This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/M-v28PFLiT56tATmxh_dxjXIz48.roa
File: M-v28PFLiT56tATmxh_dxjXIz48.roa (raw, json)
Hash identifier: wk4xU/TxE3WuvzAmyr1klkvnIlWP+ZayRu5Ot8is1ek=
Subject key identifier: 33:EB:F6:F0:F1:4B:89:3E:7A:B4:04:E6:C6:1F:DD:C6:35:C8:CF:8F
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019B7F8448186515C79AF7CB75A942976F8E
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/M-v28PFLiT56tATmxh_dxjXIz48.roa
Signing time: Fri 02 Jan 2026 16:22:14 +0000
ROA not before: Fri 02 Jan 2026 16:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61029
IP address blocks: 185.227.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:48:18:65:15:c7:9a:f7:cb:75:a9:42:97:6f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 16:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33ebf6f0f14b893e7ab404e6c61fddc635c8cf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:82:d5:40:87:74:9b:4c:24:86:c3:3e:85:
4f:f7:ca:6c:0f:e3:a3:28:4e:63:86:dc:42:1a:c7:
29:ae:39:1a:02:38:51:42:ed:a1:68:d7:b6:cb:a4:
ed:f3:20:10:44:42:91:f3:d4:50:a4:db:32:29:67:
92:eb:ef:29:85:70:48:8a:58:23:04:73:60:6c:04:
79:96:90:6e:81:59:48:97:80:98:76:0a:b4:92:69:
94:1e:70:3d:7c:95:49:8b:25:ad:14:8e:5b:3f:86:
b6:ef:0d:8f:91:b3:3c:91:79:03:37:d8:e7:64:aa:
2b:3e:6e:52:65:e2:cd:91:5f:b6:fa:0f:92:ff:6f:
10:0d:03:e1:a2:cc:23:a1:08:7e:4a:ce:b6:31:63:
01:b7:07:99:db:c8:a3:d3:74:92:f5:7b:11:14:78:
71:68:23:8e:97:04:3a:f8:22:be:86:06:6c:8b:52:
61:5b:04:4b:26:9a:a5:2e:43:ef:04:ed:96:fa:b8:
10:79:1c:7e:29:34:68:ee:28:eb:c9:89:5d:cb:c5:
41:d9:ee:6b:65:ea:8c:84:1d:2e:f6:0c:4f:39:b6:
49:5a:08:26:b5:e7:cd:53:47:d1:d3:df:8d:c6:da:
b9:8a:e8:a2:dc:e5:d5:b3:b9:09:e9:ae:ed:73:38:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:F6:F0:F1:4B:89:3E:7A:B4:04:E6:C6:1F:DD:C6:35:C8:CF:8F
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/M-v28PFLiT56tATmxh_dxjXIz48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.80.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3a:5d:23:4c:24:f3:77:43:fb:92:db:86:83:5b:dc:96:1e:
5a:fb:ef:1a:d7:cc:6a:e2:b4:4f:af:b3:5f:1b:bd:40:bb:61:
74:25:92:29:fe:8c:4b:c4:14:f4:b3:18:c8:d9:93:e6:d2:c4:
fd:6b:fe:cc:c8:2a:e4:47:c8:c8:71:eb:4b:33:d7:6c:47:5d:
fe:04:0f:14:01:e3:c5:c0:19:80:62:64:3d:ca:53:7a:fc:7d:
42:34:31:14:20:12:df:70:81:fd:0b:d6:b0:0b:83:e6:78:d8:
99:ab:11:69:b8:a3:ce:20:7f:2c:48:93:30:e6:c7:0b:8b:81:
4a:4e:2e:88:bf:5b:98:5b:c1:69:89:36:43:6e:58:b0:dc:96:
ee:14:6d:d0:0f:f7:23:75:77:00:3e:a6:80:60:3e:d2:f1:25:
b2:c1:c3:ba:3d:e2:6d:38:ba:ec:97:b2:de:67:f6:3a:12:8f:
ac:be:b4:bd:42:5c:db:bc:e6:4b:0c:12:d3:16:f6:5d:89:25:
c0:19:9a:30:1b:d1:54:92:94:f8:3b:1d:c8:9f:b1:4c:67:0c:
e9:4e:fd:41:50:15:36:40:98:52:61:84:6c:ea:cc:72:4f:95:
75:e8:c2:c3:c7:cc:5c:77:13:15:9b:e5:d4:71:10:09:b3:28:
2b:33:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:59:08 2026 by rpki-client