This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Co3p3aNjrXd7D0ifiqeb4nsCYeg.roa
File: Co3p3aNjrXd7D0ifiqeb4nsCYeg.roa (raw, json)
Hash identifier: aZcNrK4bl0XuJnCpZOkA/UspwoT57t58m+kRDXMwFxk=
Subject key identifier: 0A:8D:E9:DD:A3:63:AD:77:7B:0F:48:9F:8A:A7:9B:E2:7B:02:61:E8
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019B7C8062AA60A0B611E62721E305A8A4B1
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Co3p3aNjrXd7D0ifiqeb4nsCYeg.roa
Signing time: Fri 02 Jan 2026 02:19:07 +0000
ROA not before: Fri 02 Jan 2026 02:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59831
IP address blocks: 217.78.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:62:aa:60:a0:b6:11:e6:27:21:e3:05:a8:a4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 02:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a8de9dda363ad777b0f489f8aa79be27b0261e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:bb:45:97:71:c4:78:06:3c:9d:af:90:ed:
a5:64:ed:4c:85:9e:fd:84:7e:a8:e4:57:bc:7e:81:
3c:0f:c3:8d:5f:bb:b0:87:ef:6d:73:70:d8:f1:74:
42:e1:02:e8:45:7c:76:26:f4:4e:58:df:93:3b:36:
a3:20:f6:93:ad:13:80:0c:e8:6d:93:0b:7b:48:ef:
47:b5:ed:2d:5c:8d:af:87:36:24:43:01:07:23:49:
eb:c0:af:b7:ab:8f:31:cd:b1:c5:9d:e0:90:ab:16:
89:ff:52:29:7d:af:6f:4b:08:48:9f:4b:5e:37:fc:
a9:2f:7e:ca:75:71:fc:25:a5:89:55:cb:7f:66:a3:
0d:2d:26:57:83:da:ea:ec:cf:fe:e4:02:0d:65:1c:
5b:c0:fb:11:bc:01:b4:ca:91:64:0b:28:1b:ac:8c:
24:2b:64:6a:70:e0:73:85:38:df:aa:83:46:5a:9e:
56:12:42:47:92:d3:cf:e2:a6:90:2e:f4:a5:a1:93:
30:ac:d3:7e:95:d2:a1:5f:47:12:65:42:5f:ab:ef:
06:22:90:bc:08:37:4a:3e:dd:d3:81:6b:c4:31:2f:
c2:42:f7:98:d4:ed:d6:05:20:5d:9b:20:4a:97:0b:
2a:1a:4a:a1:df:e0:9a:8d:b6:d2:4d:fd:d1:50:f8:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:E9:DD:A3:63:AD:77:7B:0F:48:9F:8A:A7:9B:E2:7B:02:61:E8
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Co3p3aNjrXd7D0ifiqeb4nsCYeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.78.235.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e9:77:2d:bc:ab:2a:ef:99:46:dd:91:38:ed:f4:fa:7d:3c:
d4:46:82:3c:39:2f:22:b8:5d:06:66:a3:50:c2:a8:3e:c4:bf:
fb:b2:5b:32:c2:2f:3d:f9:eb:19:1d:96:f5:9e:ed:7e:f4:f9:
f8:6a:e6:59:01:99:a9:e5:9f:31:de:ad:36:e8:d9:b7:e9:92:
5d:e5:a5:b6:f7:6d:19:3d:22:a9:be:b1:62:7c:30:f9:8b:c3:
48:f4:26:0c:ef:8d:af:15:39:5e:2b:e4:dd:6a:92:24:31:eb:
55:73:ef:32:b1:3f:43:9b:5b:ee:da:3a:7a:9e:6e:c2:15:4a:
30:09:9f:c6:6e:2b:26:10:15:c9:c3:f6:10:ea:52:74:53:6f:
23:61:a2:e0:6a:bf:1f:ef:3f:49:92:98:00:17:e0:7e:b1:1b:
15:23:bc:61:97:5f:26:43:25:fb:c2:f6:22:c2:4a:e9:f0:23:
da:1c:b7:a0:63:06:8d:c0:13:ac:aa:d4:aa:79:f4:36:b4:0e:
fe:08:22:00:d6:cd:39:8e:7e:ef:83:0c:bf:0d:4f:39:6d:fe:
36:4c:70:a4:a3:f5:3a:62:f8:63:85:1c:08:d7:3a:29:8e:40:
5b:49:2b:86:8a:0f:f2:ef:98:ee:e3:93:64:61:57:19:ef:70:
08:4d:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:59:14 2026 by rpki-client