This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BnldxGlF-UmETCIQQLnT5KskkzI.roa
File: BnldxGlF-UmETCIQQLnT5KskkzI.roa (raw, json)
Hash identifier: XiqPx2COjFKRBtYz85DXAtpiWVXJFfwyCrhYuLit9sY=
Subject key identifier: 06:79:5D:C4:69:45:F9:49:84:4C:22:10:40:B9:D3:E4:AB:24:93:32
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019B7E37BA377BA70C17B7CAE3CFD14E204A
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BnldxGlF-UmETCIQQLnT5KskkzI.roa
Signing time: Fri 02 Jan 2026 10:18:59 +0000
ROA not before: Fri 02 Jan 2026 10:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48628
IP address blocks: 185.161.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:ba:37:7b:a7:0c:17:b7:ca:e3:cf:d1:4e:20:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 2 10:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06795dc46945f949844c221040b9d3e4ab249332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:3a:07:8f:a1:74:35:d7:29:ee:83:28:2d:
1f:12:ee:d6:fa:11:4e:5c:ab:db:95:67:a4:2f:84:
c9:14:18:41:2a:14:d7:22:e7:ec:a7:cf:bd:60:62:
4d:eb:d6:96:12:7a:3b:0e:f4:1b:89:f9:0f:be:4d:
85:81:23:c7:a4:85:41:b8:b2:b3:5a:aa:6f:ee:15:
10:28:3a:b1:95:f0:a1:c1:1a:7d:73:60:84:8c:d2:
39:5d:2b:26:20:87:dd:97:ed:f7:f5:59:70:88:ee:
9c:0d:33:d2:3c:92:be:e8:f4:96:03:c4:48:5f:6d:
ca:91:d9:a3:fa:5b:cd:38:f9:7f:17:0b:99:36:74:
ca:5c:ea:d6:31:bc:6d:bb:5d:a0:dc:4a:8f:6a:ea:
c0:69:47:68:66:d0:7e:ec:36:6d:35:6b:d6:47:1b:
c9:cd:8f:e1:a8:1e:5f:e2:20:86:66:14:c8:4c:f5:
68:b3:de:86:c6:47:86:52:6a:31:2a:80:6b:43:9b:
fa:d6:47:27:b5:04:7b:7f:ac:87:77:43:88:50:27:
a7:e7:ef:5d:de:d0:8b:b8:f5:ce:40:87:33:ea:97:
a9:5a:41:3c:eb:b9:b2:dd:5c:4a:34:a4:7b:79:1f:
b0:66:a7:38:fa:ce:4e:ca:89:78:bc:03:ce:13:4f:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:5D:C4:69:45:F9:49:84:4C:22:10:40:B9:D3:E4:AB:24:93:32
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BnldxGlF-UmETCIQQLnT5KskkzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.110.0/24
Signature Algorithm: sha256WithRSAEncryption
16:58:1f:27:ae:26:fe:a9:ab:4d:49:82:b8:26:10:10:d0:b3:
87:10:5b:c9:89:19:3e:f5:0c:ed:48:f6:9c:58:fc:0a:3c:bf:
ff:93:9a:2c:ab:70:b7:f9:e9:82:9b:10:c9:d1:7f:5d:76:d4:
8b:87:f2:e7:d3:2d:27:5d:61:f7:44:90:f1:d1:39:b6:5e:62:
62:2f:2c:de:8d:84:fb:e1:6f:e6:a0:bf:44:17:56:60:f3:9a:
14:46:b2:61:10:b3:ba:74:c1:c1:db:d1:9b:7d:1a:cb:82:3e:
20:68:c1:de:c2:0d:4e:c1:2d:97:ab:88:cf:de:d9:52:6a:77:
82:b4:1b:e1:64:ee:c6:ac:23:61:88:48:cc:88:ba:00:d2:a1:
36:2f:c7:37:1a:15:f3:6c:ba:67:6d:55:5b:72:08:3c:97:d9:
e0:77:b9:99:99:8d:9f:bd:f2:d1:c0:a2:1a:30:bd:c8:43:a2:
33:2d:5b:8d:33:e8:dd:61:f7:69:be:3f:b4:a6:b0:8b:93:b9:
3d:2d:96:df:ba:c5:7f:a3:8d:c7:10:28:74:d8:b2:82:ff:4b:
87:91:e4:6e:04:6c:57:ef:61:2f:bf:df:c7:54:d5:4d:31:b0:
66:7c:33:0f:ab:0c:0d:bd:96:fe:82:2a:ce:52:ff:87:c5:50:
bb:08:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 04:39:05 2026 by rpki-client