This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/pe0sIN9uxCEQg_N5LyvmyCfM-KE.roa
File: pe0sIN9uxCEQg_N5LyvmyCfM-KE.roa (raw, json)
Hash identifier: 8haolzzXzMK5Ree7VnOnzT/y6HtcVT6TIJ87cWxWyqY=
Subject key identifier: A5:ED:2C:20:DF:6E:C4:21:10:83:F3:79:2F:2B:E6:C8:27:CC:F8:A1
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 019C203BB4D7764CEE17B0F3B610BED707C8
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/pe0sIN9uxCEQg_N5LyvmyCfM-KE.roa
Signing time: Mon 02 Feb 2026 21:21:49 +0000
ROA not before: Mon 02 Feb 2026 21:21:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207160
IP address blocks: 185.98.25.0/24 maxlen: 24
2a14:d100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:20:3b:b4:d7:76:4c:ee:17:b0:f3:b6:10:be:d7:07:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Feb 2 21:21:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5ed2c20df6ec4211083f3792f2be6c827ccf8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:8f:61:ea:a1:4e:44:72:d2:94:c5:f6:fe:
57:2f:e8:ef:c3:52:10:c5:16:9e:ce:e9:bb:07:f2:
1c:1f:1c:63:eb:29:8f:a0:f6:15:c8:0a:98:cf:d0:
36:3e:76:da:37:1a:e1:6e:7f:84:2f:e4:b0:fa:90:
73:c4:8e:74:2c:06:90:3c:d9:94:05:d4:5e:86:7e:
89:47:30:38:8e:22:59:24:fe:af:29:f1:23:a5:cd:
ee:22:e9:c7:74:99:73:d8:f4:c9:73:92:68:6f:b7:
45:8d:d3:1f:60:0f:e2:ee:cc:00:78:55:86:f2:c5:
54:a7:9b:77:17:50:fa:85:26:af:e5:e3:70:57:73:
8e:e5:b6:79:19:fb:09:2a:ab:61:17:7a:d6:0b:8b:
7a:fa:fd:5b:52:9b:99:06:d2:37:7b:63:a9:6e:cc:
bb:52:d0:db:ef:0d:36:4e:0e:bc:42:35:3e:06:3d:
b4:2f:46:88:c6:37:0d:15:a1:0c:8d:1e:30:6a:c7:
1e:90:94:51:59:07:4a:cf:18:9e:bb:35:27:51:a0:
1d:8e:9a:4e:c0:65:29:51:9b:ac:c9:2b:8a:91:27:
fb:47:c8:20:29:2d:b4:0d:8c:85:2e:4d:58:bb:51:
dd:29:58:f7:17:6d:29:d0:92:8e:e3:8d:a5:7a:1a:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:ED:2C:20:DF:6E:C4:21:10:83:F3:79:2F:2B:E6:C8:27:CC:F8:A1
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/pe0sIN9uxCEQg_N5LyvmyCfM-KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.25.0/24
IPv6:
2a14:d100::/32
Signature Algorithm: sha256WithRSAEncryption
47:17:2d:0e:21:7a:11:ab:3e:fe:85:fd:fc:86:12:dd:67:6d:
4d:af:d6:75:07:d5:ae:20:47:5c:ab:06:d1:80:dd:d1:26:f7:
f1:f5:11:e8:5b:88:b3:91:bb:aa:27:36:36:72:9a:e9:5e:d8:
72:90:f7:49:8d:06:e2:ca:c2:57:71:87:2f:2b:25:03:30:63:
e5:ad:a2:c3:1e:6c:34:38:b2:09:4a:0c:07:f7:04:80:83:5c:
63:a2:ad:27:ea:59:1b:80:80:60:8e:3c:aa:d9:36:dc:a3:ae:
5b:34:44:59:77:ee:6f:12:58:61:72:ed:11:28:d0:ef:41:51:
e9:47:a2:55:66:e6:60:9d:af:8f:5b:91:58:df:3a:dc:4b:34:
a2:e5:af:82:24:38:42:90:39:96:8a:3e:4a:be:b9:76:59:b1:
ce:ae:63:c5:cd:58:fd:5b:66:ee:c8:92:9d:d7:ba:aa:5c:e8:
59:ca:63:c4:39:56:f5:c4:58:79:ce:6d:d8:f2:fb:21:08:c1:
4b:eb:71:7b:dd:0d:23:93:4d:01:b3:8b:de:61:c0:69:48:cd:
ae:64:89:67:fb:68:36:44:b2:b8:c1:e0:b0:3e:59:bc:51:dc:
ea:67:02:a0:cd:ee:30:c1:2e:a5:c2:f3:92:39:68:6c:ed:3c:
bb:08:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:24 2026 by rpki-client