This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/EDfGdXD_QaDdDvPnqhrvC92yjIc.roa
File: EDfGdXD_QaDdDvPnqhrvC92yjIc.roa (raw, json)
Hash identifier: wujlh71uYD/kWs0oGtjj3GOq8+eY7xmXla1itoFj1Pk=
Subject key identifier: 10:37:C6:75:70:FF:41:A0:DD:0E:F3:E7:AA:1A:EF:0B:DD:B2:8C:87
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B3589C9B38230B705F665D8A33B7FB4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/EDfGdXD_QaDdDvPnqhrvC92yjIc.roa
Signing time: Thu 01 Jan 2026 20:17:44 +0000
ROA not before: Thu 01 Jan 2026 20:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199513
IP address blocks: 85.120.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:89:c9:b3:82:30:b7:05:f6:65:d8:a3:3b:7f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1037c67570ff41a0dd0ef3e7aa1aef0bddb28c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:76:d4:4c:5a:43:7c:40:46:bc:ad:ae:47:
5e:4a:9c:3e:d3:58:7a:dd:b5:fe:14:ac:ec:da:98:
ed:be:66:b4:7d:6b:ea:b4:77:89:16:ed:5e:b7:78:
cc:d2:97:4a:0a:7b:dc:fb:d7:b4:23:0f:5f:bd:c3:
d6:8d:d3:09:4d:92:5f:f9:cd:c1:73:ba:99:96:20:
4b:50:bb:e8:7c:dc:48:96:e6:69:4e:50:22:53:4f:
ae:e8:fd:d1:5a:78:da:99:9c:64:a2:a1:e5:e6:3d:
29:8d:22:fd:71:4f:a8:5e:ab:dd:8a:fd:28:5f:a0:
6d:56:ee:90:2b:14:0b:dc:55:87:20:b8:3d:d9:93:
63:07:06:8a:d1:4b:66:e0:f6:92:5d:55:05:f9:55:
fc:02:f8:e8:f4:12:45:1e:91:f5:a2:d4:94:04:b7:
9f:45:4d:67:6d:5c:92:ff:a3:30:6e:e8:1b:4b:bf:
5c:70:60:0a:05:ae:88:bc:b1:b0:72:c5:82:de:15:
cd:71:63:b5:40:44:6d:6f:ac:92:63:cd:f0:14:c4:
0d:f3:f6:20:4c:05:d4:ee:09:cc:24:b5:14:84:4d:
78:4c:5c:db:6a:68:e2:03:b3:69:b7:4a:9e:73:de:
88:00:ce:7b:53:9b:10:62:5e:c7:40:ad:67:8a:10:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:C6:75:70:FF:41:A0:DD:0E:F3:E7:AA:1A:EF:0B:DD:B2:8C:87
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/EDfGdXD_QaDdDvPnqhrvC92yjIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:7a:03:b3:69:f7:eb:57:0e:ad:40:63:49:06:d1:76:39:86:
23:ae:f4:50:10:56:90:5e:49:08:d5:1a:4b:4a:f6:25:d2:96:
e9:e8:91:e4:27:63:f2:98:71:bd:db:93:42:a0:79:ac:fc:48:
93:e8:a2:ba:09:6d:81:d7:13:90:08:ca:05:ee:d0:f2:f4:ac:
ad:ad:a0:92:a4:56:ea:d4:46:4d:c8:c2:78:39:dd:ff:10:f7:
52:d4:ab:f5:e5:5a:89:49:7c:89:a3:df:81:45:7a:81:a4:03:
50:50:5c:e7:39:a9:8a:23:d0:e6:fd:01:1b:32:42:ac:d3:ec:
2b:be:ac:0f:52:18:e8:08:9f:3a:9c:3f:8e:f2:62:49:40:cb:
ea:02:f6:16:73:88:72:29:00:9f:f2:6d:2a:20:df:58:5b:a3:
00:44:95:4a:0b:4a:be:55:1e:c7:aa:8f:74:55:e9:be:0c:1d:
71:ed:f2:41:65:15:0c:57:1c:ad:7d:a7:8f:33:19:fb:62:e9:
f8:ac:ba:2c:c3:47:23:f7:2e:92:2c:f4:4a:03:a5:40:0f:ab:
0a:27:36:97:e0:67:53:0f:bf:64:b8:5c:51:e1:71:7d:2f:29:
5d:87:11:5e:c6:00:78:b0:2d:46:6b:66:dd:56:e5:a3:c2:f1:
f1:9e:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:06 2026 by rpki-client