu3YEg3sM4dY7eM2skFdaI8Sryg4KJ4WK8jkSFjxf+
q6YhHqcbrZXVc4NFKQPsjbEElkY26STfnhXeo7LG8dRKASVVpUQaq1X+hNzadSNL
VuNrgL1MAVTSOMHJSg7/zsaOwjOWA5iwgWHn/uyEoqcu4ovrP1ELL3dK5X8L2gAU
ri6meObw2GKj7ABjuVu42hsU/ez7wvqfwxsWhbwWg53rVhmVSoCloMlFlLGQ1yEZ
27iIGjvwvXbApKL0a9r7HkwjFWjN93ndUrOeDFLN3GQy
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:29:27 2025 by rpki-client