This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa
File: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (raw, json)
Hash identifier: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=
Subject key identifier: C3:2E:B2:6C:27:5C:59:E7:40:8B:83:2D:DE:2C:40:03:B3:D2:E5:AD
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 019B79ED41768FEFE0B4C3C7E536F914C8E7
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa
Signing time: Thu 01 Jan 2026 14:19:10 +0000
ROA not before: Thu 01 Jan 2026 14:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200678
IP address blocks: 185.247.28.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:41:76:8f:ef:e0:b4:c3:c7:e5:36:f9:14:c8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jan 1 14:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c32eb26c275c59e7408b832dde2c4003b3d2e5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:08:05:3c:cb:09:2d:4c:cc:0b:f2:29:db:
46:c5:8b:87:64:f5:46:bc:a6:e5:cd:7b:c4:a6:57:
5d:e4:cc:9e:cd:73:8a:27:27:c0:cc:e3:fe:e0:41:
96:2a:34:33:79:7a:b3:fa:fe:97:00:27:a2:d2:51:
d1:7a:11:6c:2c:80:f8:5e:53:ff:bf:d7:e1:80:58:
99:c4:d7:bd:98:d9:7e:92:c4:08:7f:f3:9b:b3:75:
92:bd:4f:88:18:44:30:3a:55:60:2d:a2:20:44:1c:
55:ef:26:18:9d:ce:4b:46:29:8e:16:1b:7d:76:a6:
6a:7c:98:e9:ca:33:2f:08:cf:9e:ab:93:ea:6d:38:
81:d9:e4:c9:30:57:6c:92:b6:a1:46:23:ae:a9:ef:
6c:58:ea:70:0f:c4:2c:40:9f:26:53:3e:2c:dd:86:
ff:8b:e4:e7:ce:51:e5:c0:b7:5b:56:ff:34:b2:48:
a8:57:8b:fb:c0:82:08:2a:b1:ee:84:7d:67:b6:9c:
4a:97:4c:4b:a7:86:f3:c9:90:7c:34:b1:fe:bf:cc:
d9:4a:ec:c7:49:59:ce:4d:17:b0:c0:9a:6a:32:b7:
b4:dd:6d:dc:00:73:f2:e6:02:1a:b2:9f:de:8b:fc:
51:4c:c8:13:cb:48:31:9e:3c:0f:62:32:a8:bc:cc:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:B2:6C:27:5C:59:E7:40:8B:83:2D:DE:2C:40:03:B3:D2:E5:AD
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.28.0/22
Signature Algorithm: sha256WithRSAEncryption
df:64:bc:f6:42:d4:a0:82:8e:f4:50:7c:09:ae:cb:0e:46:47:
c3:bf:28:34:1f:f5:64:8c:a2:a3:e7:10:d4:50:7d:fa:4a:2e:
aa:bc:b3:eb:b2:e9:24:f8:c0:0d:5b:07:ec:03:c0:0b:07:82:
cc:13:d4:db:3c:ad:c3:3b:20:5e:20:fe:04:6a:d1:39:f3:8d:
35:83:83:69:31:9c:84:61:ac:a1:5a:71:31:65:3e:3d:1c:98:
e6:0f:f1:5b:52:d8:89:8b:c7:04:49:5b:ac:4c:f9:fc:da:e8:
50:05:a9:0a:15:43:4b:f9:1e:56:97:a7:9c:2d:a0:88:ca:9e:
a9:b9:09:eb:8d:be:87:f5:0b:8c:2b:c7:c7:e6:48:8a:37:3c:
0a:fb:be:f6:00:55:45:84:99:4f:ab:06:cf:7c:62:46:09:15:
f8:ad:a2:46:6d:20:81:ac:45:b8:77:aa:44:8b:9e:63:62:9b:
0b:f2:0b:52:7a:8f:f2:c4:49:69:22:11:ae:e6:3d:20:49:84:
97:37:1a:eb:aa:31:a5:5b:aa:29:09:ec:57:e0:0d:b5:df:5b:
93:52:e3:cd:b6:8c:1a:8b:e3:21:06:77:9e:97:88:a6:a4:e6:
37:44:1a:a6:ee:ee:4b:06:a7:ae:fc:00:46:da:e6:3c:ad:6a:
44:9d:93:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:36:16 2026 by rpki-client