This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/m35mxfiiz904INQeQIrVDjuOzJw.roa
File: m35mxfiiz904INQeQIrVDjuOzJw.roa (raw, json)
Hash identifier: i+J1jgfb7rEYgW3Y5tYB7Y9arIQtP02Ur8/LX7WJu3Y=
Subject key identifier: 9B:7E:66:C5:F8:A2:CF:DD:38:20:D4:1E:40:8A:D5:0E:3B:8E:CC:9C
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 019B7AC921D58B1820BB8817FD0CE7EF9307
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/m35mxfiiz904INQeQIrVDjuOzJw.roa
Signing time: Thu 01 Jan 2026 18:19:20 +0000
ROA not before: Thu 01 Jan 2026 18:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204415
IP address blocks: 185.148.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:21:d5:8b:18:20:bb:88:17:fd:0c:e7:ef:93:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: Jan 1 18:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b7e66c5f8a2cfdd3820d41e408ad50e3b8ecc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:94:60:31:39:4a:68:27:7d:de:c1:9e:dc:
47:c2:da:7f:0e:fd:01:d9:2a:f9:c5:fd:2e:50:83:
2b:52:db:f1:2c:22:54:9a:f5:5e:70:29:73:f9:52:
4c:9c:b9:1f:33:a1:4f:83:8d:25:f7:07:65:11:53:
e3:4e:98:22:0e:62:fc:18:e6:dc:45:8d:fa:16:d1:
a3:8f:40:42:fb:eb:77:c9:a4:65:be:ae:3d:d4:59:
5c:17:21:d0:64:b3:8b:a1:3a:5b:db:aa:0e:b8:4e:
d9:6e:ab:9d:b5:f9:44:e0:57:cb:4d:1f:4d:f1:f7:
ed:86:d9:a0:ac:a2:da:b0:7d:1f:e8:08:09:05:5b:
ae:10:91:c4:cb:43:48:7a:e5:60:5a:fb:3e:5d:ed:
0b:e9:eb:c2:f9:df:95:58:65:3f:d7:16:47:d4:b0:
83:69:93:4b:63:87:df:51:a8:53:ec:36:e1:3c:42:
77:90:5f:f8:12:9c:a7:4f:a1:71:91:32:65:b2:b2:
25:e1:db:fb:57:b7:13:2b:78:4a:ed:3a:c2:d5:40:
96:b6:0a:9b:f7:7d:16:ef:89:91:92:72:24:14:64:
42:69:94:0d:af:81:da:ad:2e:8c:1f:b3:06:88:a4:
f6:57:2f:c6:e9:e3:6f:96:f3:c0:c0:b3:05:a8:dc:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7E:66:C5:F8:A2:CF:DD:38:20:D4:1E:40:8A:D5:0E:3B:8E:CC:9C
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/m35mxfiiz904INQeQIrVDjuOzJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:89:3d:3b:a4:b2:b7:25:4b:b9:67:9a:83:ec:08:a5:23:a5:
55:37:e2:cd:db:8f:79:1f:bd:69:68:b2:0b:cd:05:5f:47:0d:
1d:0d:5a:1f:f4:e7:86:e1:44:7d:eb:1f:4d:42:25:62:6d:81:
15:b3:e8:d5:12:0c:70:ba:2e:c4:a6:79:96:c8:17:2e:30:b2:
e5:6c:b2:38:ac:74:2c:05:ba:57:e1:a3:b7:77:35:f3:8d:0a:
66:8f:f0:7a:f5:38:cf:f5:de:27:ba:23:83:46:ad:2d:0b:a3:
70:8b:04:68:30:3d:ec:1d:e5:cc:a5:2c:fe:10:bd:37:8f:e7:
60:d8:4a:69:ec:07:65:1a:a4:f8:3d:48:70:e3:96:35:20:31:
da:0a:e7:a6:fc:66:b8:53:8b:8c:94:4f:01:89:a0:b5:34:a1:
d6:7c:26:29:e1:83:1d:c7:1c:e0:5b:72:2a:27:48:80:e8:03:
93:49:24:38:22:83:aa:cc:72:b5:d0:d2:a4:a3:cd:bb:f0:95:
c7:a6:4a:e2:c7:58:7e:06:d3:86:96:c6:ce:0e:90:ba:08:fb:
05:2d:15:1f:91:20:5e:59:81:c0:0f:71:4c:e6:eb:49:82:c4:
29:21:b4:4b:73:30:bf:34:9b:c8:89:a2:00:8e:cd:bb:c1:a6:
1f:70:53:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6ySHVixggu4gX/Qzn75MHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjdlNjZjNWY4YTJjZmRkMzgyMGQ0MWU0MDhhZDUwZTNiOGVjYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6uUYDE5Smgnfd7BntxHwtp/Dv0B
2Sr5xf0uUIMrUtvxLCJUmvVecClz+VJMnLkfM6FPg40l9wdlEVPjTpgiDmL8GObc
RY36FtGjj0BC++t3yaRlvq491FlcFyHQZLOLoTpb26oOuE7ZbqudtflE4FfLTR9N
8ffthtmgrKLasH0f6AgJBVuuEJHEy0NIeuVgWvs+Xe0L6evC+d+VWGU/1xZH1LCD
aZNLY4ffUahT7DbhPEJ3kF/4EpynT6FxkTJlsrIl4dv7V7cTK3hK7TrC1UCWtgqb
930W74mRknIkFGRCaZQNr4HarS6MH7MGiKT2Vy/G6eNvlvPAwLMFqNziVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJt+ZsX4os/dOCDUHkCK1Q47jsycMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvbTM1bXhmaWl6OTA0SU5RZVFJclZEanVPekp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZQSMA0G
CSqGSIb3DQEBCwUAA4IBAQCaiT07pLK3JUu5Z5qD7AilI6VVN+LN2495H71paLIL
zQVfRw0dDVof9OeG4UR96x9NQiVibYEVs+jVEgxwui7EpnmWyBcuMLLlbLI4rHQs
BbpX4aO3dzXzjQpmj/B69TjP9d4nuiODRq0tC6NwiwRoMD3sHeXMpSz+EL03j+dg
2Epp7AdlGqT4PUhw45Y1IDHaCuem/Ga4U4uMlE8BiaC1NKHWfCYp4YMdxxzgW3Iq
J0iA6AOTSSQ4IoOqzHK10NKko8278JXHpkrix1h+BtOGlsbODpC6CPsFLRUfkSBe
WYHAD3FM5utJgsQpIbRLczC/NJvIiaIAjs27waYfcFMa
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:54:07 2026 by rpki-client