This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa
File: SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa (raw, json)
Hash identifier: 96JsC18JGLBW4IoziYCsWOr6Kg7mDOV+l3s14FX0t1Q=
Subject key identifier: 4A:66:C9:BC:AB:99:16:95:7A:5F:62:DB:20:17:50:DD:0D:AE:9D:2F
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 019B791064D32E68BE914CEF93245904DAEF
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa
Signing time: Thu 01 Jan 2026 10:17:55 +0000
ROA not before: Thu 01 Jan 2026 10:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205235
IP address blocks: 2a00:fbe4:1ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:64:d3:2e:68:be:91:4c:ef:93:24:59:04:da:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jan 1 10:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a66c9bcab9916957a5f62db201750dd0dae9d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:84:3e:53:6e:c4:69:44:5c:16:4f:27:9c:
e5:05:92:3d:ea:3e:9f:49:91:af:f8:94:97:a7:bf:
f8:01:cc:f4:83:da:cd:1e:65:2d:e3:99:04:6d:14:
30:90:6f:49:75:1a:a6:06:5f:37:93:b1:5e:aa:ff:
ab:54:5f:0c:92:b3:77:43:f5:15:83:ab:3f:52:67:
70:6e:72:a9:d3:01:bf:93:a8:8a:66:0c:7c:d1:5b:
44:f8:1d:c9:08:62:47:e6:df:20:7d:5d:e6:b0:d9:
c9:7c:1e:66:ab:ad:43:d3:4b:f4:c1:3a:b3:22:35:
a1:78:8b:a1:61:af:50:8b:67:f0:84:71:35:fc:be:
63:1e:53:24:4c:6d:5b:04:52:7e:82:0a:ee:27:df:
f1:ca:a1:bd:48:19:e9:05:43:df:11:38:f0:d4:ed:
0e:77:bc:ce:15:d9:62:f8:9a:3c:b6:ac:6b:1b:e7:
82:8d:f2:55:22:60:75:d3:ed:ea:ba:7b:14:b6:44:
94:94:ea:0b:6b:f8:52:30:59:3c:5a:5d:3c:42:07:
2b:5c:6a:9a:0b:14:95:f8:4f:7a:d9:cc:8f:1f:e7:
a6:d1:96:9c:ed:3a:74:b5:f7:6d:b9:8b:ca:1e:53:
07:dc:a5:b2:f2:53:6f:e1:13:32:f9:d2:c7:5d:17:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:C9:BC:AB:99:16:95:7A:5F:62:DB:20:17:50:DD:0D:AE:9D:2F
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fbe4:1ab::/48
Signature Algorithm: sha256WithRSAEncryption
a2:eb:35:4d:b4:2a:01:ab:d7:05:0a:fe:2b:93:c4:8f:c6:74:
9e:b0:ab:4a:9a:07:99:7b:69:d7:1c:db:8a:b1:55:44:64:cd:
01:03:6d:c7:e1:73:a7:d1:75:05:4b:4b:8e:27:90:42:6a:6f:
f8:f9:99:61:ca:63:0d:44:26:66:80:b9:36:7d:08:85:71:b2:
ab:14:73:de:7e:1d:46:ce:93:0d:63:fc:9c:f3:a9:2d:71:bd:
62:31:4c:5e:56:02:9c:f9:66:4b:08:6d:89:1b:ae:47:7b:6a:
74:e6:b2:62:49:72:29:13:c3:73:65:91:5b:9c:61:25:c7:ee:
3a:0e:cf:ac:48:c9:29:1a:51:09:97:90:d0:cf:8a:ec:ae:b7:
b9:50:cb:00:31:b5:fc:2f:16:5e:a3:0b:4d:2f:9f:4b:59:59:
b3:04:44:3d:bf:f7:17:5e:62:60:a8:10:14:52:24:ea:95:59:
3c:ef:72:72:7f:7e:1a:13:a8:c6:75:29:6b:9b:f0:bb:a2:1e:
ae:01:20:70:86:71:27:e3:69:1f:5f:36:84:a5:d1:82:85:ef:
6b:35:10:94:70:b5:51:2e:22:a2:0f:0f:20:61:24:93:55:3d:
b2:86:00:a3:eb:b8:75:3b:f3:4d:98:3b:bc:99:66:0a:e8:bd:
06:6d:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:33:25 2026 by rpki-client