This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/uv1ygUlcXrGSDECbU5SJQezpERk.roa
File: uv1ygUlcXrGSDECbU5SJQezpERk.roa (raw, json)
Hash identifier: heh+HmefIR2zFpP0zIec4O9N2L5u5pbDsZ881lNVG4E=
Subject key identifier: BA:FD:72:81:49:5C:5E:B1:92:0C:40:9B:53:94:89:41:EC:E9:11:19
Certificate issuer: /CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Certificate serial: 019C0E4DDEB5C957FBAF9A5BCC9CD2394D9A
Authority key identifier: 8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/uv1ygUlcXrGSDECbU5SJQezpERk.roa
Signing time: Fri 30 Jan 2026 09:48:30 +0000
ROA not before: Fri 30 Jan 2026 09:48:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 185.60.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:4d:de:b5:c9:57:fb:af:9a:5b:cc:9c:d2:39:4d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b24d84bff4c9217d1defa5dd334c8c853226a6b
Validity
Not Before: Jan 30 09:48:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bafd7281495c5eb1920c409b53948941ece91119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:40:0c:46:8d:5d:1c:bb:da:3f:ee:57:11:
ff:9f:f8:64:2d:4a:02:1a:0b:40:15:45:94:f0:dc:
2f:09:7f:76:5d:6b:7c:79:02:53:ac:26:9d:41:39:
db:74:e2:53:fd:07:50:ae:2a:98:d8:98:ee:03:2a:
13:23:ee:b5:78:ab:b5:67:09:25:b8:75:db:e5:7b:
97:30:08:75:54:eb:2f:cb:2a:fd:dd:03:ec:06:8f:
6c:7f:ec:36:24:28:c4:be:1c:6b:4e:e6:06:12:38:
79:1a:68:ee:fc:84:e3:45:00:18:c8:28:c7:e6:b9:
c5:d7:3a:62:ce:e0:e2:ab:27:93:1a:37:b9:a9:d4:
82:25:04:19:51:34:46:1f:31:c6:a6:f9:bd:40:86:
2e:d3:6f:5c:88:3c:53:99:4d:b6:bf:db:6a:4f:a5:
fb:db:3e:ae:74:0e:49:85:9b:89:45:96:eb:e7:47:
92:78:ca:93:be:4b:79:95:11:1b:e3:de:fc:1b:ce:
d8:44:ff:25:dd:f8:87:08:d3:f3:c2:43:fc:e5:27:
51:a1:3e:36:23:1c:24:1c:a1:80:ce:30:e9:72:81:
3d:86:43:b8:98:52:17:ae:a8:56:fa:9c:41:e1:ae:
b7:30:10:cc:29:05:0d:3e:32:e0:1a:89:68:de:c8:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:72:81:49:5C:5E:B1:92:0C:40:9B:53:94:89:41:EC:E9:11:19
X509v3 Authority Key Identifier:
keyid:8B:24:D8:4B:FF:4C:92:17:D1:DE:FA:5D:D3:34:C8:C8:53:22:6A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyTYS_9MkhfR3vpd0zTIyFMiams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/uv1ygUlcXrGSDECbU5SJQezpERk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b569be-543a-4b59-8ad0-6560ce4ad06d/1/iyTYS_9MkhfR3vpd0zTIyFMiams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.60.0/22
Signature Algorithm: sha256WithRSAEncryption
98:36:2b:5a:35:64:b0:c3:a7:16:6f:7e:e5:65:87:52:7f:fa:
1a:84:91:bb:40:b3:ac:22:db:86:f8:c9:91:ee:6a:e2:4c:51:
30:6f:03:13:2c:03:8a:f8:ee:6e:8e:80:73:97:59:5a:11:81:
ce:11:c0:f4:5f:66:36:37:b1:b9:8f:65:3b:17:b7:a1:58:f1:
fa:73:5e:b2:20:bd:70:85:9c:e2:3c:4d:48:bb:65:bc:c5:2a:
b4:40:79:6d:07:7c:85:81:e3:8e:f6:c4:2e:88:ea:35:4d:68:
f2:bb:5f:ec:80:37:84:3b:59:77:a6:60:24:70:50:90:fe:e9:
63:e2:ff:88:e1:15:3b:31:53:83:47:a3:45:9d:ff:4a:cb:3d:
0a:62:58:6a:03:a4:9c:77:57:f4:52:39:9d:55:d1:9b:1e:fa:
da:62:fe:73:25:2a:8a:af:c8:17:05:41:c6:b0:92:e8:fc:04:
11:67:e8:ca:4a:7f:c3:9a:ce:c3:89:dc:6b:c7:08:45:31:36:
50:92:cc:12:2b:4c:f3:d2:f8:35:5c:0f:a0:d0:1d:2a:cf:b1:
7f:fa:d0:31:d2:00:1b:bc:69:c7:b4:7c:3d:ac:a0:51:1e:4e:
1b:91:9e:f6:2f:8e:20:f5:40:51:62:87:11:a8:36:6a:8e:ae:
e8:35:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:56 2026 by rpki-client