This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/_Yb8JcsvPd5H288TFLWZS-_6c4c.roa
File: _Yb8JcsvPd5H288TFLWZS-_6c4c.roa (raw, json)
Hash identifier: 2sMxss7BEP8Ir/J7oOQyWTF2Jp8rk3pLE/ynTqG7PTo=
Subject key identifier: FD:86:FC:25:CB:2F:3D:DE:47:DB:CF:13:14:B5:99:4B:EF:FA:73:87
Certificate issuer: /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial: 019B7D5C89831E84DAB7FF2C937BC0196E59
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/_Yb8JcsvPd5H288TFLWZS-_6c4c.roa
Signing time: Fri 02 Jan 2026 06:19:35 +0000
ROA not before: Fri 02 Jan 2026 06:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200798
IP address blocks: 185.95.208.0/22 maxlen: 24
2a05:fc00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:89:83:1e:84:da:b7:ff:2c:93:7b:c0:19:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Validity
Not Before: Jan 2 06:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd86fc25cb2f3dde47dbcf1314b5994beffa7387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:66:76:f1:0c:2e:1f:bf:21:18:c3:c6:51:
8e:4c:49:a8:c4:e8:3f:83:e4:0e:00:9b:85:48:1d:
8f:ab:d4:dc:22:a0:15:5b:50:3d:b6:c2:2a:93:b6:
f8:58:af:2b:c4:16:83:9c:10:7d:b4:02:b9:5b:3f:
a1:02:ca:a5:ba:be:70:6d:2a:7a:99:42:60:67:ca:
5f:b3:ce:72:bd:c2:a7:28:6b:c5:73:5c:54:4d:83:
15:18:db:71:0e:8c:3e:c3:22:13:e1:15:8d:d7:58:
35:6c:4a:bd:af:0a:ff:f4:cb:37:79:98:9d:36:a2:
47:66:ad:be:e9:54:1b:ca:2f:35:53:7a:86:8b:2a:
a2:8c:b2:d3:b5:e0:24:fb:3e:95:87:3a:a5:d4:4e:
ad:02:f0:92:69:33:e5:39:76:87:1b:09:06:9b:0d:
1e:ef:cb:1c:b5:12:27:54:d4:9d:2f:bc:b9:97:45:
cc:6a:7d:fe:34:d2:c8:87:58:20:ae:3b:74:ed:95:
f2:ec:a3:9f:03:26:bb:cd:32:97:3f:e1:4b:e8:f9:
62:bb:03:46:77:16:b4:68:36:06:af:89:78:57:8b:
2d:6c:29:21:b6:af:10:92:c1:0e:ec:77:01:f6:22:
4e:d8:a9:2f:e5:e5:9a:7e:95:11:02:33:f9:70:1f:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:FC:25:CB:2F:3D:DE:47:DB:CF:13:14:B5:99:4B:EF:FA:73:87
X509v3 Authority Key Identifier:
keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/_Yb8JcsvPd5H288TFLWZS-_6c4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.208.0/22
IPv6:
2a05:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
99:71:6e:83:22:56:6b:34:e7:59:fa:99:68:0d:9e:ac:cc:00:
02:78:78:29:7c:82:82:8b:2c:46:45:c8:78:92:df:c4:5a:f2:
a8:15:e0:53:29:1d:be:7f:9b:79:f0:5a:07:5b:60:b4:96:57:
68:9e:02:82:6b:bb:15:fe:e5:58:1b:fd:58:86:02:f7:0d:3a:
65:e7:44:26:7a:4f:bb:f4:6a:2b:a7:a5:d6:b2:c2:29:db:65:
34:46:0d:38:eb:c4:73:a1:5c:67:a9:90:3c:52:7a:8d:c7:e2:
71:04:ed:5b:d4:ee:50:9e:99:6a:b6:22:9c:40:ce:39:e9:0f:
49:20:15:89:4e:85:07:91:5b:2c:a7:87:ed:5e:96:ca:89:9a:
b2:a7:13:ed:8a:0d:1c:70:ac:50:c7:6d:fd:ad:2b:47:f4:18:
b7:f1:84:b5:29:92:93:c2:60:6e:40:7c:0e:85:40:24:fb:d9:
f8:ce:dd:9b:6b:c3:bc:68:c0:c2:a0:fc:e6:f0:52:53:93:4e:
72:23:41:e7:5a:fd:12:93:16:ff:df:b7:1d:18:94:da:e5:89:
5e:0a:22:fe:4c:ed:5b:8b:f9:7c:6a:7e:ab:ca:03:c0:36:62:
f0:ce:20:08:c9:41:da:79:c7:af:f0:d5:c4:f5:14:ce:59:9a:
7a:b7:d8:1f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt9XImDHoTat/8sk3vAGW5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q5ZjFiYzNmMGQ5MGI2ZGNkMWU5ZjZmZDFlNTA2MTg4
ZWE3YzIwHhcNMjYwMTAyMDYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDg2ZmMyNWNiMmYzZGRlNDdkYmNmMTMxNGI1OTk0YmVmZmE3Mzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrJmdvEMLh+/IRjDxlGOTEmoxOg/
g+QOAJuFSB2Pq9TcIqAVW1A9tsIqk7b4WK8rxBaDnBB9tAK5Wz+hAsqlur5wbSp6
mUJgZ8pfs85yvcKnKGvFc1xUTYMVGNtxDow+wyIT4RWN11g1bEq9rwr/9Ms3eZid
NqJHZq2+6VQbyi81U3qGiyqijLLTteAk+z6Vhzql1E6tAvCSaTPlOXaHGwkGmw0e
78sctRInVNSdL7y5l0XMan3+NNLIh1ggrjt07ZXy7KOfAya7zTKXP+FL6PliuwNG
dxa0aDYGr4l4V4stbCkhtq8QksEO7HcB9iJO2Kkv5eWafpURAjP5cB+NAwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP2G/CXLLz3eR9vPExS1mUvv+nOHMB8GA1UdIwQY
MBaAFLU9nxvD8NkLbc0en2/R5QYYjqfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAt
YzllMTQxMzMzZDU4LzEvX1liOEpjc3ZQZDVIMjg4VEZMV1pTLV82YzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAtYzllMTQxMzMzZDU4
LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuV/QMA0E
AgACMAcDBQMqBfwAMA0GCSqGSIb3DQEBCwUAA4IBAQCZcW6DIlZrNOdZ+ploDZ6s
zAACeHgpfIKCiyxGRch4kt/EWvKoFeBTKR2+f5t58FoHW2C0lldongKCa7sV/uVY
G/1YhgL3DTpl50Qmek+79Gorp6XWssIp22U0Rg0468RzoVxnqZA8UnqNx+JxBO1b
1O5QnplqtiKcQM456Q9JIBWJToUHkVssp4ftXpbKiZqypxPtig0ccKxQx239rStH
9Bi38YS1KZKTwmBuQHwOhUAk+9n4zt2ba8O8aMDCoPzm8FJTk05yI0HnWv0Skxb/
37cdGJTa5YleCiL+TO1bi/l8an6rygPANmLwziAIyUHaecev8NXE9RTOWZp6t9gf
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:09 2026 by rpki-client