This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cgbubwzrLRUcM3DPtZyyYXN9zpA.roa
File: cgbubwzrLRUcM3DPtZyyYXN9zpA.roa (raw, json)
Hash identifier: 7DwIwq1pltg06WU9Sr2sfIuLwm0KCaOw5p++q9NLLb8=
Subject key identifier: 72:06:EE:6F:0C:EB:2D:15:1C:33:70:CF:B5:9C:B2:61:73:7D:CE:90
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019B7C80704606F28D1463361BFD670EB007
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cgbubwzrLRUcM3DPtZyyYXN9zpA.roa
Signing time: Fri 02 Jan 2026 02:19:10 +0000
ROA not before: Fri 02 Jan 2026 02:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213834
IP address blocks: 80.64.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:70:46:06:f2:8d:14:63:36:1b:fd:67:0e:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 02:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7206ee6f0ceb2d151c3370cfb59cb261737dce90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:10:dc:a3:82:a5:78:dd:b2:2b:0b:c0:c8:
85:12:57:19:64:75:b8:59:f5:04:0a:98:3a:52:24:
a7:7f:35:79:08:6e:35:80:9c:f0:52:0f:57:08:31:
df:aa:4e:d7:05:c6:de:45:02:be:7d:5a:2f:f8:e4:
13:90:de:0d:76:cb:0c:59:d1:79:c0:8f:08:93:56:
7e:96:11:1f:e3:da:2c:f6:3f:1f:01:05:0b:1d:67:
4a:23:a7:ee:1c:52:e6:e1:a1:75:98:93:c8:e2:bb:
12:70:e2:ca:5d:4e:c6:ea:8e:61:45:bf:05:57:b3:
96:39:59:a6:93:12:fb:00:11:90:2a:4e:36:fe:a7:
19:83:e0:43:d4:c8:79:b4:24:23:2e:12:b8:a9:e8:
cd:25:95:ae:7d:2f:8f:71:6e:af:4c:63:6b:57:80:
82:19:33:75:9f:93:81:f7:50:81:e5:53:76:0c:d8:
1a:38:f2:ab:b5:7e:9f:a4:c8:34:a1:c8:93:a7:1e:
5d:26:9a:73:fb:3a:2e:58:b8:76:9c:a0:d9:04:14:
23:68:4b:21:e5:98:64:1f:f8:12:33:d5:ef:0e:ba:
9e:66:68:5d:be:25:13:c6:f8:ca:7d:06:a3:ba:d6:
a9:5f:e4:38:72:7b:de:6b:64:a5:66:fb:18:bb:31:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:06:EE:6F:0C:EB:2D:15:1C:33:70:CF:B5:9C:B2:61:73:7D:CE:90
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cgbubwzrLRUcM3DPtZyyYXN9zpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.22.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d2:39:4d:1d:65:d1:1b:15:4e:59:6b:ac:8b:2b:c7:de:bc:
43:af:a6:4a:23:39:57:61:26:82:76:00:a9:fb:4c:64:17:1a:
fc:6e:c3:ca:e0:2a:44:c4:a2:68:92:79:98:38:16:fe:23:b4:
82:58:77:d9:6d:d2:d4:ac:d0:0a:cd:9a:78:0f:97:b3:be:88:
6d:d1:25:77:fa:f7:99:ae:83:c7:10:04:9c:cc:8c:3d:60:bf:
3c:2b:46:1d:8f:11:b2:05:22:0d:de:0e:29:c3:9e:5f:53:c4:
5e:d4:ba:fa:65:7e:20:d2:72:d7:c1:0a:73:9d:a4:c8:fb:1e:
fe:33:07:71:16:68:1f:00:f4:6f:bb:80:7d:27:2f:59:58:7a:
6e:64:eb:10:b5:6f:05:4f:ac:40:2e:52:54:cc:d6:93:de:eb:
2b:79:06:c4:bb:06:9a:98:43:d9:a7:1c:5d:84:b4:42:cb:5a:
e9:bb:ce:c0:5b:d9:21:e7:56:37:ea:ba:71:d7:a2:d5:13:7c:
1b:dd:cd:c7:37:07:15:ae:31:b3:a8:ac:01:37:58:a9:99:e7:
88:ed:45:fb:6a:6f:7a:5d:50:ee:9d:ea:ae:38:37:45:b7:92:
8e:5c:67:7c:fe:92:e9:bb:39:24:1b:b2:63:b6:49:e8:48:34:
be:05:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:48 2026 by rpki-client