This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w_byyxtaqH-Fbt56pu4riaRY_RE.roa
File: w_byyxtaqH-Fbt56pu4riaRY_RE.roa (raw, json)
Hash identifier: yOwcaIx5yatxu1jTA5CWtiNMqBWxRDju2OA7l6LVOJo=
Subject key identifier: C3:F6:F2:CB:1B:5A:A8:7F:85:6E:DE:7A:A6:EE:2B:89:A4:58:FD:11
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B302723F7AA0A410B6CE5875CFAE7CF0F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w_byyxtaqH-Fbt56pu4riaRY_RE.roa
Signing time: Thu 18 Dec 2025 06:30:30 +0000
ROA not before: Thu 18 Dec 2025 06:30:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50190
IP address blocks: 85.120.226.0/24 maxlen: 24
85.120.227.0/24 maxlen: 24
85.120.228.0/24 maxlen: 24
85.120.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:30:27:23:f7:aa:0a:41:0b:6c:e5:87:5c:fa:e7:cf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 18 06:30:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3f6f2cb1b5aa87f856ede7aa6ee2b89a458fd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:8c:be:ee:dc:5f:96:db:d7:db:16:03:ad:
83:10:ae:d8:d4:0e:54:02:2b:27:d1:f3:4d:d7:04:
30:0e:4f:26:62:19:7d:fb:7f:5e:19:48:3b:22:71:
d4:8c:bd:55:9f:b9:79:f0:63:ff:d5:24:7b:ea:d1:
25:2c:fa:b4:31:da:a6:da:50:96:57:27:a6:0e:cf:
02:50:5d:69:5a:d3:42:0e:ca:fc:4a:88:e0:ea:51:
17:98:b2:f1:6f:f3:92:99:d3:c5:2b:6f:ed:0f:a8:
82:4f:a2:3e:14:20:f4:67:eb:7f:19:a2:a1:c5:fe:
e7:ad:6a:1a:ac:c0:37:68:bb:66:28:0e:57:73:7f:
ac:a6:86:ff:19:dc:e6:c6:2a:b7:2f:60:f2:c7:a2:
b7:57:82:e2:60:8f:b5:c4:2f:5f:28:5f:2a:14:70:
53:39:2c:18:77:61:95:20:55:59:cb:7b:a8:27:7e:
51:28:73:de:0e:ee:56:44:e5:b6:ee:8d:85:1e:2a:
a5:31:da:f2:da:6c:80:23:46:2b:b9:33:97:62:62:
61:90:7c:0b:3c:46:60:0d:d4:1e:9f:a4:cb:bb:ff:
e2:7c:84:7a:1b:c9:30:b1:fe:c7:d2:9e:1b:67:f0:
07:f1:2d:56:08:b4:4d:7d:a0:7a:a3:a3:bd:6e:b9:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F6:F2:CB:1B:5A:A8:7F:85:6E:DE:7A:A6:EE:2B:89:A4:58:FD:11
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w_byyxtaqH-Fbt56pu4riaRY_RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.226.0-85.120.229.255
Signature Algorithm: sha256WithRSAEncryption
1d:86:a3:57:f3:f2:fa:d6:5a:2f:37:ae:5b:09:de:af:ad:60:
8e:fc:30:69:59:0e:17:89:41:c6:da:6c:67:c0:b7:6b:09:23:
79:40:c3:07:a2:a5:18:38:89:0d:93:5b:de:93:83:62:06:c9:
e4:23:98:b9:cc:ba:69:35:db:0f:8f:02:36:45:b3:b8:5d:0d:
bd:b4:d1:81:55:a0:c6:b7:70:45:f0:01:b3:47:05:4c:f6:43:
c7:be:3c:08:6b:83:13:3b:65:a3:a5:f1:b0:d2:b2:c5:31:fc:
b2:9d:d3:3e:fb:84:26:fa:22:0d:48:92:43:51:2b:fa:6b:12:
a6:2f:70:9b:3a:92:6a:fd:54:20:1b:8f:f2:ef:b8:05:11:fc:
90:e8:cc:e4:0c:64:97:49:66:9e:0d:e5:1a:e6:f4:81:b1:17:
9d:e2:1d:70:05:90:ff:d9:3b:e8:c5:c5:36:ce:e2:c0:86:7f:
49:1b:ae:c9:fb:95:c9:69:f5:53:00:21:b5:f6:2a:1b:be:49:
2a:d3:db:5b:b2:30:80:79:b8:4c:aa:04:e0:ec:9c:76:c0:d2:
e3:6f:dd:02:73:71:01:6e:46:61:bd:27:0f:6d:ce:f5:38:7c:
1d:f1:e3:ca:3a:f6:4d:a8:a0:f6:8e:ea:72:2c:1f:d3:87:57:
4c:83:43:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:43:33 2025 by rpki-client