This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/rpLLN-zEc59BcyaW_IW8fwJMCgE.roa
File: rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (raw, json)
Hash identifier: coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=
Subject key identifier: AE:92:CB:37:EC:C4:73:9F:41:73:26:96:FC:85:BC:7F:02:4C:0A:01
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 019B79ED59C638E52650950A9581616AABAC
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/rpLLN-zEc59BcyaW_IW8fwJMCgE.roa
Signing time: Thu 01 Jan 2026 14:19:16 +0000
ROA not before: Thu 01 Jan 2026 14:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34538
IP address blocks: 193.239.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:59:c6:38:e5:26:50:95:0a:95:81:61:6a:ab:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Jan 1 14:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae92cb37ecc4739f41732696fc85bc7f024c0a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:d2:d6:43:60:b8:70:5d:78:93:12:1a:55:
1e:ab:f5:71:c1:4c:fb:ad:4f:1f:7a:88:b7:82:ad:
03:38:ce:59:f7:b9:29:43:15:66:77:b2:e7:40:ac:
26:40:00:26:9c:e8:8b:f4:e8:32:e4:fe:b6:18:ec:
ff:d4:34:64:87:dd:71:54:27:91:b2:5c:ff:77:bd:
f4:81:f1:d5:74:ae:37:8c:95:49:a3:2b:6e:a4:28:
65:db:19:a5:dd:06:68:38:fa:e4:17:17:ad:d5:65:
cd:3a:53:04:41:37:c9:9f:06:80:23:11:f2:25:d8:
17:2f:f1:78:d9:97:05:e0:c6:cd:2c:52:85:13:0a:
e3:71:7d:c3:74:1d:6d:cf:d1:01:ae:07:3b:5c:d6:
80:e6:a6:59:e5:04:1c:31:c0:d4:88:40:e7:0e:72:
80:15:65:5f:58:fc:81:35:85:56:27:d5:51:15:09:
fb:b5:15:d3:f4:5a:bc:6b:4d:41:ed:d6:14:3f:90:
23:a2:59:9e:af:eb:20:4d:d6:86:79:db:39:91:2b:
51:f1:66:69:17:fd:c6:b8:51:a3:53:d5:07:f2:da:
de:0a:27:7d:20:4b:53:83:ea:ce:e1:6a:03:84:f1:
8a:f9:24:3b:90:8b:92:84:9f:9d:06:7b:55:9b:48:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:92:CB:37:EC:C4:73:9F:41:73:26:96:FC:85:BC:7F:02:4C:0A:01
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/rpLLN-zEc59BcyaW_IW8fwJMCgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.158.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:65:1e:e4:af:19:60:a9:a5:7c:88:a1:7b:0a:e6:36:da:c8:
bd:b9:1d:df:b7:d0:d1:74:e8:0e:13:b7:20:cf:b8:aa:82:b4:
69:cf:37:29:e3:02:78:f5:c9:1a:6a:b8:d8:37:cb:63:10:c3:
fe:2d:06:eb:e5:3f:78:71:70:43:db:00:52:a2:87:32:06:58:
bd:47:5f:e3:3f:4b:35:fb:98:6d:c4:58:2a:ee:30:85:57:e8:
4e:20:eb:36:ce:63:59:ef:a6:fa:16:46:ae:d1:27:3e:20:51:
1b:74:51:ad:4d:78:aa:ff:4c:47:8b:fa:50:d9:fc:88:10:70:
98:02:d4:bd:c2:76:c5:86:8f:70:6d:f3:7d:9c:79:91:f1:30:
5b:4d:f1:14:6c:8b:cc:73:ef:3d:05:ad:20:79:95:ca:da:be:
b0:f2:08:68:28:1d:2c:9d:f8:68:c9:53:49:36:a4:1a:73:fc:
b9:73:fd:cd:ed:e0:8b:88:9a:a8:b8:ae:f6:1b:a9:7d:a9:aa:
bc:f6:11:19:8b:f6:18:3b:35:74:5a:f2:34:4f:0d:6d:9a:f1:
29:d4:af:61:df:bd:2e:e4:a6:8f:0e:2e:7c:e9:a3:d4:d4:95:
d7:81:e3:67:1d:d2:96:9e:9e:98:d6:7e:25:58:6e:da:1f:dc:
55:c7:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 11:03:23 2026 by rpki-client