This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/YwaTWFoU_sclTYJB9JwjIcKav1Y.roa
File: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (raw, json)
Hash identifier: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=
Subject key identifier: 63:06:93:58:5A:14:FE:C7:25:4D:82:41:F4:9C:23:21:C2:9A:BF:56
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 019B797E9E186495D905FEFEA15252E688B1
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/YwaTWFoU_sclTYJB9JwjIcKav1Y.roa
Signing time: Thu 01 Jan 2026 12:18:19 +0000
ROA not before: Thu 01 Jan 2026 12:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50304
IP address blocks: 77.246.246.0/24 maxlen: 24
185.213.52.0/22 maxlen: 24
2a0b:8340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:9e:18:64:95:d9:05:fe:fe:a1:52:52:e6:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Jan 1 12:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=630693585a14fec7254d8241f49c2321c29abf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:a8:37:0c:6b:31:f3:0d:57:1a:1a:2b:36:
da:9a:fc:47:d2:e8:80:6f:4b:4b:07:2a:b6:dd:dd:
53:06:84:30:51:d3:d2:21:1c:ae:2c:e1:59:95:15:
8a:3b:9e:1b:1c:82:82:83:67:4b:29:6a:f1:f2:33:
0d:8e:b8:45:c6:93:92:fa:e6:dd:9d:b5:b1:fb:1b:
26:0d:e2:dc:e7:88:9d:46:38:a7:70:37:5b:52:47:
7a:10:ff:30:f0:46:e9:41:66:db:55:ca:f6:a4:4b:
30:1e:39:76:bb:73:99:95:91:21:a1:3d:9a:bb:f3:
2e:cc:f6:8a:e6:e7:54:a6:43:c2:75:81:6d:01:51:
47:06:a5:8f:2c:99:23:59:66:05:4b:05:a7:ae:f5:
ad:3b:da:80:76:98:14:41:57:0a:50:ad:a2:64:52:
15:3f:78:68:84:f4:70:db:4b:3d:82:be:7b:a6:fd:
95:39:c5:5b:15:98:31:38:f1:b2:df:6c:53:1e:c6:
73:82:ed:9c:e7:78:48:51:32:60:81:60:67:8c:85:
e1:6b:d6:70:c1:24:fc:7d:2c:71:93:49:df:31:2c:
f1:bc:6e:19:cc:42:ae:25:33:04:b6:18:4d:77:2f:
8e:59:ff:8e:b8:4b:4d:ff:66:af:a1:1b:26:4e:93:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:93:58:5A:14:FE:C7:25:4D:82:41:F4:9C:23:21:C2:9A:BF:56
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/YwaTWFoU_sclTYJB9JwjIcKav1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.246.0/24
185.213.52.0/22
IPv6:
2a0b:8340::/29
Signature Algorithm: sha256WithRSAEncryption
57:03:e4:4c:87:d9:40:19:f3:1f:a3:8c:a9:7d:f6:b9:53:cd:
eb:7b:89:56:eb:ee:41:00:f6:67:c9:87:22:e6:5e:2d:d3:d9:
f1:98:57:cd:e6:79:ed:1a:fe:b7:f7:16:13:1e:75:08:f4:2c:
f6:28:d6:f4:cf:11:35:45:1f:92:f9:eb:b7:1e:15:7a:fd:84:
68:8a:d1:83:b3:f0:59:2b:79:0c:64:e4:1e:d4:b2:9c:27:4d:
8f:d3:1e:72:14:93:a5:30:ab:4b:65:34:42:29:60:16:76:d1:
09:f3:88:52:b4:7e:47:2a:ce:7f:41:89:19:70:fb:0d:cc:69:
36:e4:d5:2f:05:e8:d5:7e:2d:03:d0:71:fc:0f:98:e5:24:b1:
de:a8:2a:7c:04:ef:41:f1:7d:2b:34:16:bc:58:03:91:0b:2d:
47:a0:85:5c:58:60:aa:ad:72:d8:aa:d8:a0:ff:a7:d1:f4:b3:
ea:79:c1:1b:4d:74:fb:16:cc:95:6a:d4:c6:2e:cf:b2:45:91:
18:59:8a:8d:ff:65:b2:16:56:4e:01:7d:99:41:70:de:8e:73:
0f:2a:f7:34:11:a9:4a:0b:87:71:7a:a0:40:c4:70:3a:63:a5:
e6:7e:4f:f2:dd:3b:6d:bf:bd:ca:7e:a3:f8:fe:bd:9c:38:5c:
68:ff:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:40:54 2026 by rpki-client